Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File:                     WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier:          fsmKEkhTzeY7Cl9HAyItQ0f6xZWeTSOqlZEcXcgrcYI=
Subject key identifier:   2A:37:C0:D8:F6:33:B1:4D:4A:E3:B8:12:F1:C7:FD:77:09:E2:8D:26
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer:       /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial:       0195E00F4EF5E7E17FA66FBFFB304AA447C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number:          0293
Signing time:             Sat 29 Mar 2025 04:00:54 +0000
Manifest this update:     Sat 29 Mar 2025 04:00:54 +0000
Manifest next update:     Sun 30 Mar 2025 04:00:54 +0000
Files and hashes:         1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
                          2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: bcQx/oX59cQImqlTDSjEkYm+Tj+kZCr/nlTxPeW5vak=)
                          3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:4e:f5:e7:e1:7f:a6:6f:bf:fb:30:4a:a4:47:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
        Validity
            Not Before: Mar 29 04:00:54 2025 GMT
            Not After : Mar 30 04:00:54 2025 GMT
        Subject: CN=2a37c0d8f633b14d4ae3b812f1c7fd7709e28d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:58:b8:a7:ab:d3:06:87:15:a1:7d:0a:3c:
                    9f:58:74:23:1e:79:35:1d:5f:01:a4:7f:d8:13:1a:
                    29:66:e9:95:ea:fe:35:ff:7f:57:9f:ad:56:a3:d6:
                    3b:4d:f4:1f:a9:ca:2b:22:e5:c4:80:d4:37:41:c2:
                    7f:a3:47:b4:0e:a9:7f:1d:b3:f3:59:a7:fe:8a:f9:
                    a7:e8:03:05:51:df:c8:80:07:a6:9d:f3:1e:42:ef:
                    fc:96:33:e4:c8:21:11:88:11:e5:54:9a:75:58:b7:
                    2d:a7:cf:39:67:20:23:84:98:3b:f0:72:9d:f2:08:
                    60:95:da:3e:e1:f4:de:dd:88:75:9a:a9:8f:fc:c0:
                    9e:87:85:5d:26:dc:5b:e0:dd:35:78:ac:97:7b:2a:
                    58:fc:82:d1:1f:0f:4b:f9:ec:40:8a:f0:ee:a9:bf:
                    ab:6d:69:f8:98:4e:77:4c:ed:41:1f:61:8b:1f:69:
                    43:f7:42:f3:33:1e:97:87:05:c8:c7:d2:f0:02:a4:
                    c5:72:ba:37:59:c8:d0:26:ea:d2:4f:f2:44:69:3c:
                    d8:93:14:21:e1:4c:38:78:5f:ec:2a:96:15:c7:f9:
                    0b:22:77:32:2c:b7:66:47:29:41:60:bb:f7:d8:ca:
                    97:2a:f6:20:48:1c:1a:bf:09:df:f4:8d:31:1a:32:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:37:C0:D8:F6:33:B1:4D:4A:E3:B8:12:F1:C7:FD:77:09:E2:8D:26
            X509v3 Authority Key Identifier:
                keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a2:c3:a0:33:3a:8c:f7:20:7f:47:ab:d8:4f:a0:04:35:54:
         0b:4f:cb:b8:2b:a4:43:b1:5d:00:d8:24:91:6a:e0:e4:93:d7:
         a4:64:22:10:cc:d6:5b:8f:6a:1a:55:fa:b5:d6:eb:67:e2:9e:
         8d:ef:ac:1c:e8:12:dc:72:bb:83:e3:b8:8f:0f:d4:f3:13:29:
         d3:2b:6e:25:72:7e:b3:e6:bd:17:31:fb:87:b6:22:87:75:bd:
         3b:2a:2b:62:94:bd:22:5d:c1:67:d1:09:56:98:b5:cf:06:72:
         ad:05:6a:f6:d7:16:e1:4a:24:7b:3d:0c:04:c0:40:37:bd:8d:
         8c:0b:98:03:8f:a3:b8:e8:a0:65:2a:cf:85:2c:06:7f:c5:89:
         aa:ea:60:8e:f0:58:6e:a3:56:e5:2d:08:1c:bd:ea:82:0f:25:
         86:d6:58:08:a5:44:62:fc:14:96:4e:d7:07:89:67:d4:7a:3b:
         c0:3d:7d:24:8b:1c:52:fd:d2:39:e3:f2:85:6f:22:98:0f:5c:
         23:48:c2:00:fb:f0:56:42:78:39:03:ae:08:63:06:76:51:b3:
         0c:95:26:2d:0b:65:3e:3c:21:4f:1e:6c:90:d2:58:81:32:37:
         39:96:40:cb:ad:f2:0b:f6:76:b5:bc:0b:e3:68:04:1e:96:8d:
         cf:8e:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----