Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
File:                     KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json)
Hash identifier:          saDijxOMM4/WMYh8r9dUIeT/2SMrfQRDIoOqV0/4YG8=
Subject key identifier:   D7:6F:02:D2:F2:D5:0C:25:99:39:53:6A:A9:58:BA:40:96:36:E8:3F
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Certificate issuer:       /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial:       0195E1903B61EA4BF0387A529851A3B911FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
Manifest number:          045B
Signing time:             Sat 29 Mar 2025 11:01:20 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:20 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:20 +0000
Files and hashes:         1: BFO3ymmoYYaIYHS5P0QYIRIduOE.roa (hash: XDEkRrXKYSyzazKlJgQxG/gD0C0jt2vFXpektMJym84=)
                          2: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=)
                          3: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: bT3ywEfkez8X6TqUxWqEO4/4tTm0RjfjWfComIAvGxg=)
                          4: Obh49N8haIkA0hx6GPOTSLLqdCc.roa (hash: sXqg85AR2927Bhb4qdGhUDmKhe8sDVPyPDEd4NJSPLM=)
                          5: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=)
                          6: RFKSTXwXHx_I0X-jgSyyttokIKM.roa (hash: ZJvmGtUNiJYk9+PI2VAh73nS3jxIyV30ghb/19NLU48=)
                          7: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=)
                          8: YYA24Gwpmr6WLrK2sHYyV54Dc0A.roa (hash: y8Fe2VWfAJFVAfPInM4iGd7JSb+2Rg0aP2L6gGF+qEQ=)
                          9: g0Xq41en0MvSc6brqOyCJ-h-0KM.roa (hash: Gw1hdBraaiHJF+U9X5y+4LPKBAd7UP0aCyHshi3rBBU=)
                          10: loy5Snyw-iUVPzzHRVWXXXo15_o.roa (hash: HapHLXp4oAYGR81r+nU701ZcjYxsNP2uFcUwMFCofYE=)
                          11: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:3b:61:ea:4b:f0:38:7a:52:98:51:a3:b9:11:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
        Validity
            Not Before: Mar 29 11:01:20 2025 GMT
            Not After : Mar 30 11:01:20 2025 GMT
        Subject: CN=d76f02d2f2d50c259939536aa958ba409636e83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:41:94:10:90:e4:e9:22:15:61:33:0b:5b:
                    e2:7f:19:c7:44:56:59:5b:be:90:b2:0e:62:63:b7:
                    5f:28:71:71:e7:2b:2f:25:47:85:51:40:88:54:b1:
                    a8:57:d2:bd:e5:89:e0:fa:74:a2:17:59:15:db:54:
                    96:0c:82:27:9f:ca:88:d0:8d:98:0e:45:b6:56:de:
                    8b:06:86:97:f9:da:23:1a:54:90:a1:81:8c:a4:68:
                    54:8d:ad:97:6d:8d:17:e2:69:f3:76:79:3f:10:15:
                    40:22:c9:9b:26:a1:67:6e:0b:58:9d:70:3a:f8:a9:
                    91:2c:c8:fa:23:0b:2f:9e:aa:d6:80:f2:e7:c8:00:
                    5f:97:6b:e3:6b:d9:39:bb:c4:7f:e2:77:05:25:86:
                    21:5c:f2:ef:9b:4c:5e:9c:93:47:34:cd:44:72:f7:
                    60:f4:fe:71:89:86:01:47:da:ae:3c:cb:8e:0e:a2:
                    2e:a2:f4:ec:c2:57:3a:fa:3a:2b:ee:96:73:04:a2:
                    16:df:20:a8:4b:6e:38:b9:89:e2:3f:4c:52:0e:50:
                    2b:17:d4:44:ee:71:22:05:44:93:07:84:08:1d:6f:
                    11:cf:08:22:b9:ad:48:ce:f0:9e:75:13:f0:a5:c6:
                    d6:5c:18:2d:5a:3c:92:be:c1:c2:5c:48:3b:46:83:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6F:02:D2:F2:D5:0C:25:99:39:53:6A:A9:58:BA:40:96:36:E8:3F
            X509v3 Authority Key Identifier:
                keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:94:85:ea:db:02:0d:21:6d:4c:b6:12:e0:83:a8:a3:7b:72:
         86:12:31:5a:87:c7:3b:f7:1c:ab:2a:ad:eb:e9:16:4f:d8:33:
         5d:06:b0:55:b2:fe:30:6e:96:d5:b7:ed:eb:88:48:66:ba:f4:
         d5:fb:7d:04:0d:64:05:a1:9c:65:23:0c:44:46:38:5b:80:0d:
         ef:5e:ae:a3:3a:47:c2:be:be:a7:61:f7:e9:a8:85:4d:c2:b2:
         e2:c4:09:c8:22:41:09:7d:70:42:77:41:27:e3:5e:d0:91:30:
         9b:0d:34:28:d1:2d:07:03:08:25:d4:a0:e9:4e:17:83:97:8f:
         f0:82:30:2b:67:36:08:47:7a:4b:13:b6:0a:3d:e2:85:a1:7d:
         1d:fb:da:92:54:76:7a:98:8c:0f:57:5b:d4:96:3f:dc:c1:41:
         46:8d:8c:37:15:22:a1:30:ce:a3:72:d5:b0:36:3c:58:72:24:
         e0:d6:b6:60:6c:23:1f:4d:5e:9a:3e:4a:74:87:53:f8:a2:91:
         51:cd:73:31:ef:1d:4e:36:fd:8c:b1:dc:35:32:72:96:96:1c:
         7e:32:1c:69:33:20:31:72:3c:35:50:36:cf:62:98:24:3f:34:
         6c:5f:10:35:dd:3f:02:94:e4:7a:d1:51:26:ea:60:cf:53:ac:
         a1:a7:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----