Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File:                     sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier:          XqW3LaDVThtmneQ+SeTXzOUa9CJSmdsf8ur8rHD8mUE=
Subject key identifier:   92:F3:81:76:EE:B6:B2:DF:6B:54:D0:CE:F2:D9:1C:11:89:B7:12:E6
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer:       /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial:       0195E00F5A1AFE42972F9D66FFDB996F98B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number:          082C
Signing time:             Sat 29 Mar 2025 04:00:57 +0000
Manifest this update:     Sat 29 Mar 2025 04:00:57 +0000
Manifest next update:     Sun 30 Mar 2025 04:00:57 +0000
Files and hashes:         1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
                          2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
                          3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: GZK1iZmkPRjw99IrAkoYEhMCGy+Tx36L1xKe5l9sTTo=)
                          4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:5a:1a:fe:42:97:2f:9d:66:ff:db:99:6f:98:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
        Validity
            Not Before: Mar 29 04:00:57 2025 GMT
            Not After : Mar 30 04:00:57 2025 GMT
        Subject: CN=92f38176eeb6b2df6b54d0cef2d91c1189b712e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:cf:81:bd:12:73:65:c2:2c:91:59:73:a9:
                    10:fc:83:cd:55:d6:1c:a7:28:05:6a:27:36:e2:89:
                    d1:81:b7:3a:50:f5:e4:0f:72:1d:f5:70:b8:89:0f:
                    a8:09:ca:8b:3c:ed:e1:6b:50:96:10:0f:a9:cf:f7:
                    2f:90:2a:f9:a6:2b:3d:81:35:90:08:c3:95:16:38:
                    7b:a3:d5:a3:88:f2:93:01:d0:8c:b6:a2:18:f3:f7:
                    59:4e:72:fc:a0:63:da:ee:b0:89:89:87:89:93:77:
                    48:db:a0:19:6c:06:db:b9:de:06:d9:d8:ae:7f:2b:
                    ce:03:3e:60:36:5c:20:ce:c2:5f:86:53:ad:c1:59:
                    ee:7e:a9:bc:70:31:a9:fa:70:48:76:11:9b:db:67:
                    9f:8e:82:b5:cf:f7:6b:0a:67:60:ca:d1:0a:fa:32:
                    4c:3b:00:02:f2:13:ec:a5:1b:1b:1d:30:43:e8:06:
                    dc:ae:75:8e:15:64:dc:38:3f:42:5b:b3:d8:d6:57:
                    2b:fa:6e:e8:d2:08:50:08:5c:2f:a3:ca:75:81:21:
                    e3:f3:89:95:33:56:2c:69:21:37:41:2c:9b:c4:0c:
                    4f:70:40:e0:1f:19:26:b1:34:3e:c3:d3:a7:00:e5:
                    ca:32:22:36:4c:2a:24:3f:84:f6:ae:db:6e:4f:bb:
                    b9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F3:81:76:EE:B6:B2:DF:6B:54:D0:CE:F2:D9:1C:11:89:B7:12:E6
            X509v3 Authority Key Identifier:
                keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bf:26:53:73:76:c3:50:ba:a2:96:ff:ae:e0:03:74:5b:79:
         11:b0:27:3b:94:aa:c3:24:0a:24:62:cc:4f:11:04:b2:01:74:
         54:eb:fa:9d:f9:4b:dc:3b:0d:bf:cc:c7:d0:b9:16:e4:c8:82:
         50:17:40:6e:c7:b4:e8:13:54:dd:69:1d:d3:39:d9:01:71:65:
         13:16:72:38:39:c2:6e:d6:76:96:0a:7d:ed:47:7b:1a:22:42:
         a1:70:79:6c:fd:f4:be:31:13:1b:8e:ff:6b:b9:e1:0a:50:94:
         72:56:9d:9f:f9:00:71:c9:a1:37:31:46:46:00:20:ab:e3:9d:
         a4:b8:45:1f:88:9e:eb:1f:ea:e7:a4:a0:78:c1:78:2e:01:a5:
         77:12:9f:17:27:c7:03:bc:b0:c0:a0:44:52:2d:15:4a:07:38:
         9d:f1:ec:62:0a:81:89:28:44:6f:d0:34:7d:b3:1f:6c:ec:76:
         23:7d:ce:db:ea:21:3a:8f:cf:fe:99:7f:63:e1:ed:1e:b2:e5:
         7f:d1:69:05:d7:97:b2:8d:bd:14:a6:10:dc:d3:ab:4e:03:c2:
         89:16:5b:ee:9f:5a:06:fe:28:4e:e9:0b:95:7e:4f:9d:27:8f:
         96:04:7f:20:8e:50:72:44:a0:fd:33:b2:00:09:84:34:8b:12:
         83:43:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----