Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File:                     uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier:          mTF2obt2/cG5OdeYiYKsb8wC2NALyDXSyIEvf6Zv9XA=
Subject key identifier:   2F:CC:BC:D6:00:28:2A:34:A7:C8:16:16:36:66:95:7D:D9:15:3C:BA
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer:       /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial:       0195E07D56E4928A1AFD45D5A6EBC05B7F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number:          05F3
Signing time:             Sat 29 Mar 2025 06:01:05 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:05 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:05 +0000
Files and hashes:         1: 2t371AmA6am_gT2DygfV8oUEot0.roa (hash: jKlYnyLUgDsZbjU8rac27z9vNrX7VaKOYzCWe3mGEeg=)
                          2: 3uSBRyWYKWFXh6fJBh05eSD-NPU.roa (hash: Dmiovbs0P8NPsrWA6ocpp2+fAbq0ynsSfysA/ZSoY4Q=)
                          3: L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa (hash: /qnDyDKLdI8C1LuTXc4GUnjm3lOo1qcuwAVpaz4euq4=)
                          4: Q-ERh4C_fIreU1kJHqIbiCU1JV4.roa (hash: CvofurTY3xCBBIW91EGU3e0F4XVRnYSMNX8fSyDcopY=)
                          5: QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa (hash: IJMqi4E1bL4ZCNifjMhzbX4wFKnUH7rkpqt5Br3QiXA=)
                          6: eDpZd8hCNjolSN4qkPkdEuk5Cpk.roa (hash: GpXxUwCVOcT9tKB9rJ3lQPazQRu2PeNiLt4ytxxEgyk=)
                          7: ehxbQ-4P8JVXSWXFEnxtReDY-L0.roa (hash: AWYbOf6f0Jt77Fy4eIQx8HUxIvxOsXc2FQSALmqhna0=)
                          8: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: Jxvny5S9onKdXwgzgcb3iJgbdHQ/KKBxV/SJ/pnirok=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:56:e4:92:8a:1a:fd:45:d5:a6:eb:c0:5b:7f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
        Validity
            Not Before: Mar 29 06:01:05 2025 GMT
            Not After : Mar 30 06:01:05 2025 GMT
        Subject: CN=2fccbcd600282a34a7c816163666957dd9153cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:de:ed:9e:1b:f1:03:7e:aa:93:95:f3:db:
                    ef:78:72:28:7b:b1:8d:e2:d9:68:b5:d8:7a:66:e9:
                    21:a8:6d:fe:24:51:06:be:ee:a1:c6:4a:0d:b5:07:
                    3a:91:29:07:7c:2c:2f:90:77:52:d3:5c:44:24:b0:
                    3f:24:f5:c1:b8:cc:56:1d:7e:6a:30:46:43:04:3d:
                    80:dd:52:40:e1:81:49:49:a6:d1:62:21:af:9a:6a:
                    82:ea:77:bb:be:42:2f:32:17:df:bb:f4:c2:2a:cf:
                    85:a5:37:91:3c:4f:50:e5:41:bb:14:d3:7a:f5:8b:
                    94:50:ad:0b:4f:14:a0:8c:cf:8a:46:d3:a1:d4:20:
                    d8:01:a3:f7:9b:58:c2:04:dc:55:df:fc:41:15:b9:
                    38:51:47:ff:25:3c:01:70:b6:8f:79:ac:d9:dc:9e:
                    46:c3:aa:f5:5c:2f:50:bb:a8:16:6e:dc:ff:3b:11:
                    b7:a3:76:3c:60:ff:f7:0b:04:22:78:b0:18:50:78:
                    a1:4c:52:91:f1:51:4a:43:66:9a:3e:eb:95:f9:b2:
                    59:51:6d:22:94:7b:d9:d2:5f:7e:85:35:76:ae:8c:
                    90:82:52:ef:43:b9:60:41:87:ff:b5:50:aa:4e:d9:
                    90:b5:20:76:6b:6f:0d:27:98:a0:1c:3e:25:f2:59:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CC:BC:D6:00:28:2A:34:A7:C8:16:16:36:66:95:7D:D9:15:3C:BA
            X509v3 Authority Key Identifier:
                keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:e9:ef:18:fc:48:e6:8c:5e:25:2d:b1:8e:3c:b6:8f:4a:
         d9:a6:a1:90:9d:6c:50:85:30:33:bf:6d:fe:16:07:73:b8:e2:
         b1:33:11:43:cc:ed:73:4a:51:e1:c5:75:dd:af:f6:f8:21:cf:
         57:e7:ea:b7:b7:75:5d:4e:43:59:a5:39:a8:d2:e0:b5:ab:a8:
         a5:83:c0:27:bd:ac:71:26:dd:cc:2e:a9:15:af:69:bf:9c:60:
         99:b4:06:fe:3b:a6:f7:56:6b:5c:b6:05:48:23:11:8a:dc:61:
         02:29:ea:5b:8b:4b:54:26:c3:6b:c2:86:cf:b7:27:28:f8:b6:
         de:74:3a:b0:7c:df:cc:7a:d0:b5:4e:f2:4d:d6:c7:a8:47:c2:
         a6:80:e0:ec:e7:94:24:9e:e3:97:41:b4:74:3c:72:16:ca:48:
         df:f1:d2:79:78:39:b1:95:be:45:fb:5f:a1:c8:cf:da:d5:b3:
         13:29:5b:cf:9a:19:4d:0b:fa:2b:da:76:1c:a6:50:18:00:8d:
         79:d2:63:7d:67:56:dd:50:6b:81:04:87:a0:b7:1f:52:15:83:
         d9:f8:f7:f9:17:7d:8d:68:a6:28:2a:07:ea:35:16:0f:8f:86:
         d9:a4:e4:4c:9f:6e:44:05:ca:ff:ff:58:53:06:cd:94:76:73:
         37:92:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----