Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
File:                     RRbrDuN6cQdkYexsuouSWsXiigQ.mft (raw, json)
Hash identifier:          iaCfBZCcjeYDtwCktjC0ijAn4oE/brHgfkQPBm0H030=
Subject key identifier:   C2:00:F4:9B:23:C0:E3:3E:B0:D0:DE:10:24:A8:62:AA:A2:1B:92:8C
Authority key identifier: 45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
Certificate issuer:       /CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
Certificate serial:       0195E07D68E06F3907B3A5692D74133CB9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
Manifest number:          0B02
Signing time:             Sat 29 Mar 2025 06:01:10 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:10 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:10 +0000
Files and hashes:         1: 1-t2gnE5sOGltaGyK08vMro9QjaY.roa (hash: KqgeQLln5bUSPOutirb1nGDGQJDA+7LtG2hn/tE6y4I=)
                          2: 99QLROUQNHiiqB_a3SA6ZvSr3YI.roa (hash: sNlxkO/aixuwJo13PpX/CwbLGrB7NAaO23Tw9EkoOSE=)
                          3: RRbrDuN6cQdkYexsuouSWsXiigQ.crl (hash: 3pVJTkbR3Yu8eA5RGdRhWLgXKmy5Sv28SO/zAXvxfzE=)
                          4: dvJNx6RbxjDoJCEwF7HnrhRhptU.roa (hash: DVANgVeWMmrYwoLblH+nDJmKwe1mEMcVwTPkEqM0534=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:68:e0:6f:39:07:b3:a5:69:2d:74:13:3c:b9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
        Validity
            Not Before: Mar 29 06:01:10 2025 GMT
            Not After : Mar 30 06:01:10 2025 GMT
        Subject: CN=c200f49b23c0e33eb0d0de1024a862aaa21b928c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:20:d6:88:60:79:cc:58:78:78:fa:ff:b1:
                    3c:ec:94:b6:06:cf:77:ad:b9:0a:f9:3c:54:2d:24:
                    ab:8d:00:a4:58:ea:1b:06:4b:5b:8f:e8:24:fb:c4:
                    cf:f9:ce:57:6b:24:14:04:22:7f:e3:e9:81:bd:8d:
                    2f:88:3a:4b:e1:24:38:af:d5:ce:98:c4:c9:f7:c3:
                    8f:53:4b:20:bd:23:d4:0a:72:aa:86:da:f2:ae:25:
                    aa:0c:51:38:6b:04:3d:d1:a6:8b:81:ee:b7:2b:82:
                    af:ad:c7:bb:21:e0:c7:39:a5:29:02:52:96:62:69:
                    0e:39:25:1e:67:80:f0:e1:63:b4:02:a8:08:f5:1d:
                    f8:d5:87:40:a9:08:0b:62:83:82:e7:12:f2:b9:42:
                    3a:5d:16:44:16:8f:bb:2c:00:26:aa:c3:47:a8:e9:
                    3c:64:70:a0:63:28:c9:6d:e7:88:30:6f:41:83:60:
                    df:5a:65:46:95:e6:b7:ac:54:db:6d:e4:a6:6f:80:
                    1c:b7:b2:2b:d4:b2:04:8f:24:5e:68:84:cf:ac:de:
                    be:10:80:77:2c:b0:69:12:a2:c6:3d:22:28:3c:38:
                    4c:3b:e4:ee:0f:06:9e:65:df:c8:d0:ef:d4:9e:10:
                    a6:52:f2:49:c1:83:cb:23:6e:20:2e:69:02:19:f3:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:00:F4:9B:23:C0:E3:3E:B0:D0:DE:10:24:A8:62:AA:A2:1B:92:8C
            X509v3 Authority Key Identifier:
                keyid:45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ba:50:25:cb:1b:d5:7c:a6:b6:8f:69:cf:16:d9:7d:7c:5b:
         ec:71:f0:f8:65:b6:bd:35:be:12:a6:57:19:56:a7:37:9f:0e:
         ef:8f:b6:14:71:26:6d:0e:d6:e5:fc:57:25:92:f9:e6:f7:e2:
         74:77:98:0f:f1:70:36:b3:c0:5f:d5:91:b3:78:ff:c5:4d:27:
         f0:dd:31:e9:36:b9:f9:b0:50:84:4a:9b:17:b0:2a:91:ed:88:
         6a:53:97:4f:c3:82:5d:9f:b1:1a:2c:b0:40:ab:84:f7:af:19:
         a3:f5:5f:63:67:a5:9d:f4:dc:5a:6d:43:40:5a:d3:e9:18:90:
         63:78:37:e2:46:c1:1f:8c:07:34:89:c6:b6:4f:23:c1:09:e5:
         c7:00:cf:04:f5:ac:46:c7:ff:15:85:31:18:24:e3:bb:c0:ba:
         d1:d5:bd:15:f2:56:b7:e5:0e:26:02:81:68:f0:aa:97:03:e2:
         f3:f5:1b:84:1c:c9:7f:3e:ad:3c:31:37:1b:54:15:90:af:65:
         65:b4:5a:6d:d5:83:a6:14:69:9c:bc:e6:75:39:a1:67:8a:2b:
         b9:a2:9c:8d:70:3e:6a:91:67:03:1f:10:c4:c5:35:74:45:c9:
         75:3f:ba:a7:05:ee:16:12:70:c5:eb:36:ee:0e:7c:29:37:e7:
         6c:6b:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----