Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
File:                     Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft (raw, json)
Hash identifier:          tc32tQd7R847rhatP1fAVel3Dl8dkdFMAYVVS+ZNOnw=
Subject key identifier:   BB:D3:45:39:61:A5:34:08:F0:87:B0:E5:2D:0B:38:1E:45:D3:50:51
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       0195E00FCEC7F26AABD131E4F4FF7C443F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 04:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:27 +0000
Files and hashes:         1: Axhuv-vSYllpuU-14IugpstzqWE.roa (hash: /Ord+e8QnPH5LGTzpUgmYsFuHyPV/bxgYVJqRNe2PIA=)
                          2: Dpiiya2z2mifdNhqVaRKmAzL95Y.roa (hash: sqFLPY2vXH7g4+A/b285ZHpA7GX89rIisaqW4K6po8o=)
                          3: INSqWlHflpOidRP2Z0zkE0RFoZM.roa (hash: UYyBIx3hFm38d0qCAb7SJuuzgZHuKn0sxA5Yj+GvQrY=)
                          4: KlHNG1wkVyOFx-j7DYZVfmh5bYE.roa (hash: L5JYU64abXKhXkIrpf3gdfvIS55/epAy6+ULSIZ/xw8=)
                          5: Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl (hash: 5+RRlH2FS85ZaTBIKs9/6EsdIawJMRFCw3HRiKnL/08=)
                          6: XBUDByF8di0OovXdvsIAPmD8oI8.roa (hash: QKkt6zof2ioYKcO5/osSYc20Y4gabGbrulwMZuT72/Y=)
                          7: eAIf5pwwtS5DMcRXjingbijYa6I.roa (hash: 5x7C4C2DIQEq7YkrMXUAQXNBSZ9Y9MaJGusjLg+DCEM=)
                          8: q6CD9OHloXnbJ4quKnzMfMA8Aio.roa (hash: 1FAJq7k9JZNXXgBXTfHO8QVEmHccCC1/W+DHOFmecBI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:ce:c7:f2:6a:ab:d1:31:e4:f4:ff:7c:44:3f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Mar 29 04:01:27 2025 GMT
            Not After : Mar 30 04:01:27 2025 GMT
        Subject: CN=bbd3453961a53408f087b0e52d0b381e45d35051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:90:49:9e:5a:c6:81:06:c7:7f:a0:f5:48:
                    e6:e4:bc:1e:1f:76:eb:fb:69:71:b9:0f:0a:71:40:
                    39:be:a4:87:3b:99:e7:2d:8a:4a:20:f9:75:ad:0b:
                    99:74:05:3d:a8:2c:34:9e:91:95:cf:52:46:83:61:
                    10:4a:6c:f8:2b:05:d7:71:c7:b7:22:6c:ef:70:02:
                    44:d6:b4:ec:48:29:ef:a3:78:fd:0c:71:ce:81:b6:
                    16:e0:eb:d2:2f:1b:f4:3f:e1:df:f4:b4:05:09:5e:
                    21:e0:ee:c0:ca:06:df:30:b8:d5:23:8e:9d:96:64:
                    69:b9:19:6f:52:68:00:55:9d:84:41:5c:30:1e:12:
                    d6:f7:0e:8b:f7:45:0f:5c:0a:b1:93:bc:9c:e5:d3:
                    d9:8b:95:56:e1:31:7d:b0:ef:fc:35:1d:23:fb:a8:
                    9c:be:99:78:ca:9b:56:9e:57:34:ca:5a:12:78:62:
                    c0:03:4b:0d:9b:6b:4d:63:a1:8b:bf:94:4b:bf:75:
                    b5:9f:85:d2:ec:23:9f:61:a4:4a:68:f4:6b:02:a9:
                    3f:7f:04:e5:40:26:21:95:e1:e9:ea:3c:90:d2:8e:
                    eb:b8:2f:4a:8e:0f:43:12:b4:f1:22:d6:c2:32:e9:
                    92:87:e6:71:fc:c2:1d:4f:32:35:0a:42:f0:4a:8c:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D3:45:39:61:A5:34:08:F0:87:B0:E5:2D:0B:38:1E:45:D3:50:51
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:77:5d:1b:d8:39:ce:5b:c0:8b:ba:5b:31:1b:87:6c:cf:60:
         dd:8a:3d:95:d2:06:bf:a6:6d:6b:28:44:2d:45:14:bf:f7:9b:
         be:10:74:ab:52:e6:c6:cf:73:d5:3f:c4:b3:7e:ff:6d:b3:4c:
         ce:99:9f:67:b6:27:af:93:2f:9e:38:ed:e9:7b:0f:ff:db:ed:
         c5:ac:52:45:59:ef:7e:55:ec:92:07:db:06:49:fb:2d:e8:65:
         73:75:47:8d:55:ff:8f:1e:a6:50:47:da:35:65:67:ef:e3:47:
         2c:77:3b:5a:37:8f:86:b4:8e:c8:28:be:78:85:33:27:cb:a6:
         eb:20:0d:e1:0f:13:17:b4:c0:e2:b8:23:53:c8:bf:09:65:63:
         2b:53:1b:1d:50:b8:49:46:11:23:61:23:74:66:9e:bf:52:dd:
         47:9b:44:a7:8c:db:83:5b:00:1d:c4:40:fa:46:ee:3a:18:41:
         3c:16:d8:6a:2b:f7:c2:c6:50:78:e7:a3:a3:48:6b:4a:de:98:
         a1:07:20:1e:ee:67:89:17:73:f0:a0:41:8b:07:ae:c9:18:85:
         a8:6c:cf:3c:4c:71:83:49:89:e1:7b:01:3d:9b:fc:02:37:e3:
         f2:4d:a0:d4:e9:11:7e:9d:31:e7:55:18:aa:a6:81:c5:d2:9b:
         40:d2:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----