Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          bSBbA/S2ZxQX4I1SMQvoSreRIR24P+wsRHyPrcNsxu4=
Subject key identifier:   9B:51:52:DB:9D:2D:F6:79:A4:6E:66:AC:C3:F4:48:C7:2D:AB:16:D3
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       0195DFD8A765A156D479F08795857487441E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          1094
Signing time:             Sat 29 Mar 2025 03:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:12 +0000
Files and hashes:         1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: g8GwlOCP5v+1BmlQBf7Gn+q8xlKQgULqBvfuazQt2dU=)
                          3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
                          4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
                          5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:a7:65:a1:56:d4:79:f0:87:95:85:74:87:44:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Mar 29 03:01:12 2025 GMT
            Not After : Mar 30 03:01:12 2025 GMT
        Subject: CN=9b5152db9d2df679a46e66acc3f448c72dab16d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:66:da:59:8c:f7:d9:e1:f1:9a:7b:a3:81:
                    e8:27:5b:57:04:ef:3e:4a:03:e1:c4:dd:ba:91:5a:
                    c9:24:69:23:13:d6:2c:68:94:29:b4:1b:f6:49:13:
                    a5:37:75:79:8c:d6:80:6d:ea:a3:19:db:a5:3e:e6:
                    8d:32:36:01:a7:c5:64:be:1c:24:06:eb:2a:68:40:
                    74:67:36:9b:ac:7d:1b:29:a9:48:cd:62:c5:c3:1f:
                    9f:d1:33:d8:f2:35:35:a1:69:d3:f7:b5:82:c9:0d:
                    65:a9:c0:97:14:3f:b7:93:2b:6b:3e:f9:65:03:9e:
                    c7:8d:c3:77:2f:8a:ad:48:4e:86:3b:0c:3e:f7:75:
                    86:0f:84:4e:ee:fd:6f:7f:02:de:89:a2:5c:ba:d1:
                    f4:75:fb:cd:4d:a0:be:82:4f:8a:a9:8f:a6:7f:45:
                    f6:22:5a:da:0d:b4:06:2d:59:6b:69:c6:1d:85:d9:
                    de:e0:3a:c4:e2:f7:8a:5a:ee:21:66:d3:e5:2a:e8:
                    a3:fa:f1:62:f2:e1:aa:2a:c6:4f:a7:b1:fa:fa:cd:
                    42:59:0a:20:06:75:1b:f0:0c:5d:d0:e2:96:32:ed:
                    57:13:8a:2d:3d:1e:c2:50:7a:70:ee:71:2b:ca:75:
                    04:0a:c7:ed:32:45:5f:94:00:a3:92:7e:9d:4b:0e:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:51:52:DB:9D:2D:F6:79:A4:6E:66:AC:C3:F4:48:C7:2D:AB:16:D3
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:33:39:5b:31:e3:7d:de:78:d2:9f:fe:ce:dd:2d:9f:1c:
         41:da:06:6d:aa:ed:c2:3d:9b:ed:0e:bb:92:3c:d0:7c:d6:38:
         96:8a:64:17:3b:a8:13:82:fc:06:57:bb:1b:94:0d:d9:d3:37:
         16:ce:c4:1e:94:54:3f:09:58:14:8c:cf:c4:26:b2:17:be:2e:
         f0:84:06:0a:03:67:68:fb:4d:e6:fc:f8:b2:2a:d6:42:84:9e:
         70:d9:73:07:02:3a:f4:14:d1:2f:a0:60:7f:ea:e2:db:c3:6c:
         6f:45:0f:0d:a7:a7:5d:7d:20:46:8b:a5:2a:7f:59:37:fd:a0:
         83:23:f1:aa:29:f6:0b:df:29:4e:4f:79:7f:17:2d:99:3e:63:
         d1:2d:66:0c:3d:17:c6:08:c9:d5:1b:e5:18:d5:8a:6a:4e:66:
         5b:40:80:a2:be:c4:64:02:28:e9:12:1f:77:f7:29:72:e9:49:
         dc:49:2b:8e:68:b5:00:74:89:02:bf:a7:a2:0e:7b:8b:3a:50:
         f1:d3:51:4a:3c:a1:22:7b:ff:cc:79:2b:60:03:6f:6d:9e:ff:
         1c:35:a9:d5:ff:18:35:31:30:c4:f2:5c:16:4f:dd:98:6e:bf:
         e1:b3:87:a2:3d:24:e4:c5:48:0d:e8:71:bb:0d:3d:97:27:01:
         d1:5a:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----