Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
File:                     TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json)
Hash identifier:          9eh0kP5r65kOV2ZMj1JFAxGkdHcLaNdFKNlBrkj2rws=
Subject key identifier:   8C:B2:96:F3:4B:AE:AB:BE:D0:DD:0F:AB:99:62:62:38:C8:C6:09:73
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Certificate issuer:       /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial:       0195E0B430A4D393B9B074D96C282EA15CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
Manifest number:          13FD
Signing time:             Sat 29 Mar 2025 07:00:59 +0000
Manifest this update:     Sat 29 Mar 2025 07:00:59 +0000
Manifest next update:     Sun 30 Mar 2025 07:00:59 +0000
Files and hashes:         1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=)
                          2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=)
                          3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=)
                          4: IBrK48O-7B4CsyrG8YHsZba14MU.roa (hash: jNJqur4pKVCszpvjwbN2opjyvmyVJ/ZLlLdT3QcBroc=)
                          5: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=)
                          6: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: uuzXunt5y47yGBkzqdpXh7eryTzwxx00wZAeRCdKwVs=)
                          7: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=)
                          8: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=)
                          9: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=)
                          10: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=)
                          11: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:30:a4:d3:93:b9:b0:74:d9:6c:28:2e:a1:5c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
        Validity
            Not Before: Mar 29 07:00:59 2025 GMT
            Not After : Mar 30 07:00:59 2025 GMT
        Subject: CN=8cb296f34baeabbed0dd0fab99626238c8c60973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:72:1e:be:ff:34:ed:f1:a6:39:b9:38:f9:
                    61:dd:61:35:4b:52:00:c2:4b:66:74:7e:39:03:f4:
                    f8:75:6e:45:da:79:b4:b6:94:9a:13:66:c3:45:7c:
                    4f:be:19:3e:96:2d:4c:e0:12:b1:9f:40:09:41:78:
                    65:1f:9e:fd:35:cd:cc:02:15:b6:19:18:b1:84:c9:
                    f6:d8:42:57:d0:9e:9a:e1:da:3d:f8:84:62:ed:b7:
                    dd:f3:61:71:4e:30:63:e3:08:7c:9e:e8:b2:ed:2b:
                    8c:d7:f1:0d:37:b6:36:80:fc:21:78:e2:3b:0e:92:
                    22:d7:dc:40:84:b1:1a:41:6b:cf:aa:8b:5e:38:e0:
                    09:34:ea:3a:a6:ec:78:39:94:c2:dd:f9:dd:60:f3:
                    37:d0:8f:8d:b9:04:0b:c1:c9:c3:66:1b:59:fa:66:
                    ea:67:5e:8c:b1:1c:83:1a:b8:87:7f:a8:ed:6a:ee:
                    1b:fe:d8:22:a8:8a:37:a5:e9:ee:68:e4:1c:88:16:
                    9c:ee:35:05:27:99:53:c2:ec:d3:7e:a1:fc:48:25:
                    56:e9:35:98:b7:a9:17:09:d6:e1:ab:fd:fb:02:f5:
                    a7:8b:61:4d:fe:7d:85:95:ad:89:5f:58:58:a2:bd:
                    ea:13:17:69:23:06:af:2c:a1:e9:fe:4b:dd:3a:5b:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:96:F3:4B:AE:AB:BE:D0:DD:0F:AB:99:62:62:38:C8:C6:09:73
            X509v3 Authority Key Identifier:
                keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:25:67:19:36:f6:a2:f1:0b:c8:c3:6d:22:01:5f:91:a9:
         8b:5b:58:80:ce:57:03:e0:64:a1:88:f9:27:57:69:28:d8:b3:
         9a:ef:59:11:3a:e6:2a:c7:ba:52:f0:71:06:67:a1:6c:46:9f:
         10:23:5f:70:89:4f:58:2b:5b:e5:36:17:1a:be:dc:f8:f5:a5:
         c5:7b:20:9a:05:ad:92:ea:90:c0:d7:85:ab:2c:57:df:d9:fb:
         7d:81:39:06:d4:65:cf:48:55:98:08:26:44:48:54:49:3b:b0:
         b2:d5:5d:8c:92:34:cc:9f:a6:5a:f6:01:cc:62:53:bb:5b:46:
         91:37:b0:e1:7d:da:3b:a8:88:b3:64:0f:91:d0:93:85:97:a7:
         df:36:f8:35:aa:10:e4:31:de:6e:e6:df:01:88:7e:ed:a9:33:
         3c:e0:1a:96:fb:67:c9:74:81:eb:d8:30:c4:db:9e:52:1c:27:
         12:be:5b:60:6c:9d:12:59:55:68:51:e1:79:92:f1:0f:8d:06:
         40:ef:44:f1:98:02:fe:aa:82:9f:e2:cc:1d:40:88:78:c4:6d:
         9c:9e:17:03:b5:5b:60:b9:e6:f0:1e:53:d0:99:84:b8:9c:02:
         b3:1d:84:56:e4:5c:36:82:90:8d:2e:7d:65:28:5c:b1:1d:73:
         7c:3d:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----