Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File:                     ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier:          Mfo8xIIFc0OsPTk2u1Zprrph8xwYWJnangx3E/4t/7Y=
Subject key identifier:   A5:D4:77:B2:57:FF:2C:A5:9F:07:7B:C2:0C:18:6D:83:EF:B6:90:79
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer:       /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial:       0195E1903488D91EBD3B27841F0FA2FEE16B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number:          02BF
Signing time:             Sat 29 Mar 2025 11:01:18 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:18 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:18 +0000
Files and hashes:         1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
                          2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: vKysCk4jp5At6T17NjwRWa9UmWgRDE3MQEMv//FKOp0=)
                          3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
                          4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:34:88:d9:1e:bd:3b:27:84:1f:0f:a2:fe:e1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
        Validity
            Not Before: Mar 29 11:01:18 2025 GMT
            Not After : Mar 30 11:01:18 2025 GMT
        Subject: CN=a5d477b257ff2ca59f077bc20c186d83efb69079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8c:8d:4b:21:82:f3:50:d5:40:e5:d0:e7:ed:
                    b9:9b:a8:b9:f0:ed:e4:83:66:9f:01:7f:a8:b1:13:
                    95:df:b9:07:bd:58:4d:68:d9:3f:8c:f2:d2:79:6b:
                    5c:84:1a:ce:46:29:69:51:34:b1:16:cf:9c:6c:2e:
                    60:60:20:59:88:d0:b8:22:ed:28:e9:36:18:ed:58:
                    dd:ed:a9:63:31:30:fb:48:f8:d0:cf:99:8c:5b:13:
                    bd:d1:67:52:59:4f:50:6a:f0:29:8d:cb:bd:ec:8d:
                    fd:27:55:c0:0c:24:aa:b5:b5:ad:02:09:b7:44:fb:
                    b8:19:02:6f:9c:d8:b2:81:93:f5:b4:c5:6c:69:c1:
                    90:1b:84:09:87:a2:9c:da:8c:39:3f:ed:3a:3b:34:
                    64:bc:ff:da:e8:c7:a9:60:0d:66:22:e9:95:1e:e6:
                    8d:a2:03:51:a2:9e:52:5a:a3:12:5e:c1:b8:21:a5:
                    20:69:2c:bf:df:a2:66:82:ef:c1:69:f0:72:f9:a1:
                    3a:47:a4:91:b8:f1:64:90:a2:d0:7b:e6:35:62:c5:
                    a3:f6:77:b5:27:c5:81:46:4a:eb:77:f6:1c:9b:00:
                    23:fc:fa:96:b8:15:04:e7:b3:4e:79:f9:e0:9e:b8:
                    a0:91:d2:2b:e2:7b:f2:20:a8:d8:0b:a4:77:f5:61:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:77:B2:57:FF:2C:A5:9F:07:7B:C2:0C:18:6D:83:EF:B6:90:79
            X509v3 Authority Key Identifier:
                keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:65:9c:a8:b2:0e:a5:b9:db:91:52:82:dd:3f:96:62:7f:32:
         21:36:35:8a:aa:14:66:95:ab:97:85:27:30:60:e2:69:ca:08:
         b7:bc:3a:37:76:03:10:b4:9b:25:e1:91:13:f2:76:02:23:d6:
         76:de:c3:92:79:08:d6:0e:68:98:e3:12:2a:be:50:8e:55:be:
         37:ec:41:71:e1:c5:ab:e8:be:07:e3:e0:4e:e3:14:a2:e6:ca:
         9a:2a:ce:d9:99:16:93:f4:9b:98:d5:fe:ee:94:a3:9f:98:29:
         04:ba:10:7e:84:c6:1b:35:3f:83:01:e6:87:0e:12:18:2c:06:
         b7:d6:c6:70:1e:e7:b8:2a:12:e1:a9:77:95:f3:42:94:9f:96:
         8d:d0:1a:a3:f6:ae:f4:b6:a4:37:41:d1:5f:e5:54:a7:7d:c7:
         cc:b9:ef:f8:2b:41:a9:81:b1:ac:8d:c2:37:3e:2a:13:bf:df:
         8f:b1:16:84:48:e2:3b:a6:7b:1a:de:61:27:e2:fd:4c:e5:91:
         33:52:92:e1:f3:50:9c:6c:b8:63:2f:55:28:55:93:62:a6:bb:
         b9:20:a8:e2:a4:9c:e7:02:67:b2:b7:54:83:7f:e1:92:0e:dd:
         dc:7f:f9:ad:12:8c:2e:9b:69:87:dd:c0:3f:d5:ba:59:dd:8a:
         c0:27:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----