Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
File:                     CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json)
Hash identifier:          FySB/bBefjCMkN/VufRIUHuA5r6ue1ydTi+PDFIKfKg=
Subject key identifier:   FB:D3:D0:76:B2:70:EC:5A:A3:CA:73:75:CA:74:63:AB:0B:B4:41:9C
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       0195E07DC1B1CCBE9B691B047DDEE32F69E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
Manifest number:          14CB
Signing time:             Sat 29 Mar 2025 06:01:32 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:32 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:32 +0000
Files and hashes:         1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: VanWchDniZYInvZACmOa7ZmgEX0qrgTbBBR8zF6pcXY=)
                          2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=)
                          3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=)
                          4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=)
                          5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=)
                          6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=)
                          7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=)
                          8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=)
                          9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=)
                          10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:c1:b1:cc:be:9b:69:1b:04:7d:de:e3:2f:69:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: Mar 29 06:01:32 2025 GMT
            Not After : Mar 30 06:01:32 2025 GMT
        Subject: CN=fbd3d076b270ec5aa3ca7375ca7463ab0bb4419c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:9e:13:26:09:b1:49:90:48:0c:4d:81:fb:
                    80:7f:49:c9:a2:7e:fb:97:d2:3a:4a:72:f5:48:c8:
                    32:05:4e:24:a2:f4:d4:24:46:06:ec:11:98:f6:52:
                    47:70:e3:da:08:43:2f:07:86:b5:6a:8b:82:05:64:
                    01:5c:46:46:05:a6:94:40:10:b2:21:38:15:dd:36:
                    45:4c:bf:3a:8e:e7:bb:dc:65:1b:02:c8:0f:82:55:
                    e5:3e:9c:df:00:b6:4a:9f:7a:d9:9e:ba:ca:75:f8:
                    e8:37:38:b2:4e:5b:cb:95:fe:04:3a:f1:43:16:dd:
                    e7:f4:30:4d:49:d0:5e:42:a5:97:9c:a8:e0:0e:27:
                    b3:c3:1b:79:b4:e5:b6:4e:42:32:fb:52:8f:3a:f8:
                    3f:31:56:3d:52:71:83:86:9f:09:db:30:5e:00:43:
                    41:3a:ef:79:4c:60:8a:7a:03:b5:07:5a:94:b6:1b:
                    94:f5:ed:c8:bb:ec:0b:33:50:cf:64:d0:2c:1f:89:
                    a4:04:2d:1f:48:2e:c9:80:36:09:4a:5c:7f:8e:55:
                    eb:ca:f3:16:ff:4d:27:b0:1d:09:94:29:91:fd:ad:
                    24:a6:e7:6b:1b:dc:b1:96:e7:62:dc:ed:e3:13:b8:
                    a4:a1:94:7c:af:4b:e9:82:72:20:c6:06:56:51:20:
                    4d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D3:D0:76:B2:70:EC:5A:A3:CA:73:75:CA:74:63:AB:0B:B4:41:9C
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:18:3e:1b:24:13:d0:96:a4:2e:a1:68:c3:f3:9f:4d:a1:00:
         f4:1b:aa:2d:bd:4e:f2:50:53:0d:75:95:be:77:a2:ca:a5:1e:
         fa:83:f9:ca:30:f3:bc:a9:98:ff:08:9c:34:c6:21:d5:dd:b5:
         4f:0a:a1:83:36:23:38:f9:c1:2f:4f:05:19:37:0f:8c:c6:9d:
         66:61:7c:9b:73:70:8d:c2:a2:1a:e3:a8:11:d1:d9:9f:25:c0:
         46:d1:c8:fe:7b:68:29:dd:58:fc:91:4d:60:f5:1e:ac:6a:61:
         66:5e:13:37:b6:84:d8:67:8a:a5:cb:e0:ad:55:77:9c:bf:54:
         96:58:33:fd:35:6b:98:05:eb:94:fe:6f:78:4d:1a:0f:5f:b4:
         ce:62:51:d4:b1:6d:d9:40:2c:9a:6b:88:ca:07:26:fc:21:2a:
         81:52:53:4b:79:a8:54:51:01:09:e2:9f:71:c0:23:56:9d:a8:
         59:67:c9:a9:e5:4f:3e:01:8f:18:f3:31:ca:74:2f:c8:36:38:
         a1:9b:02:af:c7:0c:96:9a:72:28:77:1a:ee:f6:c4:2e:69:fa:
         c6:4a:7a:28:eb:8a:d0:d4:02:30:c3:3e:e2:29:fd:95:82:50:
         12:51:fc:f2:c1:30:97:7b:df:f0:8a:ec:10:f5:e0:49:d0:6b:
         66:32:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----