Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File:                     1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier:          vyj0FnJXdjyKeeMWYpJ4vQ3TyXIyJHajTTlvMKmGBCQ=
Subject key identifier:   3C:04:03:84:BD:26:CC:DD:93:CB:D5:30:38:56:51:B9:1F:9B:DF:57
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer:       /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial:       0195E04671989AA2DB2EDC745A08A4E6429F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number:          1331
Signing time:             Sat 29 Mar 2025 05:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:07 +0000
Files and hashes:         1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: /7ibaFPdPL6ZnAoR6Qlmq+dPDCwZaE1ZlO/e6l9Zqhc=)
                          2: B0cXI8R5Jkebb1b4_AZX0QkItTI.roa (hash: qU3eVg9ZrPWSREJWyOFSPkiCSojLDzpwNgzDMrBwxd0=)
                          3: LOHHuqh5utbV1sVMvLXO9x4HEv0.roa (hash: zlFj/WpL6Qd/ZD0zeyPqhzWIhhj8Nvvt5witl0z9Yic=)
                          4: ndH6JM8LGw_-a86HEW7P-1qV0gM.roa (hash: PbblUtc0vHojXJBh5Iy7RwAYCiNyZajL5DEQ2efa9es=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:71:98:9a:a2:db:2e:dc:74:5a:08:a4:e6:42:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
        Validity
            Not Before: Mar 29 05:01:07 2025 GMT
            Not After : Mar 30 05:01:07 2025 GMT
        Subject: CN=3c040384bd26ccdd93cbd530385651b91f9bdf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:a5:60:9b:02:47:65:3a:74:69:a0:49:a1:
                    c5:b5:79:54:62:e5:a1:7c:58:2b:4e:bc:20:61:3e:
                    a9:8f:7b:55:f9:0f:9f:67:e8:fe:17:a5:80:fc:52:
                    6a:84:7c:95:a3:a6:f8:be:5e:d9:90:2f:55:b6:1e:
                    e8:2b:da:e9:02:20:e9:bc:2f:51:01:67:d4:53:34:
                    bb:e6:0d:13:c3:1d:64:79:6c:5a:04:3d:f2:3e:41:
                    09:1a:f5:76:4f:1e:01:e2:fd:61:a6:0b:1b:10:2c:
                    65:c6:b9:8f:97:45:6a:c8:cb:bc:2b:67:81:7a:30:
                    bb:f7:21:0a:e7:8d:7f:f3:19:3c:99:4d:7d:55:28:
                    16:c1:6a:cf:79:91:bf:d2:bc:d9:7c:c3:a8:5c:1a:
                    6f:32:f1:5a:f3:25:e1:c2:a2:89:40:04:29:2a:f0:
                    4f:f2:d3:85:50:20:c1:87:ae:d9:7c:6c:e5:01:6c:
                    c9:98:8e:90:10:70:ab:a7:4e:82:93:b3:40:b5:e0:
                    38:56:4b:77:3f:d5:c1:5d:52:29:e6:e4:26:c4:28:
                    8e:b9:c7:94:d3:de:5b:1c:54:31:fb:58:36:37:24:
                    a5:e4:17:90:1b:33:fe:b4:04:33:a7:97:4b:fb:a9:
                    cd:b6:61:60:22:87:bd:b9:f6:45:c1:77:1a:4a:da:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:04:03:84:BD:26:CC:DD:93:CB:D5:30:38:56:51:B9:1F:9B:DF:57
            X509v3 Authority Key Identifier:
                keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:f6:f3:b9:c0:20:ab:fe:ab:9b:34:eb:e0:f2:7f:89:71:
         bf:4b:ea:0e:76:da:f8:a0:4b:95:be:ef:27:42:a5:7e:9a:e2:
         a0:90:94:dc:e7:b1:33:fd:7a:45:55:ff:5b:b4:2f:bd:53:94:
         e1:09:e1:65:be:2f:eb:78:77:18:3f:a5:80:18:3c:44:91:36:
         7a:88:17:83:d5:12:c6:49:bf:11:ff:df:4a:e6:e9:ad:2a:3b:
         5c:14:a5:cf:29:a7:e5:bc:d2:6e:b1:1e:04:ea:8b:5a:a2:c5:
         94:68:43:5c:2d:be:c4:2d:6e:50:b0:b3:d6:20:bc:bd:99:24:
         c2:a6:8e:83:a3:54:59:d1:be:f2:1c:a5:bf:b1:a0:3f:69:48:
         2d:e2:09:1f:83:ba:dd:5e:71:96:80:4c:31:66:2a:e9:91:e7:
         84:3f:ca:75:bb:42:f9:4c:cb:a4:bc:5f:47:a1:33:90:a7:91:
         46:90:68:04:04:ac:43:59:d1:bd:7f:71:19:4a:c1:0e:55:9a:
         1f:b6:4d:7b:0d:2a:08:bd:ee:2a:12:e1:c9:7d:05:82:fd:e3:
         bc:7e:57:2b:4b:ca:3b:f5:a9:35:1d:b5:97:ef:f2:f5:5a:d0:
         b7:46:db:7f:8c:58:b9:df:74:8c:f6:4b:c4:cd:05:5e:53:10:
         d8:2f:61:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----