Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          9vUdQZR+QyylRKJmZ+mlVWC0ZKnYGsbHHYAMIzXJW4o=
Subject key identifier:   22:4D:8F:BB:A3:BB:EC:91:B7:7D:3E:5F:FA:99:7B:CC:78:0D:FC:33
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       0195E1222524DD5D96435B33AF932D670413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          0355
Signing time:             Sat 29 Mar 2025 09:01:06 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:06 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:06 +0000
Files and hashes:         1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
                          2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
                          3: EaYbtvgAxC5woqEEVAOpbufum4I.roa (hash: 9yX+JRXc/o6dluIoM2HRuHDiv/h/ulHJufCzoxv25mY=)
                          4: HtZQ9IhFleDKqzR1bRiM63nxSGQ.roa (hash: lqYr1mh+Wc4qo/HHw+6TkhageNYpII8Xexx/Nr4T7xE=)
                          5: O21PmEESsHcWH1s73UbR7OXDyww.roa (hash: 3xNbtD0DThqqZ5mmtAKxAxa1GbzWkg09G7I1Ee+erXs=)
                          6: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
                          7: VGeviFC-kzNaF_TYc5WJ2Z_Erso.roa (hash: 7l23+yktDQAmS9vBRxGgqn26f5vVq0mYULgKBJNOAqM=)
                          8: h5BYEWL0RA6_fqzY1nzqzI4_Wyc.roa (hash: Z9gyuA6kyyq7KHEH+xNjxy2XNuEaMoFJxNM46RJpQaA=)
                          9: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: J1GIgPfWKXGNPOYEFrCGjFqJZBjuINQKWhzwbd9j/I0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:25:24:dd:5d:96:43:5b:33:af:93:2d:67:04:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Mar 29 09:01:06 2025 GMT
            Not After : Mar 30 09:01:06 2025 GMT
        Subject: CN=224d8fbba3bbec91b77d3e5ffa997bcc780dfc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:8b:ed:f5:ee:20:df:28:2a:3a:1b:ab:66:
                    fc:61:f5:d2:7d:73:c5:d3:2c:a2:e3:ed:a7:4a:e7:
                    cc:09:9c:7b:33:9e:24:14:30:87:59:81:0a:45:31:
                    9e:b1:c8:06:5d:48:ed:36:76:9c:5a:da:ca:bb:ed:
                    1d:91:aa:e5:9b:49:61:63:d6:f4:a3:05:cf:96:56:
                    96:06:93:46:fb:96:9f:1e:40:85:52:64:6f:bc:0a:
                    41:ad:83:d8:5d:5f:55:7e:82:0f:d3:d6:75:92:db:
                    b1:7a:f5:36:4c:e3:eb:c7:e2:87:c6:b4:32:fc:75:
                    f4:1d:31:a8:bb:d3:01:9e:9a:92:28:ce:68:ff:a8:
                    1b:14:e5:49:54:41:df:94:fb:a3:85:69:27:c2:39:
                    82:c5:a0:dd:21:5a:a7:76:46:20:80:6d:25:4b:a8:
                    89:a1:a6:c2:30:23:53:97:ed:b0:d3:25:ec:ca:32:
                    08:a2:31:d6:1b:02:0d:28:77:9b:d5:85:c9:f6:60:
                    7c:6e:8f:c9:9e:02:31:75:a8:cb:38:5b:58:02:09:
                    26:f6:dd:15:e5:7b:89:f4:4a:ee:e1:b8:17:a4:9f:
                    2e:ba:be:fe:ed:14:81:94:da:b8:53:2d:c2:a2:f3:
                    75:c7:ba:27:bf:ae:3e:7a:12:e9:19:32:f6:f9:5e:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:8F:BB:A3:BB:EC:91:B7:7D:3E:5F:FA:99:7B:CC:78:0D:FC:33
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ff:e2:9f:ca:db:36:77:16:0c:a1:8d:84:50:37:e4:8e:c5:
         b3:b4:a1:25:b2:1e:6b:15:35:6a:d5:b5:40:9a:aa:58:81:c2:
         6b:36:63:ad:1c:51:30:70:98:0c:5c:8a:5f:58:af:12:ce:35:
         6c:d2:67:3a:dc:bc:9b:68:d1:8d:39:d7:68:01:bf:83:c2:ad:
         1e:9b:4d:36:c8:e9:93:d1:4d:12:49:ed:e6:8b:fa:97:02:bb:
         39:7a:16:75:9a:f6:9b:c6:9a:40:93:f7:b3:f1:2a:c2:cf:fb:
         ec:19:60:a9:8a:be:4d:db:4b:5a:a8:04:f2:60:54:8e:0e:3f:
         42:d0:12:25:65:80:f4:7e:d4:17:43:8a:6e:99:fe:07:c3:fb:
         91:3b:c7:15:69:a1:58:16:9f:28:d9:06:32:7d:b4:da:ac:3b:
         6c:62:d3:30:b1:a6:23:16:e2:ae:2f:10:36:ca:c1:18:b7:6f:
         e5:17:40:c8:b0:94:34:7c:19:c9:be:e4:8f:a8:88:66:52:b6:
         19:da:d5:26:4b:2f:18:c9:a4:f3:b8:ef:e5:91:14:63:67:cb:
         8d:bc:c4:e8:15:cd:20:50:84:63:e3:c7:39:95:0e:20:99:ed:
         bd:bb:15:09:c0:76:46:52:d5:28:e7:45:c8:f1:85:75:5f:62:
         5f:cd:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----