Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          Vg1pP0M7X0MJokk6W0Bu1bN0KLxPHZHKN4J0F8UOrSQ=
Subject key identifier:   25:37:E7:E5:78:3D:7E:03:92:59:05:61:5B:71:51:C6:3F:B5:C4:F5
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       0195E158EF44ACE0A87BD3C89712D4E2A8A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          14CF
Signing time:             Sat 29 Mar 2025 10:00:56 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:56 +0000
Manifest next update:     Sun 30 Mar 2025 10:00:56 +0000
Files and hashes:         1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: XGF/VUPWPlNWEvDyV90GKGBP3aGjZXv7czPpAw88nr8=)
                          2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=)
                          3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=)
                          4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=)
                          5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=)
                          6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=)
                          7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:58:ef:44:ac:e0:a8:7b:d3:c8:97:12:d4:e2:a8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Mar 29 10:00:56 2025 GMT
            Not After : Mar 30 10:00:56 2025 GMT
        Subject: CN=2537e7e5783d7e03925905615b7151c63fb5c4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:3e:80:df:92:9a:dc:48:33:57:40:f3:f9:
                    75:d5:f3:28:d5:eb:68:d1:3d:f9:db:81:8a:eb:a7:
                    95:db:58:da:18:8a:c8:a7:e3:8a:fd:a4:9a:63:e6:
                    bf:68:80:07:c7:27:3a:97:78:b2:b0:86:40:92:8c:
                    41:f0:4a:9b:23:88:40:3c:73:d5:63:42:78:60:6e:
                    db:ca:e7:15:04:a7:97:8a:bf:c4:ae:9c:2e:08:51:
                    c8:c4:ee:22:fa:98:3b:0c:23:fb:61:32:09:ca:a5:
                    18:6d:35:9c:a1:ee:3b:61:a6:d1:27:d3:0b:3b:71:
                    c5:67:0b:81:34:e2:a9:5d:2f:f3:90:d8:cc:ee:09:
                    b5:2b:9b:18:83:9d:74:46:2b:55:c5:60:c0:4e:71:
                    f4:0a:f3:fa:0e:21:a5:a6:ff:85:48:4e:db:6c:22:
                    7d:5e:7e:2d:64:80:64:90:ea:0a:d7:a2:d8:e6:78:
                    f8:b3:94:75:95:8e:38:d0:22:72:63:d5:71:37:07:
                    ba:7c:88:cf:1a:5d:b6:58:1a:dd:ab:52:92:dc:2b:
                    c2:94:9f:77:04:fb:2e:e5:25:af:86:2d:6f:5d:bf:
                    ed:ff:3e:2f:2a:f5:fc:84:ac:68:27:2f:79:f5:ab:
                    a1:41:b3:06:50:4b:82:9f:9f:2c:9d:2c:4d:a3:04:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:37:E7:E5:78:3D:7E:03:92:59:05:61:5B:71:51:C6:3F:B5:C4:F5
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:7a:1b:9e:72:ec:71:a1:a9:4a:90:76:2d:4f:bc:b5:52:
         fa:c8:2f:e4:e7:b8:a3:0f:f9:47:71:8f:e3:1e:a9:a9:1c:fe:
         e0:b4:30:76:13:01:6b:74:ee:7c:80:43:50:e3:1e:64:59:a2:
         95:41:b6:e5:04:3b:1a:55:a4:10:98:4b:ac:f7:a6:ef:79:93:
         33:d1:59:ec:e8:ed:f9:ca:b2:3c:63:33:96:a2:1e:bb:fc:fd:
         01:99:87:e8:02:79:f1:f2:dc:15:4b:cf:8b:8f:b8:73:3d:26:
         c5:90:6a:21:48:12:58:57:7c:d5:2d:56:23:cb:f8:5c:ed:37:
         ea:55:6d:2e:0f:65:e3:44:97:20:c1:90:ff:87:ae:9c:64:42:
         6f:90:46:6d:22:cf:86:c4:d0:2f:a6:7d:59:19:3a:ec:56:2f:
         2c:16:22:b3:51:90:ce:85:12:e9:8f:b5:ad:d3:82:e5:81:cc:
         ff:a3:a4:12:01:5e:cf:1d:ef:d5:53:f4:e6:7f:00:e0:ff:a7:
         a2:1a:13:60:8b:4d:fe:75:72:3a:c7:e3:53:f2:22:fe:09:5e:
         ba:28:0c:d7:78:f1:36:c7:25:05:c6:eb:a3:09:ac:36:30:d1:
         1f:58:ff:51:05:ca:73:99:e2:0b:75:b6:59:7e:fe:cb:ad:6b:
         b7:cc:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----