Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
File:                     kiUzU7pknevuknmYugLIYUOZ-WE.mft (raw, json)
Hash identifier:          gAQsD51oQanXxVYsDKP+fVyJzuWlOeqrkrFKZAgDqgE=
Subject key identifier:   32:68:FA:AE:65:72:0C:07:88:D3:76:B3:14:A4:45:18:B6:23:AC:57
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Certificate issuer:       /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial:       0195E07D4239ED87144640368CD2A1CC4DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
Manifest number:          041E
Signing time:             Sat 29 Mar 2025 06:01:00 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:00 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:00 +0000
Files and hashes:         1: IRskINg41VtTIRpf8KUQyejfOZ4.roa (hash: gqvze0bjn5WFe15kL+WtLc59rxWgOyihFu31fqipvOk=)
                          2: kiUzU7pknevuknmYugLIYUOZ-WE.crl (hash: jgOYyqFmfzBxKA+wy8H+5u4PT/4RuUjZhWWvINik2KM=)
                          3: l8L6M193NRwOqknRUwjUMCL_3js.roa (hash: ZJE5lHxeiMDM24dTZ0outFe8poOxQlVnbOZwmTZc8Kw=)
                          4: wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa (hash: pKpy02tSACF4gXXOnC0pf4UqBhrOt1/BvJq4Baa5gaQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:42:39:ed:87:14:46:40:36:8c:d2:a1:cc:4d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92253353ba649debee927998ba02c8614399f961
        Validity
            Not Before: Mar 29 06:01:00 2025 GMT
            Not After : Mar 30 06:01:00 2025 GMT
        Subject: CN=3268faae65720c0788d376b314a44518b623ac57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:24:7c:b5:ef:f2:66:6e:91:a8:6c:e7:81:
                    b1:99:ab:fc:5c:64:0f:e6:7b:74:e6:b3:02:8b:cf:
                    63:5b:1e:0a:84:f3:fb:83:dd:1b:50:93:fe:ad:91:
                    43:7a:c2:be:56:7c:4a:e2:ad:1f:21:8e:23:0e:4f:
                    28:fd:d8:36:7e:12:2f:56:26:8e:51:e3:96:51:8d:
                    ef:0a:36:3c:6e:7e:bd:3a:66:2b:ea:14:ab:0b:d7:
                    73:3c:23:4b:d4:f1:48:5f:0c:ac:0e:a1:88:3d:5b:
                    61:21:04:54:e5:b0:c3:6f:f9:5e:3c:11:1c:11:a1:
                    25:6c:2a:0d:6b:ff:89:38:6b:e2:60:a1:26:51:a9:
                    de:87:45:d2:61:1f:10:29:83:6a:56:72:90:4b:f0:
                    b5:26:e4:bf:76:b8:07:a1:9c:7c:31:d4:a8:8d:6e:
                    59:e1:dc:cc:88:e4:e0:3a:cf:ca:c7:2b:3c:49:e8:
                    df:cc:ca:51:e4:16:05:e4:d8:3d:d0:1d:06:84:42:
                    ac:16:b8:8b:42:91:69:df:70:7e:78:69:0c:2a:65:
                    c9:39:3d:f9:90:bb:74:7c:f5:a7:6a:21:cf:38:88:
                    0a:c3:91:1c:1b:44:4d:d7:ec:52:e3:fe:14:1e:6f:
                    fd:69:09:ac:14:4b:15:e4:94:97:67:ef:85:6b:f5:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:68:FA:AE:65:72:0C:07:88:D3:76:B3:14:A4:45:18:B6:23:AC:57
            X509v3 Authority Key Identifier:
                keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5b:19:db:3b:5c:f0:f9:9c:08:6e:32:f9:8b:0c:8c:0c:6b:
         9e:06:b3:f5:af:ab:cf:da:c2:b6:a1:ec:2c:61:f0:f6:af:61:
         0a:05:1a:d2:20:1b:bd:a6:07:d7:7d:b3:72:93:5d:79:da:7e:
         61:e9:57:f5:71:93:ff:d6:7c:24:14:39:cd:d2:e7:0d:44:5b:
         9c:a4:4f:a1:40:90:dc:e4:60:8f:15:62:14:c2:c3:77:54:96:
         f7:a7:23:02:dc:8f:76:68:50:a0:49:2b:7c:4f:8a:56:3d:eb:
         c3:fd:3a:7b:56:e2:cb:51:37:ce:10:27:a2:46:f6:7c:fe:2b:
         9f:c3:33:a6:f4:24:9d:e1:20:e9:50:5f:f6:09:70:9e:15:58:
         e5:03:b8:73:9d:5f:83:9f:6c:a7:01:b5:b2:f0:b4:fc:72:ce:
         e3:ce:a6:97:52:fa:5e:81:f4:0b:86:d3:67:89:e3:67:b2:55:
         fd:45:c7:b7:c2:f0:41:92:c1:a2:f6:64:14:fc:e2:3a:66:99:
         6e:ef:28:ba:42:04:30:3e:fe:f8:96:81:2b:cd:9e:08:01:fd:
         b4:9b:ee:e0:ab:af:1e:03:70:25:f4:47:78:30:ab:61:50:05:
         49:89:bc:6a:af:eb:ca:1b:a2:b4:0a:2f:f7:52:03:26:ba:f3:
         cf:52:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----