Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File:                     0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier:          idcssjM2pf13G174APr4bZydSMQFIr/dEFwO6Zw5Xss=
Subject key identifier:   F3:95:0F:A4:D7:B9:A3:91:D1:8D:8B:A4:3D:71:30:46:17:17:96:6B
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer:       /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial:       0195E04639FBB776AFAE2B93A7AB48B53850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number:          0ACD
Signing time:             Sat 29 Mar 2025 05:00:53 +0000
Manifest this update:     Sat 29 Mar 2025 05:00:53 +0000
Manifest next update:     Sun 30 Mar 2025 05:00:53 +0000
Files and hashes:         1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: UGJ8Zj2Iuf/h5FzIAM96LCjhK3P0ivb2dDaH4qHZEfw=)
                          2: 289E-Jj1-_NHnfIspmJ6dDyJHMo.roa (hash: WdW5apU9mzQj50OlelJWc6bz8hGD+pm8qBunEBj3yw4=)
                          3: h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa (hash: oPs+na6jf/GLFYpEpQKvloInu3ZuLoam22sOPdiiyEs=)
                          4: iW93Iii_wpRaBJx4UitIZE8Hirs.roa (hash: nFhRjV7MRzVZ4mQI/ZjUoZj1OD4mh/1+uDWJfZv9Rc0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:39:fb:b7:76:af:ae:2b:93:a7:ab:48:b5:38:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
        Validity
            Not Before: Mar 29 05:00:53 2025 GMT
            Not After : Mar 30 05:00:53 2025 GMT
        Subject: CN=f3950fa4d7b9a391d18d8ba43d7130461717966b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:2c:28:a2:1a:03:bc:44:7f:b2:a3:72:4f:
                    cd:de:34:bf:ed:46:18:81:b5:92:dd:b2:83:04:a7:
                    e3:4a:20:78:e6:28:26:13:69:ed:65:b0:a4:ba:31:
                    23:d4:b6:1f:35:34:db:fd:4a:44:03:a0:27:71:af:
                    10:d5:83:b9:f3:a3:a9:ff:37:cf:1a:a4:30:86:c0:
                    3a:58:a0:5b:0a:e0:c6:0f:49:2e:1d:f0:da:7b:88:
                    42:77:6d:ee:34:30:fe:72:b9:26:87:59:17:25:a3:
                    26:6c:b9:f7:14:13:6d:d3:31:d6:06:be:19:23:eb:
                    d3:ca:26:6c:8f:20:bf:ee:d2:ed:90:c4:9f:3d:4b:
                    a8:c6:5d:4f:d7:d8:8c:88:e6:06:fc:42:f6:09:08:
                    10:67:e6:91:e1:52:be:a2:03:27:b8:8f:2f:dd:f3:
                    9c:a1:af:53:c6:1f:49:d4:9c:fe:ff:41:42:c1:f8:
                    a9:9e:61:44:2e:17:0e:b0:2a:b6:77:e9:f9:1a:41:
                    bf:3c:49:41:41:b8:2e:ca:39:a6:d7:0c:d4:f3:6a:
                    c4:5c:62:e1:c7:91:af:81:ab:f5:4a:d6:5d:c7:54:
                    74:4e:a6:e9:62:06:6c:a2:fd:60:43:9a:2a:98:24:
                    ad:b6:4d:2d:d1:f0:6f:91:ff:20:98:da:77:26:65:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:0F:A4:D7:B9:A3:91:D1:8D:8B:A4:3D:71:30:46:17:17:96:6B
            X509v3 Authority Key Identifier:
                keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:fe:bc:0f:5e:25:79:f5:a3:9d:90:a9:45:1d:69:60:8b:
         e9:d4:61:d4:72:1e:1b:0f:09:46:1e:ad:95:62:e6:f1:a7:36:
         59:24:7b:05:46:50:39:2e:71:08:3b:45:55:30:e7:b3:b0:12:
         c9:2f:e5:36:92:6d:53:56:25:84:df:96:e0:0a:e8:cb:5b:63:
         f8:7d:ff:9c:91:4c:0e:51:05:ff:76:54:d8:a4:67:f3:62:dc:
         c5:f1:63:cf:4d:1c:e3:e2:27:c4:0d:74:ea:62:92:a4:42:07:
         33:a5:22:57:dc:4f:17:e6:87:7f:f7:d6:ab:83:b2:3b:39:30:
         fb:d1:27:b2:75:57:3d:ed:44:74:e2:2c:de:ff:a5:67:68:ba:
         02:0b:8e:28:a1:41:9e:8a:7b:b6:10:d0:d3:7b:17:74:06:7c:
         e5:e7:f8:0d:e2:32:e5:86:26:77:7a:42:59:26:aa:f1:6d:54:
         30:6d:ca:7c:88:18:fd:68:81:d6:c1:75:f1:97:4e:71:c7:3e:
         14:06:06:59:99:f0:ed:fb:8a:da:f8:f5:a1:95:32:3b:1f:0f:
         18:e2:5a:0e:ad:b7:1b:fe:0d:e0:1b:88:8e:15:71:c9:b5:d3:
         fa:2c:69:f8:3f:d9:26:a8:f5:88:3f:92:36:69:0c:eb:9e:ff:
         b2:5e:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----