Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File:                     sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier:          hTXZ5RAs+RzfxcbQ/HfBSRXgTq7NGVFfuPDjWgaWu+Y=
Subject key identifier:   CF:BB:24:B1:9E:B9:15:79:8D:58:BA:B8:6F:4B:6C:29:A0:8A:90:5A
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       0195E0B435031E34D7B40B76FE904505AE33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number:          120F
Signing time:             Sat 29 Mar 2025 07:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:01 +0000
Files and hashes:         1: Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa (hash: cBzZGlcz2mRnPCf/PBZJTLNK/ZEjrb5GaHlLhcC0rkI=)
                          2: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (hash: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=)
                          3: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: Vg5pbLqHw2dDUFN/Ye955nzm6oWpf7GRdl9TFXlnKik=)
                          4: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (hash: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:35:03:1e:34:d7:b4:0b:76:fe:90:45:05:ae:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Mar 29 07:01:01 2025 GMT
            Not After : Mar 30 07:01:01 2025 GMT
        Subject: CN=cfbb24b19eb915798d58bab86f4b6c29a08a905a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:23:8f:ef:4c:2a:c6:1e:60:9f:76:59:c8:
                    84:63:19:52:22:40:6b:92:fe:a4:c7:14:02:8d:0d:
                    08:e0:48:e8:98:2b:45:1a:64:c3:df:2e:21:2f:e2:
                    9b:49:49:d4:3f:78:56:95:a7:3e:1e:be:a7:6b:8a:
                    4b:bd:68:55:ae:41:7f:ad:9b:43:da:53:ba:38:db:
                    66:39:57:af:26:4a:5e:3a:5f:f7:9f:80:fe:8d:5c:
                    5d:b7:0e:a6:d2:cc:ce:8d:64:e7:e0:d3:0d:ee:26:
                    62:fc:84:99:c6:7b:f9:b1:d9:61:be:9f:fb:c6:c1:
                    cb:8e:bd:60:31:1f:3a:5c:b4:e3:c7:f9:66:03:a4:
                    37:90:31:dd:16:71:40:ea:23:5a:78:80:05:fb:d8:
                    06:36:42:43:87:16:66:c9:ba:ef:69:e0:ac:a1:dd:
                    fb:4e:06:b1:5a:96:46:a4:d8:86:d5:a8:03:22:3e:
                    c3:d3:4b:ef:8e:46:84:ec:01:5d:c1:8c:6e:b7:d4:
                    dc:d4:18:7b:01:12:24:bc:92:04:a4:2b:f0:80:c8:
                    b6:76:4c:36:8f:af:1a:aa:ff:b8:df:37:de:17:75:
                    db:77:6a:2f:f4:a4:99:40:e5:c2:57:3a:39:75:84:
                    76:24:3e:6e:ff:dc:5a:af:54:6a:55:fd:6e:64:92:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BB:24:B1:9E:B9:15:79:8D:58:BA:B8:6F:4B:6C:29:A0:8A:90:5A
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:3b:45:73:fe:9a:90:c0:d4:f7:06:36:77:5e:63:1f:a6:
         3d:df:6c:fc:25:72:e4:2f:27:79:53:18:f0:54:5a:f9:3f:35:
         2b:6a:e3:eb:2d:3c:38:3f:61:dc:27:5e:ca:5b:4d:b5:c7:42:
         34:e6:1a:65:1d:ec:a7:cd:0d:d6:2c:58:d9:5b:0d:c8:80:3e:
         94:db:5a:c6:dd:63:91:5b:df:40:53:5a:c7:92:78:1e:61:32:
         4e:3c:1f:73:c8:67:7e:fb:a0:69:8f:72:ba:40:40:17:76:28:
         98:83:37:15:12:2a:e7:88:0e:7d:c6:48:54:6f:99:ef:6a:2d:
         07:d6:10:f4:cc:92:21:6c:16:b6:ff:67:0f:78:51:48:20:6e:
         3b:96:81:79:bf:95:fc:83:a0:07:c8:e2:2f:5e:cd:2b:8f:c0:
         6b:56:ed:02:e0:4d:2d:23:63:84:bb:7a:19:7d:b2:0e:26:a8:
         2a:6f:83:6e:aa:da:f4:ea:55:47:ed:ab:cf:10:f3:40:04:d4:
         51:70:20:4f:35:4a:51:dc:0d:86:dd:2f:f7:33:65:0a:bf:79:
         6d:00:12:2e:18:09:2f:94:4a:17:4a:27:09:be:87:82:c5:f5:
         21:95:57:4e:7b:00:5c:d6:31:e3:91:a8:5e:48:79:74:63:02:
         45:7c:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----