Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          lGvHWZJPm+tFdtrGLCek8Y/R2RISwCUKJ5h3/qjoM50=
Subject key identifier:   6C:98:73:4E:05:77:04:1A:42:2F:67:C3:0C:48:53:95:9B:67:1D:6B
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       0195E158EEEE0E7BFDB1B10769EBE353F519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          14DB
Signing time:             Sat 29 Mar 2025 10:00:56 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:56 +0000
Manifest next update:     Sun 30 Mar 2025 10:00:56 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: IqJ3eC22ti_hCfC22ZrM8rRTtzM.roa (hash: aJf0pzqxrkhhPFt7HEGF+gQN8TPi2v4BsqZ0KQ3SArc=)
                          3: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          4: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          5: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          6: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          7: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: PMcIfkHnDhentgrwK0vRlhTmtWxLcq3OVyzA7ynGBIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:58:ee:ee:0e:7b:fd:b1:b1:07:69:eb:e3:53:f5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Mar 29 10:00:56 2025 GMT
            Not After : Mar 30 10:00:56 2025 GMT
        Subject: CN=6c98734e0577041a422f67c30c4853959b671d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:57:2f:ef:c2:91:a7:94:22:6d:27:1b:22:
                    e2:f2:24:51:c5:4b:75:eb:e2:bb:65:21:cf:34:cb:
                    06:9c:ac:6b:52:cd:1c:77:1a:99:3b:45:5a:73:b1:
                    6e:67:15:c2:6a:47:9e:a1:a4:89:df:33:d2:79:a6:
                    f8:bf:9c:62:68:b9:5f:f8:6b:6d:bd:61:28:80:f5:
                    c6:1c:79:02:6c:a5:f7:fc:f8:c1:fa:98:3f:b1:80:
                    d4:a9:69:24:24:39:6f:45:b8:38:11:6a:17:73:f5:
                    5f:ca:97:60:8a:10:81:02:9c:a5:ca:53:0f:52:69:
                    65:cb:f0:68:71:93:f7:fe:d2:14:4a:41:1d:bd:6b:
                    2f:ff:a3:57:7c:0d:46:92:7a:66:da:d1:f5:c1:fa:
                    7c:a4:38:01:33:b7:84:01:ba:88:40:99:0c:77:29:
                    a6:8b:b0:1e:76:22:50:f7:84:e7:25:57:80:fa:f1:
                    98:1c:a3:85:76:b9:7a:fb:4a:21:01:8a:82:75:e7:
                    5b:12:3b:0c:4d:98:3e:23:b3:02:a9:e2:d6:88:56:
                    5a:c0:d7:91:bb:67:7b:0d:2f:24:91:e1:94:a6:e1:
                    06:ad:d1:ec:d9:c4:cd:8f:50:a7:84:69:46:9a:e1:
                    63:38:cb:01:d7:a6:aa:9c:71:0c:78:b0:af:84:7c:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:73:4E:05:77:04:1A:42:2F:67:C3:0C:48:53:95:9B:67:1D:6B
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:64:70:04:e5:50:e7:58:39:1a:52:24:30:9f:b7:c2:ae:
         50:db:99:39:20:1b:f6:b9:3b:06:fe:0e:94:7c:07:bb:1b:e5:
         d6:95:57:a2:f9:a8:a7:02:d4:d7:a9:e2:59:3b:d8:5f:6f:f6:
         b8:c0:6e:ac:d9:83:8b:37:c7:8e:16:91:05:a0:4e:f1:9d:a8:
         56:7e:7e:9d:0f:6d:31:f1:a5:6b:eb:3b:03:ae:c8:74:79:98:
         10:f6:63:ea:a6:76:ce:a8:f4:99:3f:b1:2d:5c:ad:57:6d:31:
         46:0d:3f:8f:01:57:45:06:0b:3b:32:a1:3c:ca:ee:81:97:9a:
         09:ea:d2:de:0c:c2:74:88:a8:ea:a1:cc:d9:ad:d9:5f:d4:fc:
         b0:b2:a7:d0:bc:47:6a:70:f7:4a:24:93:1b:7b:d9:e8:b3:12:
         4e:1b:09:cf:51:a4:0a:b5:a7:ff:59:58:c9:55:84:f1:3c:5b:
         01:b4:7f:f7:4d:2a:ad:5e:1d:ad:92:96:1e:69:27:aa:63:16:
         5d:a3:96:54:1e:04:11:26:30:0f:9f:4a:81:38:5f:32:e7:04:
         55:82:39:91:7d:1b:1f:b9:93:a9:63:e3:fd:52:c2:34:e0:0e:
         ac:83:33:de:43:66:43:57:16:78:dd:01:d6:d5:d7:61:76:e0:
         4d:97:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----