Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File:                     DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier:          pNgkO7W8lMqB2b15M6BsiEFujlnnWDe4T74wuaGYgEs=
Subject key identifier:   3E:01:25:0F:31:33:E4:DF:B1:24:25:D7:4C:0A:80:63:82:2C:D6:8C
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer:       /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial:       0195E00F9BC6CF3EC4C62C2449D3D7A84B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number:          1455
Signing time:             Sat 29 Mar 2025 04:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:13 +0000
Files and hashes:         1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: kPuBKIuvLlMMcSzOzt/EsGyfWZ3nyY6R5YWUr2VW0XE=)
                          2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
                          3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
                          4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:9b:c6:cf:3e:c4:c6:2c:24:49:d3:d7:a8:4b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
        Validity
            Not Before: Mar 29 04:01:13 2025 GMT
            Not After : Mar 30 04:01:13 2025 GMT
        Subject: CN=3e01250f3133e4dfb12425d74c0a8063822cd68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:be:da:65:46:dc:3d:35:b8:42:ab:94:07:
                    05:88:b9:ff:c9:c4:68:d1:c6:0a:a0:5b:19:70:ec:
                    aa:86:16:19:f0:1d:08:c9:fc:82:c3:2d:2e:b8:b8:
                    1c:3d:30:8d:e7:37:c9:b8:9a:82:1e:e0:56:b4:19:
                    ae:32:2a:44:60:b7:65:a5:d5:a6:7f:b8:07:55:3e:
                    6b:07:ea:11:e6:b8:45:af:be:67:1c:0a:8c:c3:3a:
                    57:7c:55:60:db:88:61:6a:73:5d:7c:4f:e9:15:f9:
                    c2:13:22:12:33:85:3b:63:7e:eb:3f:ca:d8:7f:18:
                    3b:80:16:76:0a:0b:4c:9e:50:66:57:1e:49:a4:33:
                    d6:53:2a:3b:ac:f0:bb:4d:b0:a9:48:03:84:17:94:
                    2b:97:70:8d:93:ec:e6:10:ac:9f:4d:0b:58:4b:f4:
                    1d:a0:fb:8d:1f:82:33:d6:17:8e:31:36:08:3e:2b:
                    9e:96:83:25:3f:78:05:4f:04:b7:28:8b:88:96:fd:
                    68:98:1f:89:05:ef:cd:01:fd:65:36:5f:53:0c:03:
                    f0:fe:77:91:f8:43:52:c5:09:6a:c3:bf:3c:46:db:
                    d4:2e:ab:01:ed:b4:f4:36:93:2b:b5:2f:18:58:b0:
                    51:1a:b5:8f:69:b3:9c:1c:c1:19:97:2f:78:33:25:
                    ad:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:01:25:0F:31:33:E4:DF:B1:24:25:D7:4C:0A:80:63:82:2C:D6:8C
            X509v3 Authority Key Identifier:
                keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:da:4a:20:39:74:b0:e3:49:70:75:0d:b4:86:c8:8a:95:ae:
         26:dd:73:66:fb:cb:a7:7f:8d:4b:78:ba:f3:d9:3e:11:e2:62:
         ad:56:70:c4:e0:02:24:7a:6a:ed:ab:44:9e:35:05:9f:9a:b6:
         61:5d:55:30:62:1e:ef:d7:c5:4f:be:b7:f7:07:de:6c:44:54:
         28:54:eb:ac:97:ed:fd:e8:b9:0f:35:9a:31:cc:db:ca:0f:e2:
         4a:ad:7b:39:4d:7e:41:49:65:83:5e:2e:f3:20:45:e4:10:a4:
         f5:13:a1:ea:e5:e3:a0:aa:7f:bd:d6:78:10:b5:85:a4:a7:01:
         8f:14:81:ba:ed:5b:2b:dd:70:0b:c2:59:0b:f9:15:76:69:8f:
         30:34:bd:72:f2:d7:bc:e4:0f:ca:1d:ff:21:4d:e3:56:33:c4:
         2f:ae:19:5f:52:c1:8d:a5:1d:e3:48:6c:c2:f0:cb:95:18:cd:
         b9:47:9b:16:e0:d4:73:ac:b9:f1:d5:c9:0f:3a:f6:f2:68:0e:
         0a:a9:ff:a8:18:46:c6:b0:66:43:6b:06:e5:4e:3f:c9:61:15:
         b3:b0:f5:fb:63:89:3d:0b:2b:66:75:31:62:d3:c9:60:0b:fe:
         ba:45:f9:e5:06:5a:78:08:ad:ea:8f:ba:33:7b:88:66:80:3a:
         75:9e:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----