Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          sQOPJOGJ22poEMUnOabaxSpUxZanPbTNs0EiFHFuIRg=
Subject key identifier:   15:40:57:54:CB:00:AF:F5:DA:7B:8D:CF:71:63:CD:FE:A2:62:25:81
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       0195E07D9BC912629083443D25BE806B61E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 06:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:22 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:22 +0000
Files and hashes:         1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=)
                          2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: /lZluUsbw2SdtIra4cEZk3LBiVdS8qrOAkaxCyWF7pA=)
                          3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=)
                          4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=)
                          5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:9b:c9:12:62:90:83:44:3d:25:be:80:6b:61:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Mar 29 06:01:22 2025 GMT
            Not After : Mar 30 06:01:22 2025 GMT
        Subject: CN=15405754cb00aff5da7b8dcf7163cdfea2622581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:4b:a7:df:d3:8d:d0:92:72:bd:8e:d1:53:
                    ae:44:c0:3b:a3:b0:14:72:8d:52:77:99:bf:2a:cb:
                    92:1d:8d:44:7e:63:0c:f5:33:27:d1:58:b9:9e:df:
                    d3:7a:ed:6f:f9:7b:cc:1a:55:3e:ba:5c:71:e1:d4:
                    ce:6c:13:5b:1a:7b:c6:44:51:0e:f8:64:db:a9:ab:
                    33:f3:ad:46:26:48:56:3e:36:e0:e8:f2:2a:d5:ec:
                    ea:e3:6d:5d:20:d2:b0:e7:47:70:ea:c0:dd:44:cd:
                    35:9e:a0:91:f2:84:f8:87:b5:ce:2a:02:04:e8:55:
                    aa:7d:53:91:57:eb:b2:f5:38:0f:0b:89:28:a8:dc:
                    34:9c:e0:30:c7:ce:bc:f2:77:28:89:f2:bf:a9:8e:
                    ea:ba:d2:19:47:67:1d:77:09:32:1c:4d:39:ae:fa:
                    60:46:bb:5f:84:60:3c:9e:2b:a6:1d:4d:3b:02:09:
                    d8:34:54:4d:0a:90:1c:dd:42:e1:32:2d:c0:e1:0b:
                    fa:db:70:07:4c:93:5b:de:bc:f8:d0:5f:7d:d5:fb:
                    7b:83:83:33:7b:47:8e:3e:5e:0d:4e:66:07:b1:ac:
                    f1:f3:11:64:81:dc:11:cf:4d:8d:71:0d:1a:e9:70:
                    28:16:e6:76:8c:5b:b7:2f:07:a3:f1:f4:7c:97:03:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:40:57:54:CB:00:AF:F5:DA:7B:8D:CF:71:63:CD:FE:A2:62:25:81
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:55:75:69:70:4a:60:61:42:0e:43:76:50:9a:4a:7d:c4:3f:
         04:d7:49:c5:24:98:d0:fd:8c:94:4a:e7:07:c0:61:f3:44:d5:
         c0:2f:f9:5a:53:b4:e4:c0:04:24:5d:95:e2:96:9d:4d:cd:0a:
         00:ab:38:ce:53:ae:21:6e:66:9a:b4:76:82:29:e0:71:39:1f:
         5d:42:2d:ef:b2:97:85:2f:2b:ef:e9:fa:e3:4e:1a:53:cb:24:
         3e:f9:2b:c1:ee:f2:5e:8f:b3:8e:db:88:2b:84:10:f8:8b:74:
         6c:13:2b:01:f4:43:03:18:5c:84:91:ed:ad:58:cb:f9:64:0f:
         e1:6f:41:e6:57:06:f1:db:66:21:21:40:9c:3b:33:46:ba:a6:
         da:52:fa:25:7d:ec:76:0e:8a:cd:11:a0:02:e3:64:60:c6:41:
         20:75:6e:55:a7:21:da:ab:cd:79:d6:4f:62:0d:e2:dc:0a:fc:
         6c:bb:dc:40:dd:88:5c:3c:8c:7f:c7:97:0b:3f:37:7a:b0:d5:
         9a:ab:36:28:b7:07:7d:68:5d:89:c7:b4:96:0c:7c:fa:3f:41:
         2b:37:ac:75:69:95:a2:86:a0:8b:a1:b0:5d:c2:36:ed:82:7d:
         f5:f4:17:0e:65:0d:14:f0:b1:89:25:b8:aa:9c:63:05:11:cb:
         57:17:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----