Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
File:                     btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json)
Hash identifier:          7ymqodlUjMyYLPu0bkx+Hp3puY8KzndoAftzEp3vI6g=
Subject key identifier:   A6:E8:8A:BB:01:F2:37:19:46:DC:65:6A:BF:4A:21:E7:0D:D2:A5:23
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Certificate issuer:       /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial:       0195E046D660B50C8DCF46B17E31A83DCFD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 05:01:33 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:33 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:33 +0000
Files and hashes:         1: 9pVSMCdjQealzLgQcmqOThUhNyY.roa (hash: Za3wBMJoYZ7WrjJeJ4YGgLkdE+KKnUd40rRwXB4f/WU=)
                          2: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=)
                          3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=)
                          4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=)
                          5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: hTaTQ6cfz0+9qdJ9PqQKErmaslEpsUwtbHKUiu0cRzc=)
                          6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=)
                          7: nJiYZEpB1EgK05RNyHLNlPAVIA8.roa (hash: AlaLFQmqj+Z/cHGEWv8PdyAv4LrvAlOopVYBnZcKqZA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:d6:60:b5:0c:8d:cf:46:b1:7e:31:a8:3d:cf:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
        Validity
            Not Before: Mar 29 05:01:33 2025 GMT
            Not After : Mar 30 05:01:33 2025 GMT
        Subject: CN=a6e88abb01f2371946dc656abf4a21e70dd2a523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:9f:cc:0b:44:ba:6b:e3:54:41:46:cd:ca:
                    65:db:b4:53:ea:77:52:92:09:82:73:75:aa:87:e2:
                    59:fb:26:8c:a3:df:ae:d8:dc:83:51:1a:be:10:dd:
                    d3:2b:80:ed:66:40:25:65:5d:ef:3f:4e:f3:09:23:
                    ab:ef:11:fe:16:12:32:3c:55:e9:8a:34:13:f4:b0:
                    9a:16:18:8b:6f:3d:bb:16:8d:2f:90:fe:77:b7:52:
                    10:f9:c2:75:36:2f:f7:99:4b:1c:46:44:7d:94:25:
                    68:e8:b5:3c:17:46:5d:75:81:d9:02:ba:02:2f:80:
                    06:47:44:b0:66:81:8e:27:57:54:61:70:f9:d2:41:
                    2e:94:e9:6e:d9:2c:bf:19:2d:f0:df:8e:fb:75:6a:
                    f9:d9:ca:b4:4e:67:07:37:bd:b3:4e:9d:82:de:ac:
                    d4:49:c8:41:9d:b2:e4:2a:95:09:ef:d9:8b:b5:31:
                    4d:e7:b4:6b:d0:20:6c:0f:aa:c0:64:ea:d8:2c:18:
                    c6:a6:01:16:d3:8a:be:5e:dd:5c:a1:ef:6c:95:b9:
                    a6:f8:c6:f6:72:5c:8c:e7:ce:0b:2f:31:46:a4:3e:
                    8d:a9:1d:d9:c3:88:af:69:56:4f:fa:15:cf:17:04:
                    1d:76:6d:0e:57:b2:3b:14:7b:8e:4a:1e:e9:59:c7:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E8:8A:BB:01:F2:37:19:46:DC:65:6A:BF:4A:21:E7:0D:D2:A5:23
            X509v3 Authority Key Identifier:
                keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0e:4e:f4:c6:48:81:62:1d:c2:7a:ed:b1:67:a2:e0:c9:aa:
         dd:8b:1a:94:da:a5:1d:d0:a7:e1:c9:d5:41:72:0e:ec:5d:5a:
         61:9c:4a:e5:97:63:37:1d:d6:50:37:44:84:85:89:7a:e0:94:
         5d:41:60:d8:b7:e2:83:d5:dc:a2:9c:ec:c5:6d:f6:29:f6:06:
         72:81:a9:7a:b2:19:87:19:28:76:92:9a:72:45:d8:f1:57:2e:
         50:aa:14:37:24:07:84:a0:6a:85:0b:26:e0:10:9a:00:a1:bf:
         10:18:ba:cc:b5:51:fa:fe:25:51:02:32:81:60:18:37:56:a1:
         cf:7e:f9:a7:33:fd:6b:8b:26:2e:3f:09:47:6a:bf:0f:f0:55:
         6b:86:f4:6a:87:76:99:1a:93:d3:2a:c1:25:c7:a9:73:b4:cb:
         31:3e:16:ce:0d:90:d6:5d:36:8d:9c:85:1a:4f:a5:39:ca:80:
         02:d8:da:6d:6c:c6:49:e0:ad:f2:76:c9:f9:ed:56:1d:b7:d5:
         dd:fe:90:d2:72:dc:8c:64:60:a9:ed:e7:98:84:8f:44:9b:9e:
         11:97:dc:f6:1f:e9:eb:c2:0b:b1:40:a5:6f:3f:97:23:1f:7f:
         3b:b8:ee:19:4b:5a:0b:a4:ab:f0:c1:53:08:e5:16:24:83:9c:
         4a:92:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----