Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File:                     xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier:          XkhtRDokQdkZylFDSwzOgENdf6jI9QqtZmR9wy1O74o=
Subject key identifier:   02:BD:31:4F:03:C2:6A:DA:A0:9C:66:1B:5A:1F:ED:CA:45:17:8D:FC
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       0195DFD8844593F2E838D2BD422B7084B1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number:          106E
Signing time:             Sat 29 Mar 2025 03:01:03 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:03 +0000
Files and hashes:         1: 56Vpsd34am-XgZxuiIBx5ciZnvo.roa (hash: LIsLriDuZ7qA8gRRNpqBGuQDOGGc08GwyrJJTUnjn+I=)
                          2: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=)
                          3: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=)
                          4: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=)
                          5: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=)
                          6: RJmPIiHTRu2ZejdfSlAj6IdU6us.roa (hash: 7h/45UxkROh44H9OUOI/NiMHeRQHJxLpEBRuLX6IZ+w=)
                          7: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: XcdpAim2ZvWIlQVh1JfcAlqr+ACm73Eyu2FkrHVggXo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:84:45:93:f2:e8:38:d2:bd:42:2b:70:84:b1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: Mar 29 03:01:03 2025 GMT
            Not After : Mar 30 03:01:03 2025 GMT
        Subject: CN=02bd314f03c26adaa09c661b5a1fedca45178dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:a8:f7:31:15:ae:36:b1:a7:65:a6:54:19:
                    72:67:12:54:68:4d:b6:a9:1a:ff:89:c3:a2:1a:c9:
                    dd:6c:81:7e:7b:76:39:a6:36:e2:1b:c0:2d:0f:96:
                    d8:2d:a0:4e:47:4b:db:90:e1:71:ad:ec:bb:29:80:
                    c0:53:f3:2a:ef:01:71:31:3d:87:b3:da:db:34:bb:
                    a7:fb:72:73:be:1e:7b:49:35:3d:94:0b:60:9e:3d:
                    b2:51:96:7d:6b:b1:3a:ba:2b:a5:f2:9c:13:8d:2a:
                    33:b0:20:f3:18:33:02:40:8a:0e:3d:d1:53:42:cf:
                    31:8a:f6:85:87:7a:92:d4:4f:43:3a:44:8f:77:ae:
                    17:24:97:ae:2d:c9:ec:1f:73:3d:ea:af:14:09:d4:
                    38:6f:ff:00:1d:ae:ec:f6:1b:24:a6:a2:02:c7:9a:
                    e8:2a:de:84:4f:eb:ea:4e:76:16:05:9b:50:ae:73:
                    56:6f:b4:72:94:27:f5:ec:b7:4e:ab:98:15:d6:ec:
                    d7:03:36:30:33:4d:5e:3f:eb:49:6e:53:ef:b7:0b:
                    4c:52:25:79:91:2a:7b:f4:00:d8:22:f1:33:0f:92:
                    52:62:1e:5d:05:8d:4f:6a:d0:06:8f:be:a0:22:9a:
                    17:5e:5b:21:e2:ae:a1:e2:63:94:46:fc:ff:5f:f1:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BD:31:4F:03:C2:6A:DA:A0:9C:66:1B:5A:1F:ED:CA:45:17:8D:FC
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:02:28:f1:b2:f0:90:02:76:51:77:b7:06:e7:7b:5d:85:92:
         1b:04:24:d8:58:c8:e9:c6:33:58:c7:da:69:9d:81:ed:93:5e:
         38:8b:3a:79:15:4b:ce:15:c5:f8:b0:3f:90:6b:6f:f7:76:2a:
         84:55:0f:2b:3b:f3:4c:50:9c:f0:b4:fb:0d:85:fc:49:7d:4e:
         66:8f:60:30:22:1f:fe:86:73:e6:e9:3a:f4:93:b1:0d:72:1d:
         d9:e7:d3:95:ed:78:bb:9c:f1:92:db:84:8f:ff:3f:06:2c:f4:
         e5:d5:fe:28:3f:aa:b1:8c:3b:0c:00:df:74:8f:76:d1:66:64:
         f3:38:fd:46:bc:16:5c:85:8b:d3:73:4c:b9:c1:3b:3f:3e:ed:
         72:f0:dc:21:50:4b:7a:77:35:30:28:3b:51:5a:98:18:2a:ff:
         4f:70:11:9b:11:31:27:57:38:29:11:28:5b:88:a4:be:5e:46:
         75:82:b5:00:32:c6:c1:b0:a3:c9:5f:04:07:75:a8:2c:41:8b:
         ce:d5:c2:7f:1c:3f:06:98:9d:85:6e:44:31:df:af:6c:95:b8:
         f5:a7:68:60:54:81:80:7c:cf:a2:26:fa:47:09:99:06:f2:95:
         c9:99:cd:3c:3b:a0:6a:0f:66:72:e0:17:ee:8f:c0:80:86:7c:
         ca:ee:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----