Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File:                     _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier:          Nstrv0jQ9hfjpy3L++3pZAFxhiBYtmnfL0eGgMv6rPw=
Subject key identifier:   91:0A:5B:F6:E6:31:45:E5:A7:BE:F3:AE:79:35:C5:B5:CF:80:6C:E5
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer:       /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial:       0195E0EB06B2CAE12978F6AFD9741A3A8AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number:          14C9
Signing time:             Sat 29 Mar 2025 08:00:53 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:53 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:53 +0000
Files and hashes:         1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
                          2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: nIlSyojVS/FWuus66k+0rgpTXEiWe6ypSqqWN1aRq18=)
                          3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:06:b2:ca:e1:29:78:f6:af:d9:74:1a:3a:8a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
        Validity
            Not Before: Mar 29 08:00:53 2025 GMT
            Not After : Mar 30 08:00:53 2025 GMT
        Subject: CN=910a5bf6e63145e5a7bef3ae7935c5b5cf806ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:25:95:00:c3:82:2f:d7:1b:ca:a1:0a:2e:
                    48:99:5a:70:0b:7d:49:fc:f9:7d:74:92:9f:4c:ce:
                    cf:12:ba:1e:5f:a1:92:7b:8f:12:15:f3:c0:58:a6:
                    6e:dc:9e:13:d9:57:a9:af:91:f2:96:ad:29:d3:2c:
                    76:63:1c:2b:cf:c3:9b:c6:93:7e:6d:5e:e3:2c:2c:
                    74:7a:c1:95:1c:dc:83:5f:49:f5:b0:52:67:e3:60:
                    e3:6f:9e:3c:24:3c:67:86:62:8c:dc:66:26:aa:a2:
                    29:cc:1f:66:78:f7:81:88:0d:11:44:cf:10:4a:7d:
                    c7:71:83:5e:86:f8:2a:c3:84:ce:41:dc:14:74:44:
                    de:22:86:ee:43:57:77:bd:96:20:12:e0:5e:94:24:
                    d6:34:07:60:ce:26:f0:6d:ae:8c:8e:a9:95:5d:c3:
                    92:a8:ba:cf:00:55:00:27:41:a1:00:35:f1:b4:ec:
                    9b:67:a3:ed:ba:14:d4:f0:17:32:91:37:5f:c2:8e:
                    b3:b8:81:67:aa:aa:5a:73:e1:95:e2:ff:98:2d:b1:
                    a1:92:3a:e2:1e:ed:d4:1d:0d:b2:97:37:66:80:fb:
                    8e:d4:d6:cc:d5:a3:47:d2:53:39:9d:94:1c:f5:ce:
                    1f:49:c1:19:44:ba:f8:47:6f:ee:ef:73:fb:97:fb:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:5B:F6:E6:31:45:E5:A7:BE:F3:AE:79:35:C5:B5:CF:80:6C:E5
            X509v3 Authority Key Identifier:
                keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7e:0b:39:24:9b:ac:d1:f9:af:ab:c8:e6:64:2b:ad:9a:09:
         13:b8:68:b1:d2:d1:39:b9:e2:2e:6f:c7:b8:49:6b:c2:97:ab:
         fc:fb:bb:e7:57:19:d2:2d:41:70:ba:ad:5b:63:68:f5:a1:c3:
         86:65:ad:8f:9d:29:b0:bc:30:28:3a:57:9d:cc:91:98:05:5f:
         d7:46:71:81:6a:f8:13:00:4c:12:50:ed:e0:d7:a3:d4:ff:2d:
         9b:fd:c5:51:af:cf:36:29:d7:a1:4e:75:4b:e9:e7:84:4e:84:
         7b:8e:1e:02:c0:46:90:a3:ae:e4:8a:02:2f:34:91:45:a9:45:
         fe:61:fd:92:01:e5:93:0d:bd:40:2f:ad:c2:52:92:7a:e5:19:
         2d:3f:20:43:3c:05:5d:35:00:dd:74:64:ef:b4:d4:b7:7b:fe:
         5b:9f:35:d3:42:72:97:ed:a1:bb:21:91:5f:78:ec:2e:98:40:
         55:97:39:00:6f:e6:ce:fb:df:c4:bd:ed:5e:07:2f:70:af:8b:
         cb:fb:05:d1:46:6f:05:1a:fa:87:2e:13:4f:9f:ff:8b:c2:9e:
         c9:08:ba:16:cc:af:e9:e9:44:81:1d:6b:59:b9:4d:a9:77:5d:
         d1:48:e9:89:c6:27:1a:91:55:55:78:a7:a6:a4:36:7f:cf:7e:
         2e:de:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----