Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File:                     wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier:          A2mvDXJlOr4tp3l8Jjcud243Bv7uVm+PS3Njvxs5KvA=
Subject key identifier:   8F:98:16:34:10:4F:65:FE:66:C5:28:B1:CA:E5:74:74:BF:8F:BB:2A
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer:       /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial:       0195E1599D51CCBF901B047DC60672B7A328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number:          0303
Signing time:             Sat 29 Mar 2025 10:01:41 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:41 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:41 +0000
Files and hashes:         1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
                          2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
                          3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: y0FPOTxtA+V+Jh9IpqyPggo/15PZIbSHrYwEYCgTA30=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:9d:51:cc:bf:90:1b:04:7d:c6:06:72:b7:a3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
        Validity
            Not Before: Mar 29 10:01:41 2025 GMT
            Not After : Mar 30 10:01:41 2025 GMT
        Subject: CN=8f981634104f65fe66c528b1cae57474bf8fbb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:db:bb:1d:fe:2e:12:3d:3f:7d:64:a4:44:
                    95:8a:d0:65:7d:0a:34:36:1c:cc:5e:44:50:2f:44:
                    48:59:d0:e3:58:a5:14:0e:58:fc:79:94:a9:72:dd:
                    8d:e9:f6:b2:64:c0:b4:39:0c:7e:36:8e:0e:7b:94:
                    a7:72:50:b2:50:fb:54:17:58:f7:a3:37:e8:31:4c:
                    a5:da:3e:ef:d1:06:52:9b:22:b0:1b:33:11:3d:e7:
                    00:81:f2:33:07:c5:21:74:41:cd:a2:5b:66:ea:41:
                    24:f7:f3:22:ae:3f:7b:4b:a6:72:6d:73:2b:ac:9d:
                    ec:26:fc:b5:4f:0d:2d:1b:2e:03:65:03:7b:f0:ef:
                    33:46:3a:97:85:58:e1:60:f4:da:ab:b2:d3:13:c1:
                    cf:9b:83:0d:db:b6:cf:8e:fc:56:ba:a8:36:3d:7b:
                    8e:ab:a0:14:35:fa:e7:45:54:0d:cf:3c:e9:89:88:
                    aa:e8:2b:83:67:61:c4:a8:50:ac:c6:5d:5c:63:be:
                    44:78:fc:1c:92:a1:3e:8f:35:58:d9:c2:61:0e:e7:
                    61:6a:2e:cb:cf:8f:a0:c9:97:e5:e9:9b:bb:53:df:
                    aa:50:07:91:a7:07:3f:f3:46:45:90:49:61:99:9b:
                    67:e0:cb:0b:36:da:ae:21:b5:aa:05:54:0c:2a:d8:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:16:34:10:4F:65:FE:66:C5:28:B1:CA:E5:74:74:BF:8F:BB:2A
            X509v3 Authority Key Identifier:
                keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:24:42:f0:54:02:e2:55:7a:e8:53:ee:7a:29:d7:49:c1:d3:
         0e:69:f8:38:40:b3:5a:65:83:69:0d:fd:50:65:e9:21:0f:d5:
         3b:38:7d:9c:7e:f2:4a:45:ae:9e:7f:a4:8c:b5:c5:da:6a:c5:
         d6:ee:cf:19:a3:9c:74:9e:6b:4b:b5:b2:6a:45:34:6d:c1:94:
         f0:55:85:91:94:b2:54:a7:66:e5:9e:6e:96:c9:0d:93:db:11:
         97:69:b5:b5:d0:43:c7:12:f7:72:09:8f:32:bc:f2:b6:d1:70:
         bc:80:76:56:fb:19:77:90:7f:f0:3c:cb:f3:e4:50:83:c3:4a:
         4e:80:58:0e:d9:6a:e8:9d:43:75:13:88:af:c7:91:1b:a8:63:
         38:06:15:14:76:c7:10:9b:a5:a8:e4:63:19:c2:93:bb:f5:13:
         de:8e:33:e9:bd:e8:35:f7:bf:0f:81:5f:23:58:69:8d:bc:bc:
         58:e3:ab:cd:7f:70:c8:4f:77:59:13:7a:ca:b4:e7:05:eb:54:
         13:85:5d:8c:a6:21:10:c0:2f:a4:a7:35:61:4b:88:58:3d:1c:
         8a:b5:d6:9e:c8:46:cc:9a:e3:77:ef:df:0b:7c:2b:a6:ae:cc:
         c6:a0:65:8b:30:e2:63:f6:a3:28:d5:e4:94:f2:5f:e6:7d:b4:
         c4:d0:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----