Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          ycQPZCq33ncFivHBnnSJm3xv29joDR3xZLhJFtXCQgQ=
Subject key identifier:   CC:D2:DF:88:B5:B7:8D:15:49:64:25:75:D2:18:AF:A8:2D:81:9B:80
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       0195E0EB57CC085DDC5EE81DA68A3A828948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 08:01:14 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:14 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:14 +0000
Files and hashes:         1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
                          2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: UiM0UsQ6hQ2p+er73Bdh6tCioJNrn5iTV95E7pvhotI=)
                          3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
                          4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
                          5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
                          6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:57:cc:08:5d:dc:5e:e8:1d:a6:8a:3a:82:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Mar 29 08:01:14 2025 GMT
            Not After : Mar 30 08:01:14 2025 GMT
        Subject: CN=ccd2df88b5b78d1549642575d218afa82d819b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:e6:85:68:c8:b5:cb:ad:7d:a9:b5:61:e8:
                    8e:72:99:dc:48:ad:90:09:0c:85:49:31:da:e0:b0:
                    f9:c6:62:f2:ff:e4:f3:e3:f3:39:c5:a6:33:ac:f1:
                    13:08:3d:e5:08:95:ac:27:ee:a7:5e:60:00:e6:da:
                    da:1f:99:0b:3a:91:ab:3f:da:32:56:60:9b:d9:5c:
                    2b:d1:ee:e5:4d:31:c0:65:8d:3d:b2:87:18:a6:a9:
                    af:7d:52:53:a7:0c:96:94:58:e8:bd:f9:ac:05:f3:
                    45:0c:c3:8f:2f:f2:7d:87:fd:c7:83:3c:e2:34:5a:
                    c3:17:1d:1a:d0:96:a8:fe:6f:00:5a:0c:6a:fc:79:
                    ca:32:06:ad:08:6f:3b:97:c8:fe:8a:8e:78:9c:e9:
                    f9:14:ac:9c:bd:e5:c1:f2:c8:5d:99:47:4c:89:f5:
                    f3:f9:cf:72:8a:7d:12:91:13:d4:4e:4c:98:c8:d2:
                    2b:45:a7:78:c3:c8:02:12:c4:a7:b0:83:51:51:91:
                    c1:86:ea:b0:41:97:ea:3b:0c:8c:15:14:89:76:1b:
                    2a:6d:43:02:2a:79:34:62:ab:1d:84:86:55:83:40:
                    86:d5:7b:36:d0:78:4d:a3:f0:83:3c:ea:4a:d9:4a:
                    33:67:7f:67:68:69:77:86:fc:9f:65:25:39:52:43:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D2:DF:88:B5:B7:8D:15:49:64:25:75:D2:18:AF:A8:2D:81:9B:80
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:62:32:4f:53:8e:0e:c1:26:49:27:77:92:22:e8:87:9c:c2:
         c0:90:5e:89:6b:2e:d4:26:29:47:6f:41:d6:31:e0:1f:8b:79:
         29:57:6e:d7:b5:51:82:ba:54:a0:04:2c:a2:6b:3a:4e:9d:ee:
         22:d9:c3:b8:37:63:e2:64:f9:d9:c5:13:94:de:59:47:6b:d8:
         f0:5e:a6:bf:3d:c0:61:51:7d:17:60:e8:1f:ce:93:09:91:3b:
         6d:53:48:57:83:8c:83:47:d2:7e:f4:c8:16:c2:39:02:06:fd:
         20:c0:70:49:1d:6e:7a:37:d3:10:6a:12:fa:1a:cc:d3:aa:fc:
         24:57:45:19:80:c8:9f:e7:5f:57:c2:03:0a:de:0a:ff:5d:07:
         4d:01:ca:13:45:dc:35:06:ae:4e:0d:e5:3c:52:37:26:00:35:
         6b:99:4a:3a:81:b7:53:40:5a:f1:2c:b4:6b:db:5c:03:47:73:
         4f:c4:fb:2d:8e:7a:17:cb:aa:5c:91:6a:b3:2b:cb:89:93:41:
         10:5a:f2:0c:b4:70:49:e3:25:9d:2f:42:8f:cb:16:c6:30:77:
         7a:ce:af:27:7a:0c:b1:1e:90:e6:07:9e:2b:80:c0:64:29:77:
         98:0f:bc:3d:2f:08:2d:8f:c6:ff:61:68:2d:a2:da:47:b6:f4:
         49:82:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----