Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          SZsHjUKit0+MVNi6lOz4OdvjsM4iTo1uE6CF9gQL+v0=
Subject key identifier:   A7:1E:AF:BB:03:B1:13:C7:4B:C0:7D:D4:F1:53:02:9F:F0:E2:B3:3A
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       0195E0EB7B60431145E1E06F65D4566EF326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0956
Signing time:             Sat 29 Mar 2025 08:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:23 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: lM54ovKoAxyj93m9qkV4Cv1dKD39chzE71deVjl5bRs=)
                          2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=)
                          3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=)
                          4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=)
                          5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:7b:60:43:11:45:e1:e0:6f:65:d4:56:6e:f3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Mar 29 08:01:23 2025 GMT
            Not After : Mar 30 08:01:23 2025 GMT
        Subject: CN=a71eafbb03b113c74bc07dd4f153029ff0e2b33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:c7:4c:32:97:ff:7f:e0:c5:33:2d:a9:15:
                    c2:b8:09:cf:0a:f5:03:40:f8:11:16:0c:63:25:40:
                    45:a4:c8:78:eb:07:55:c3:a5:fc:19:e2:a6:53:fb:
                    cd:8e:dc:dd:95:1e:6e:0a:33:72:1c:6d:63:a1:0c:
                    75:bf:b5:a6:d2:29:4f:99:12:eb:e0:e8:34:2a:95:
                    8e:de:bd:da:03:6b:6e:ee:56:a4:d0:3a:ee:aa:a7:
                    58:fe:94:2b:2d:bb:43:3b:31:ec:79:e2:91:1e:01:
                    85:87:ba:73:75:ce:f4:46:7e:b6:30:1d:9c:ab:2a:
                    c4:a7:cb:a2:0d:1b:1d:e0:c6:c3:46:62:e9:0a:e7:
                    c1:8f:a2:f8:95:ec:84:a0:8a:46:58:be:ca:41:d1:
                    51:10:a2:ca:94:dc:90:08:f9:c3:86:06:a6:43:bf:
                    97:5a:73:8b:2d:ed:31:44:0a:7c:39:4a:b8:5d:9e:
                    c5:8c:58:04:a5:ab:f1:8d:8d:f5:1e:e2:78:a8:ed:
                    80:50:a4:75:99:35:1d:24:1f:f7:52:54:c2:23:6b:
                    67:47:0c:79:7d:e3:06:2c:7a:91:ae:63:fb:54:e5:
                    0b:8a:cb:b0:8a:9e:93:86:16:29:0d:70:dc:d4:eb:
                    59:fa:f8:c1:06:49:99:33:33:d4:ef:92:3a:9b:66:
                    85:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:AF:BB:03:B1:13:C7:4B:C0:7D:D4:F1:53:02:9F:F0:E2:B3:3A
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:c8:87:92:81:c7:5f:54:d2:4b:4b:e7:f0:b2:8c:d9:74:
         6b:38:30:d2:19:84:fb:4d:1d:69:5e:1e:34:c6:d8:3c:f1:19:
         0b:59:2a:81:8a:c4:72:0b:63:c4:2f:af:22:a8:f0:21:15:a2:
         76:86:76:2d:ba:ac:0e:2a:a8:70:54:bf:7a:97:4e:cc:d7:75:
         97:b8:d4:da:fd:89:f5:bd:aa:8e:db:d9:45:2f:1f:03:17:0c:
         da:df:70:f8:53:94:38:6a:e7:bf:84:bb:ac:91:fc:65:a1:6e:
         d5:76:42:c8:ad:c3:df:60:9b:f4:e8:fa:c4:fd:fd:ac:72:6e:
         80:41:9e:67:e9:29:9d:fc:85:99:66:c8:4d:8a:5c:b2:12:c7:
         3a:63:aa:a5:2a:00:fa:22:1b:92:9d:f8:bb:34:1e:2b:69:b7:
         b2:b7:06:62:4d:3f:b7:48:11:71:3b:d9:aa:b0:93:a8:3d:1a:
         3c:ff:93:a5:39:e5:5d:e6:8c:4a:d3:7d:84:7e:05:18:6a:c4:
         7d:35:b7:5a:40:9d:91:73:44:4d:38:63:2f:84:94:34:08:43:
         61:4a:7f:3a:00:1b:6b:66:eb:b0:30:0f:7a:32:5b:27:45:56:
         87:88:4a:02:c0:ce:55:d9:84:32:12:a4:b4:e8:ec:9a:4f:53:
         eb:94:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----