Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
File:                     Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft (raw, json)
Hash identifier:          DDbOysSqf/Wd9PkctD+5tTuzCoRHfx93lVGVPADIau0=
Subject key identifier:   77:A3:F3:1B:CC:ED:FA:2E:1C:4D:2E:1D:64:87:07:B4:15:36:91:61
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Certificate issuer:       /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial:       01979B972EAF13C44EF1F94287F10BAFB438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
Manifest number:          158A
Signing time:             Mon 23 Jun 2025 07:01:05 +0000
Manifest this update:     Mon 23 Jun 2025 07:01:05 +0000
Manifest next update:     Tue 24 Jun 2025 07:01:05 +0000
Files and hashes:         1: 2Z7EtqMWz7jdGLOQTCkczOOupVQ.roa (hash: bipDGw88FluLLp9GhPHHNjUegq603G3YCRelI4f1Izo=)
                          2: FhZd88jZ9jh03466aEP-twQcEMw.roa (hash: GqVz3280439YQWP+4ZwFNVQsgWkyoEgtpCqfdDxqe8Y=)
                          3: HsoHvy4vaHG-GoulbRb3ifQ_PuU.roa (hash: 69uYqrq0xGq1JO0hUhdXdKRopq7RJQhoaRro9AjlRJc=)
                          4: Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl (hash: BwRlf95PVMiSesOpif54urXRGT9JN+Rl/kgb0UQqBpA=)
                          5: PGMK1-OlWgKaP3bJNRajQpxu8vA.roa (hash: VP1Lh654Pjz3OCgsDqSZJzeq8ULo1rSLNHx/bHWXvAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:97:2e:af:13:c4:4e:f1:f9:42:87:f1:0b:af:b4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
        Validity
            Not Before: Jun 23 07:01:05 2025 GMT
            Not After : Jun 24 07:01:05 2025 GMT
        Subject: CN=77a3f31bccedfa2e1c4d2e1d648707b415369161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:ef:b6:63:85:09:1f:93:3a:eb:07:13:cc:
                    f7:b8:12:cd:8f:0b:55:be:a1:85:2e:cc:c1:39:51:
                    69:aa:c3:d7:de:26:6c:9c:65:8e:5c:28:f3:9a:8c:
                    77:d1:37:c3:9b:73:2f:c1:7b:3d:db:d6:e1:d3:f2:
                    58:af:bb:ac:18:8a:37:c6:ae:70:d6:be:18:f1:12:
                    37:6b:7b:b7:d1:60:3a:2b:97:08:c7:97:3f:ef:95:
                    37:ba:c7:75:64:e0:87:26:20:3b:56:75:bf:f6:1c:
                    bb:de:ed:42:4c:15:55:4d:c4:96:65:12:46:3d:84:
                    18:0b:a6:4c:ff:dd:e5:64:cf:5c:20:c9:a0:90:da:
                    81:c8:1d:8a:9a:e9:5e:e4:e2:d8:1d:49:be:6b:7a:
                    af:bb:f3:f6:0e:f9:ad:5b:05:15:54:94:be:dd:68:
                    4f:51:88:43:d3:5e:39:c5:5b:93:5c:a7:6b:c3:a1:
                    f7:96:34:a0:43:86:16:3e:fb:44:ba:3f:3f:32:26:
                    5d:c6:36:60:fe:d2:91:b5:95:fa:19:e9:82:9e:1c:
                    0b:92:b9:47:5b:93:12:4f:a4:dc:56:94:a8:b5:01:
                    8f:0a:1a:2f:8c:cd:dd:79:66:1c:51:dc:2a:13:ce:
                    95:a0:f1:e2:cd:e2:72:90:87:f9:2b:fb:41:79:2d:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:F3:1B:CC:ED:FA:2E:1C:4D:2E:1D:64:87:07:B4:15:36:91:61
            X509v3 Authority Key Identifier:
                keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d0:a5:42:93:6e:36:10:65:a9:8e:95:2f:60:28:0b:c5:ac:
         05:2f:f2:8c:e3:51:be:e7:5d:2a:ab:02:fc:6c:63:94:cf:e2:
         cb:e8:f6:d6:70:67:21:62:ea:8f:b4:87:04:cb:44:28:0f:e0:
         cc:9f:cc:8c:2e:ff:04:38:53:b5:c5:43:c9:81:9b:9b:03:9c:
         92:8b:83:d6:45:ba:a5:ba:55:6b:90:bf:8f:16:a8:84:f1:a9:
         ef:8e:9d:1a:bc:80:4f:c7:0b:6f:0c:f8:b5:fa:9c:e5:bf:9d:
         fd:e7:65:49:23:6d:dc:0e:bf:99:6e:c4:8a:d4:bf:83:94:c8:
         a8:f1:e6:69:a8:cd:1c:14:54:ab:96:0b:36:fa:ef:11:94:4c:
         06:8e:b7:bf:95:fe:a2:23:91:dd:36:8a:9c:c3:fc:fd:44:00:
         99:c1:a5:75:91:a8:9e:5b:e8:04:9b:90:48:4d:df:41:75:e2:
         16:45:5d:77:03:ef:a6:b2:03:0d:20:79:d0:7c:12:37:2c:33:
         54:f0:d3:ff:0c:b0:fa:37:44:3e:00:4f:4d:96:30:96:6c:cf:
         25:dd:ed:0f:1d:fc:fa:fe:b7:cb:d8:1b:54:19:38:f5:15:15:
         ab:80:98:64:3d:da:f0:05:3d:6f:b1:be:b5:2c:8a:4a:68:a8:
         cf:7f:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----