Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          hhlAjnz1OlY381ntjwKpUDaMUQAVzac7Nyg7oInINMg=
Subject key identifier:   B1:8B:D3:0E:0D:76:C1:EC:53:BB:06:DD:EA:1A:2A:B1:07:E3:04:A3
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       0195E046750897ADF95D10882FBB1D4074F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          0FEA
Signing time:             Sat 29 Mar 2025 05:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:08 +0000
Files and hashes:         1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
                          2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
                          3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: 0bBKdnSLMfMr7WmoqzIf8pa+9N4KpCgqm1w/cmvBh+E=)
                          4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
                          5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:75:08:97:ad:f9:5d:10:88:2f:bb:1d:40:74:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Mar 29 05:01:08 2025 GMT
            Not After : Mar 30 05:01:08 2025 GMT
        Subject: CN=b18bd30e0d76c1ec53bb06ddea1a2ab107e304a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:f9:da:7d:14:b0:53:8f:2a:de:6c:38:86:
                    11:b6:63:1d:35:40:e7:70:8d:25:71:ac:48:22:72:
                    1f:d5:ac:f1:1d:34:54:3c:5d:4f:d7:9b:ce:98:50:
                    b4:fb:0d:88:a2:c3:59:58:36:d1:61:d8:41:c0:eb:
                    74:9c:0c:82:64:ee:dc:e8:12:6b:05:b7:56:81:6f:
                    6d:ab:d0:70:09:ff:a3:34:94:9a:47:e7:69:d6:dd:
                    95:24:47:c1:1e:cb:a3:bb:e1:2e:29:3e:f3:d5:d6:
                    16:b2:cf:e8:1e:60:71:4b:94:4e:90:a5:1f:d0:9c:
                    7d:c8:cf:ab:4a:60:34:25:78:8b:ce:f0:9f:5a:25:
                    a1:75:25:77:1c:e6:75:dd:61:ac:fa:00:3c:39:7b:
                    15:d3:f9:59:71:20:e6:e7:7e:e0:2e:fd:04:4c:e2:
                    0a:ea:d5:89:d5:60:36:bc:a8:f6:a8:c1:ce:d7:95:
                    c7:8d:c9:6d:0c:83:29:cc:55:b1:c2:76:6b:fe:1d:
                    01:0e:90:c2:b3:8f:bd:85:16:5a:bd:02:ae:9b:99:
                    e4:9b:83:22:da:96:ed:a8:51:3b:48:f0:39:65:24:
                    bc:5f:26:e8:6c:d7:81:c7:f1:92:02:f0:1a:ff:c5:
                    f5:9b:a3:0b:ba:5f:7e:10:59:a1:a9:15:e1:bf:ef:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:D3:0E:0D:76:C1:EC:53:BB:06:DD:EA:1A:2A:B1:07:E3:04:A3
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:77:41:ec:38:bb:b4:2d:0f:5f:06:72:04:52:b1:07:c9:a5:
         d6:3d:a5:71:d1:29:d7:40:2e:79:b6:84:a5:74:00:17:2f:c4:
         5c:88:66:b1:50:02:cd:26:ca:1e:97:94:98:2b:da:e2:0a:c9:
         ff:0f:26:df:74:6b:b9:b7:70:6d:33:53:14:11:ad:3a:42:f2:
         1d:4b:eb:ed:99:2a:0f:0b:b5:62:dc:95:3b:d3:92:96:42:a9:
         06:bb:46:4c:7d:75:49:d1:a6:67:3e:13:02:af:b1:86:af:93:
         8a:aa:bd:12:68:63:1d:13:10:4a:8c:d4:23:e5:1e:b7:5c:4e:
         a7:48:7d:75:33:9d:71:c8:f1:25:b7:65:17:c8:36:9b:dc:21:
         98:3c:ab:50:1a:62:29:67:68:36:33:f2:df:0e:e6:c0:62:c8:
         72:dd:94:e1:85:b8:05:59:75:64:43:da:86:6a:7a:00:61:1e:
         5b:f2:2a:b9:5a:51:9e:08:62:a4:f9:d1:b3:31:96:4f:40:88:
         49:f3:16:a0:8d:56:ff:0d:f9:43:4b:46:9c:28:49:0b:3e:5f:
         83:2a:69:a9:7e:f2:16:c3:f2:da:29:6f:a6:2b:91:34:33:15:
         9e:d6:3f:7c:46:9b:c3:c0:b1:62:6a:bc:f4:a8:6c:83:93:70:
         b1:53:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----