Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          xg1NSLDYKvVoiqyJr0W803862y+hTnCrECO4pnObo0A=
Subject key identifier:   44:99:8B:90:A7:8A:26:EE:AF:EF:53:65:CA:49:AE:86:B0:DA:9E:C0
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       0195E00F77125B9ECBCF62112D11B773C626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 04:01:04 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:04 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:04 +0000
Files and hashes:         1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=)
                          2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: KyH6Sp8wirZCaT1DyhDSEH/er8FlaVkcs8kw5oGHMtY=)
                          3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=)
                          4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=)
                          5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=)
                          6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:77:12:5b:9e:cb:cf:62:11:2d:11:b7:73:c6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Mar 29 04:01:04 2025 GMT
            Not After : Mar 30 04:01:04 2025 GMT
        Subject: CN=44998b90a78a26eeafef5365ca49ae86b0da9ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:ab:bd:b9:c5:fb:01:58:de:a0:09:16:0f:
                    b8:a8:5f:ad:ae:59:b2:4e:ef:a9:48:8f:8d:12:12:
                    44:15:7f:f6:0b:3a:37:cd:d4:69:d2:bd:75:3b:28:
                    c3:3b:27:da:28:8f:5e:5f:91:84:05:19:82:68:21:
                    ed:3e:2b:9c:37:49:10:6d:db:e1:b0:b2:c2:fb:c4:
                    9e:52:7a:62:08:d3:d0:96:84:6c:ff:de:e6:fc:df:
                    dc:e6:cc:00:4a:25:72:be:a1:0e:8a:4a:08:4d:ba:
                    42:f5:44:8b:83:5b:81:0d:3c:2d:92:e3:5a:d4:52:
                    2b:99:d9:5a:ec:9e:c7:fb:e0:b2:3b:4d:32:26:43:
                    d3:4d:05:e4:7b:45:d8:2c:8f:24:58:46:93:48:80:
                    9d:89:5b:3f:bd:c6:6d:f5:a1:8f:ff:17:09:7e:1c:
                    b6:72:96:26:cb:89:24:e5:68:7d:04:5b:fc:7d:56:
                    3a:1c:ef:42:7a:eb:57:a6:fb:58:99:2a:6e:f5:36:
                    dc:8b:04:06:ed:cf:c5:12:46:99:02:9b:ff:63:b7:
                    0b:24:d6:b1:51:03:72:5b:e4:7a:50:72:0a:51:08:
                    17:05:03:42:2f:b4:2f:2a:0d:d9:8a:47:30:b1:ba:
                    d3:bf:dc:e8:75:92:9e:6b:6a:16:a6:c4:5d:9e:a1:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:8B:90:A7:8A:26:EE:AF:EF:53:65:CA:49:AE:86:B0:DA:9E:C0
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:34:72:9d:86:05:3a:46:87:fe:a5:8e:7e:95:e9:63:58:
         b6:cb:5b:e2:92:36:0e:ab:e8:c1:c7:03:4b:84:2b:fc:78:78:
         88:a8:be:c5:23:de:76:82:bd:eb:f7:2b:7d:71:ec:1f:2a:88:
         7d:92:83:25:d8:0f:c1:7b:97:64:6d:17:75:ea:db:f8:43:ec:
         14:51:9a:3b:7d:e3:d6:2e:52:58:9e:9b:36:64:cc:26:84:dd:
         a5:4f:3b:32:d0:80:8b:9b:fe:c8:45:76:a5:b9:36:10:4b:40:
         8b:88:83:38:97:11:6a:fc:64:80:26:1c:73:03:f1:3f:b5:a2:
         d1:72:70:87:eb:35:16:cf:e7:27:e2:66:4b:68:0e:30:b4:83:
         60:20:4e:7b:39:c3:4c:9e:c8:36:d7:a5:e9:f6:ac:7b:06:21:
         2d:3e:7b:cd:38:52:27:e6:dc:c5:21:35:d7:69:50:ba:00:6a:
         0f:53:4b:a1:91:99:94:74:57:d7:6c:c2:af:b4:03:6a:3d:e3:
         23:70:a6:ec:00:bb:9c:a0:fc:b8:0b:c4:61:2d:a0:62:a2:24:
         a5:0b:d4:ae:4e:c0:2f:76:25:d6:8f:ac:5d:78:1c:4f:89:d9:
         3e:8d:01:9c:c6:4a:75:36:95:82:b5:e4:29:14:6c:fa:e4:3f:
         59:e9:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----