Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File:                     _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier:          SzInbdL8dXumVPLf+mKb+XLqn0gIbUgcv1mL0RCckmc=
Subject key identifier:   DD:D5:52:35:8F:54:04:06:FC:66:44:16:EA:85:49:0E:A2:E0:47:6F
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer:       /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial:       0195E0B49C80ACD5F215FC2334302F6B071E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 07:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:27 +0000
Files and hashes:         1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
                          2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
                          3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: 5Ow8PgOGmiW+CjwpGb0MNQkVZK+/DyExwu9jO1vGODw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:9c:80:ac:d5:f2:15:fc:23:34:30:2f:6b:07:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
        Validity
            Not Before: Mar 29 07:01:27 2025 GMT
            Not After : Mar 30 07:01:27 2025 GMT
        Subject: CN=ddd552358f540406fc664416ea85490ea2e0476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:05:2d:96:ae:d3:18:f3:5f:46:fc:91:2e:3a:
                    9a:a1:5f:c1:50:26:04:bf:b5:ac:83:6f:6e:6b:ef:
                    aa:5c:e3:56:17:a0:88:a5:77:b6:ac:c0:59:89:fb:
                    8e:88:e0:b0:1f:73:21:dd:a5:49:20:e8:ea:63:18:
                    87:cd:88:64:ad:c7:d8:8e:69:b1:25:f7:44:48:53:
                    ca:ce:1e:2e:b1:bf:8f:66:a9:98:28:5d:dc:6b:8c:
                    d1:b9:f8:af:4e:7e:74:17:22:7a:26:be:d7:8c:e4:
                    54:6f:6e:67:64:a9:82:ed:c4:a4:0f:72:4f:25:2a:
                    c0:9d:36:88:e3:b7:18:98:7d:dc:15:a5:20:1e:8f:
                    3c:ac:37:bd:fc:91:2c:4c:6e:ca:e5:bc:b9:26:aa:
                    07:f3:eb:9c:ad:f5:e1:d8:f1:53:b2:e1:e2:0e:0c:
                    94:eb:07:40:f1:cc:cb:4a:26:1e:1e:c7:83:87:df:
                    99:37:43:b9:55:00:ad:b1:16:e6:92:8c:12:f1:64:
                    c3:9b:37:33:3c:ab:cf:75:dd:53:b2:cf:4e:bb:f4:
                    34:c9:a4:16:2e:09:e1:ce:f8:0e:59:75:12:a3:3f:
                    d1:e2:4e:0f:4e:7f:05:9c:34:c2:54:e9:3a:fc:0f:
                    27:f3:e1:fc:d6:cf:aa:ac:df:d6:9c:fb:9d:be:8a:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D5:52:35:8F:54:04:06:FC:66:44:16:EA:85:49:0E:A2:E0:47:6F
            X509v3 Authority Key Identifier:
                keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:e3:44:d0:ce:77:96:1f:b5:2b:0d:2e:6e:ed:d9:04:e6:
         27:62:c0:02:b6:2f:59:f7:00:29:f9:02:e9:24:98:1d:2d:15:
         a8:b2:81:a0:80:16:fc:b4:6b:07:ec:95:61:42:35:da:b9:6f:
         e9:5b:79:d3:6b:a2:33:f5:e7:5d:b8:94:9e:74:77:07:c6:f7:
         97:09:8d:df:99:a6:08:e6:01:d2:0e:43:64:be:f0:3a:d4:f3:
         9d:72:d2:10:a7:bf:5b:50:11:bb:8e:6d:12:1c:2e:8b:77:35:
         eb:e5:dc:2f:61:06:10:81:05:a6:49:07:4a:73:56:10:b1:a5:
         53:1b:43:86:38:bb:5a:79:67:2a:d1:af:29:94:fe:55:f3:25:
         ff:c2:bb:95:13:91:68:96:6a:3e:08:a3:83:1a:f3:b1:45:8c:
         85:ff:44:df:70:c0:a0:5e:8a:17:cd:44:05:19:42:75:98:8a:
         22:07:3b:b1:1f:91:89:7d:28:98:07:aa:36:cd:3a:f4:c3:8b:
         f6:e1:fc:06:3d:ea:f7:a1:42:f7:a6:68:83:bb:68:71:ed:8b:
         f2:a1:4d:57:54:37:e6:7b:19:42:39:d2:89:d5:de:89:4d:fa:
         eb:e2:da:ee:79:76:79:ee:d5:aa:cf:b6:f8:1b:ab:12:23:ca:
         95:a5:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----