Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File:                     oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier:          KoiL/ZJ19PDlYBBmkpPqhLJwIRd8jSCcQ7WHSJGGJuw=
Subject key identifier:   8C:8F:72:5F:C3:11:86:5A:F6:C6:DA:E7:80:D6:19:06:E7:D5:C9:DC
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       0195DFD98386F77312ED1D7A7802A87B28BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number:          089B
Signing time:             Sat 29 Mar 2025 03:02:08 +0000
Manifest this update:     Sat 29 Mar 2025 03:02:08 +0000
Manifest next update:     Sun 30 Mar 2025 03:02:08 +0000
Files and hashes:         1: H27SmDR8baZpuMXqTM3iDpRfuZQ.roa (hash: HRHfMmSbiheBl5EWJYTnfvHlbbvdFtOGz3m90LhYcYY=)
                          2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
                          3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
                          4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: ccWqlHuWezMFnGqLB/NSWiY8xht2uZ1qW1vwZ6g7/Cw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:83:86:f7:73:12:ed:1d:7a:78:02:a8:7b:28:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: Mar 29 03:02:08 2025 GMT
            Not After : Mar 30 03:02:08 2025 GMT
        Subject: CN=8c8f725fc311865af6c6dae780d61906e7d5c9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:d5:71:0d:13:8f:01:f6:23:9a:e6:20:e6:
                    11:65:f4:69:ba:06:aa:7a:04:ef:c6:ae:5a:70:8d:
                    6f:ef:ff:de:3a:0c:51:b0:43:a8:23:9d:10:93:9d:
                    2d:6b:ae:84:a2:36:e3:d3:05:84:2a:ef:7f:eb:38:
                    0f:7c:2d:e5:a6:cc:f6:75:a4:cf:54:ff:17:7d:1f:
                    73:de:35:0f:55:bc:60:78:60:dd:71:6e:a7:bf:63:
                    62:13:d5:b7:e0:54:70:8f:31:9f:12:87:02:da:4c:
                    19:2c:3a:d3:bf:4a:8d:7a:7d:55:5e:a0:dd:4c:3b:
                    70:0e:b7:76:ed:83:39:7e:ce:f1:e9:d7:7a:e2:9c:
                    0c:e6:18:35:12:78:ac:6d:3f:a9:b7:02:ff:59:ca:
                    32:91:7f:67:f6:14:40:b8:5e:57:52:1f:71:a9:96:
                    f8:7b:a1:9e:a5:6e:cd:31:a9:ca:b5:e2:40:23:8b:
                    b0:97:70:6e:5f:2d:1f:ec:61:d5:2d:44:a1:2e:90:
                    26:a4:4e:28:78:30:e0:3c:a0:28:3c:21:88:52:ee:
                    90:d7:2f:53:5c:bc:f3:d5:b4:71:7b:30:41:36:7d:
                    ac:06:aa:08:e8:58:12:f8:a9:3d:3f:59:e3:a7:68:
                    5e:7a:ec:9d:90:ea:02:a8:34:f1:02:89:ee:fa:99:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:72:5F:C3:11:86:5A:F6:C6:DA:E7:80:D6:19:06:E7:D5:C9:DC
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:18:14:99:e9:b8:de:ba:af:bc:dd:61:db:01:18:83:4a:f5:
         cf:90:a6:24:39:ec:4a:6f:e4:1c:64:22:e0:25:28:df:c0:d3:
         3c:50:d8:15:df:ba:8b:67:2d:6e:8a:6d:78:41:33:f4:8b:b3:
         fb:63:17:ee:7e:78:9b:40:e4:0d:81:a8:84:b2:f4:eb:74:83:
         ee:e5:fa:e2:e7:bf:ce:02:85:c8:cf:89:f5:86:ea:98:08:57:
         96:fd:59:77:01:ca:20:e9:cd:3a:88:8e:c2:6a:d4:cf:95:37:
         9a:31:18:0e:f9:cc:da:37:84:26:f5:8d:9c:d2:51:f9:c4:ed:
         f7:13:d5:1a:b2:19:db:32:cc:6d:80:38:cf:e5:49:0c:87:21:
         97:d8:40:52:b4:fa:0d:8a:f0:98:85:18:dc:79:97:fe:be:e4:
         d9:75:bd:07:81:33:d3:54:47:a9:11:74:d2:8f:c8:4f:db:a4:
         53:3c:b4:70:f2:a7:d4:44:2d:9b:b8:02:5a:fc:4d:8e:5b:f8:
         fb:5e:6c:44:84:47:54:b5:c1:7b:aa:9b:fe:bf:b4:c8:fd:16:
         a0:bc:28:08:bc:fb:c4:e7:87:96:4e:51:d5:3a:27:4b:52:6e:
         f3:7b:a4:28:c2:48:83:da:77:8d:a4:c7:9f:02:7a:bd:a5:2d:
         9d:0e:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----