Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          R1pjl57Khd9oH2heXdvolmoqzBkLgG+1cpHBbT5+Vss=
Subject key identifier:   05:ED:E0:99:2D:8D:FC:F3:3D:A0:59:7F:95:8E:58:F7:58:ED:56:B2
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       0195E159DFDB49407A4289EB2B256041BA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          04E1
Signing time:             Sat 29 Mar 2025 10:01:58 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:58 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:58 +0000
Files and hashes:         1: h6RNwx35cY5Ou4EEvMzeH5bf3AY.roa (hash: MWzq5pbXjbxkHMC4iAdZ1JJ8dIigq4BPHOpnjCOlKBw=)
                          2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: jv+LOXTMXPWhWuWO/HckJeSk9qNnwwS7GzCYREschtQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:df:db:49:40:7a:42:89:eb:2b:25:60:41:ba:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Mar 29 10:01:58 2025 GMT
            Not After : Mar 30 10:01:58 2025 GMT
        Subject: CN=05ede0992d8dfcf33da0597f958e58f758ed56b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:2f:fe:83:cb:cc:a5:d1:15:90:38:35:40:
                    ec:ff:bc:1f:c6:d0:72:e6:15:5d:d1:58:be:f3:3b:
                    f6:e3:0a:34:c5:15:17:fa:5f:db:eb:9b:9f:30:cd:
                    4e:15:41:9c:d4:b8:09:db:bb:cc:6d:6b:62:74:bc:
                    96:26:d1:70:3a:74:9d:08:0d:cc:0f:24:c1:7f:ab:
                    a8:95:f3:09:be:12:bd:95:e6:cd:62:f7:c7:3c:1d:
                    e2:3b:fb:23:be:73:a3:2c:96:7b:3b:ce:d9:27:3c:
                    4b:e9:3e:75:a5:4d:6f:1e:6f:18:52:64:a9:26:7d:
                    74:c1:d4:b4:81:5b:47:9e:ff:c2:e5:2a:99:ab:c4:
                    1b:c0:1c:88:af:d9:d7:39:7e:86:24:ff:70:99:35:
                    e5:9c:7f:99:ad:61:46:48:cc:ac:d0:ed:13:2d:0c:
                    f1:83:ba:49:70:1c:36:45:50:47:f1:0d:e4:13:ee:
                    11:aa:b2:d6:3a:ab:04:b9:b6:e3:4f:00:6a:a8:d7:
                    a9:bf:10:91:13:f4:94:0c:7a:05:4b:3d:81:e3:e9:
                    e9:7e:15:89:20:68:76:74:02:bc:65:58:78:03:e3:
                    ba:96:08:26:8d:f3:cf:3a:26:db:92:65:84:5e:40:
                    1e:1c:00:d4:93:e2:7a:43:51:f4:f2:6e:32:6b:ba:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:E0:99:2D:8D:FC:F3:3D:A0:59:7F:95:8E:58:F7:58:ED:56:B2
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:8d:af:39:db:3e:0c:8b:96:a6:5e:59:3a:8e:65:bd:6c:
         21:94:1d:eb:f3:57:ce:30:23:e8:53:7b:5f:2a:2b:65:28:1c:
         e2:af:6b:5f:ce:51:f5:71:95:54:ad:44:db:64:8a:10:99:26:
         f3:c1:59:b1:55:33:a6:a7:13:38:8f:ca:e5:d2:6b:4b:41:34:
         8c:fb:36:1c:46:bd:2f:3b:25:65:e4:75:7a:74:cc:12:43:41:
         1a:34:4f:06:58:33:62:8e:eb:35:a0:4d:cb:5e:53:1a:34:82:
         1b:8d:5f:eb:a8:0c:09:7a:a4:af:7b:eb:71:f0:c5:df:d1:60:
         98:e0:7a:b4:0d:3a:1e:69:ad:c4:9b:42:d4:eb:3f:7e:1c:9f:
         d3:92:20:3e:f5:d9:4a:ef:45:e6:1e:ab:92:5f:64:da:5e:e1:
         2a:43:4d:13:7f:98:3f:ef:c5:1a:03:f0:b3:00:2c:14:27:f3:
         3f:9e:34:42:cc:9d:c8:1a:2e:bd:b8:55:f9:84:90:f6:c0:fa:
         9e:5a:a2:40:d3:39:d9:de:05:ec:59:16:b0:9e:c5:96:57:64:
         26:12:16:85:18:2d:ec:c4:ab:78:54:ec:2a:4e:86:5c:d2:e8:
         92:d0:54:5d:06:2e:40:e5:3f:ca:7d:7e:6c:ca:cd:38:40:1d:
         b6:7c:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----