Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File:                     2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier:          yok5n74TqeliwhMuGgtN0NBoKi7t8bzmOkkMgMPEy5I=
Subject key identifier:   47:67:23:07:42:7A:DD:06:C1:BB:E8:EA:8A:31:59:0F:66:62:B7:83
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer:       /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial:       0195E1596D1E97461E6E49308F5B5C2138B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number:          036D
Signing time:             Sat 29 Mar 2025 10:01:29 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:29 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:29 +0000
Files and hashes:         1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: 1lO6/dU6nOYUGn3ZsKBldWKtBA5ZJVNc68mvTjr1BiU=)
                          2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=)
                          3: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=)
                          4: ELUkdIaDmHCzdJ1jKF6atOwpQrA.roa (hash: v8cCBtVVLi5zxTyJOmDs0jN5Ap8cbQpfbXWFNf4bxUs=)
                          5: Ogq2Lp1P7Q1AeCwL2AQLdK9KBzM.roa (hash: wCH8HPVc1f++ByfpIUeIUcWNys3iCfeb5u+E+Q/Dfgk=)
                          6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=)
                          7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=)
                          8: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=)
                          9: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=)
                          10: seHlK4yoKBdb62tkkuXaLzV2yfg.roa (hash: ScsG6hNfwDAK7ZOi0XZluqhuLOKsE23/VLUsA8TDRFE=)
                          11: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=)
                          12: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=)
                          13: xdj8segZXoYSOVijtSVOE4qht7w.roa (hash: 5eHZe22OVB3I0C6Qc/P2mEKiDtOXLMok0XKzDQuouvU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:6d:1e:97:46:1e:6e:49:30:8f:5b:5c:21:38:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
        Validity
            Not Before: Mar 29 10:01:29 2025 GMT
            Not After : Mar 30 10:01:29 2025 GMT
        Subject: CN=47672307427add06c1bbe8ea8a31590f6662b783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:57:a9:4f:12:2a:ff:8e:20:e9:2b:b6:e1:
                    21:6e:b5:8f:03:bb:0e:20:75:e9:56:94:3c:dd:11:
                    97:2c:d2:bf:c8:c2:3a:cb:80:07:3e:a3:09:ae:41:
                    74:b4:f0:af:3f:41:8b:42:ee:a5:65:97:47:6f:fb:
                    68:48:c1:03:6e:02:f8:78:56:b1:ca:90:0d:5c:15:
                    ea:f0:fa:ef:f5:6f:47:5c:fd:e5:7c:dc:a2:d8:dc:
                    2c:7a:8c:c4:e4:39:61:8f:13:88:c1:e7:15:56:90:
                    29:56:56:93:91:64:09:c4:d8:5b:2a:4e:37:e1:8b:
                    1c:13:6c:50:fc:20:0f:4d:d6:bd:b1:59:57:83:41:
                    2c:42:cc:79:93:90:bc:54:1d:14:3d:9d:c5:9e:39:
                    31:21:70:c7:f0:4e:fa:53:eb:f7:81:ad:35:c0:ba:
                    ee:07:66:b9:d7:e6:e2:62:cf:a9:50:62:1f:5c:77:
                    f9:39:e0:fb:f5:11:bc:4c:90:90:2f:81:b7:f5:a4:
                    ea:d0:c7:bc:7a:81:2a:96:fe:6b:0a:cd:0f:c7:b1:
                    cd:0d:23:eb:d7:b4:2a:e5:11:65:ed:22:1d:59:e4:
                    25:50:db:a3:cf:af:ba:f8:0e:03:12:68:03:16:4d:
                    92:9f:1c:bf:56:80:98:57:4f:d6:8b:1f:50:ff:93:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:67:23:07:42:7A:DD:06:C1:BB:E8:EA:8A:31:59:0F:66:62:B7:83
            X509v3 Authority Key Identifier:
                keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:14:91:39:62:0a:3f:f6:3a:af:0c:77:ca:21:b0:90:5e:19:
         f9:72:d4:c9:29:5b:e7:58:bb:fc:cf:7f:dc:0c:f3:e6:27:03:
         f1:95:a7:4f:b0:e7:8a:7e:26:5d:39:df:f6:2b:b6:52:61:77:
         3b:6a:4f:56:2e:e4:e8:f2:ff:d0:68:99:33:66:2b:18:d5:9b:
         9b:a8:7b:81:fb:a3:67:2b:f5:23:cb:5f:ba:3b:5f:b7:14:76:
         b2:5a:e8:90:e1:66:26:c7:4f:20:09:c4:2a:d9:f7:22:3b:06:
         7a:e7:c1:d4:c9:eb:29:da:ad:c9:ba:05:82:a3:52:d8:39:c7:
         a9:ed:01:e8:6b:a9:3e:79:fa:84:02:6b:37:9b:51:dd:44:ca:
         e2:1d:54:c6:c2:74:ff:6a:bc:1f:30:1a:7e:90:51:59:7d:54:
         c9:32:86:0a:68:7d:72:25:ef:8c:2e:5e:8b:b6:df:12:f4:a6:
         3b:56:38:86:be:f6:dd:9e:76:d9:8d:88:f1:a7:8b:2d:9e:64:
         dd:5f:be:70:36:da:df:40:9d:c7:81:15:34:76:03:aa:20:9a:
         f4:cb:d9:49:f0:b3:4e:06:d9:2c:37:67:9a:1c:29:4a:7a:50:
         ac:dd:0a:a9:c5:da:04:7d:7e:17:de:5f:75:59:05:b4:1c:b6:
         9b:29:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----