Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File:                     yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier:          vcOMHPK6izIWLiaVVRMJQ/qajpOd+TAEZVNvxfeRFlY=
Subject key identifier:   2B:29:12:C8:99:2F:C5:9C:82:0F:5C:EF:05:E0:2D:8A:5F:54:DF:11
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer:       /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial:       0195E046B049C5712210DA4BF018C00CBFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 05:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:23 +0000
Files and hashes:         1: Fdf0vtB1gT4L0JunIsm8qNZYmQ4.roa (hash: Hfh7wbvCwd9LX8YiFV9RA+et4MH+5Md9SfCGKXu907E=)
                          2: WzbbS-CvpAp-X59KDM_38Kb2Q90.roa (hash: nHcAVErDor/w6cF6rsBmTNyYVia/mJgseR3zdZens+w=)
                          3: iUi7thjoE_NSerMmdG4mBc-A3aQ.roa (hash: XBvqQypf6zmJJtMlo2u++NDcjCA5xpacY+hSBCY97kY=)
                          4: rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa (hash: +4TH3iY83i5mgX2X206BcOV0PV0agK4VaBkhFLKmwRA=)
                          5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: LLPw8zNF1aTDShSYQfpEYis9Fua7r3XfArf8owW5wUw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:b0:49:c5:71:22:10:da:4b:f0:18:c0:0c:bf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
        Validity
            Not Before: Mar 29 05:01:23 2025 GMT
            Not After : Mar 30 05:01:23 2025 GMT
        Subject: CN=2b2912c8992fc59c820f5cef05e02d8a5f54df11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:3c:e4:c4:da:79:7d:02:08:9c:0a:d4:2b:
                    69:b2:94:af:d9:4f:91:95:23:7a:5c:c3:35:d2:f4:
                    88:ad:33:3a:a8:ee:4f:e0:c8:3f:04:58:47:b7:80:
                    80:82:c7:99:16:e5:fd:ee:f4:13:e3:75:12:e2:92:
                    a3:49:3c:84:77:c2:95:95:de:3e:c6:a7:16:cb:4e:
                    8e:98:50:32:4a:89:56:ba:41:86:5d:0b:6a:6d:a2:
                    73:90:18:d7:15:15:32:6e:3d:41:a2:db:6b:3c:0f:
                    23:8c:8d:0c:e4:8d:05:8e:99:60:73:72:6a:72:27:
                    98:f9:e8:0f:54:ef:05:e2:1e:84:7b:29:42:bd:a0:
                    56:64:02:06:b6:09:ae:50:67:25:f3:6e:dc:83:7d:
                    b5:36:c3:90:fe:64:49:ee:c5:0a:d1:9d:38:30:e4:
                    a3:1d:29:ea:21:b7:03:ff:4e:d6:62:e6:8f:0e:e4:
                    19:93:90:7f:98:92:7d:6b:e1:ab:c0:16:55:2c:34:
                    c8:7a:d4:b4:09:27:04:a7:b9:86:46:d7:44:49:42:
                    d3:ef:62:46:b0:81:19:c0:1c:54:8e:25:2b:06:0c:
                    b5:e1:01:75:e8:e1:2b:8c:d8:a9:66:36:f8:b8:84:
                    ed:2d:be:bf:67:a5:38:d4:15:e7:ea:f1:9a:3e:ce:
                    61:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:29:12:C8:99:2F:C5:9C:82:0F:5C:EF:05:E0:2D:8A:5F:54:DF:11
            X509v3 Authority Key Identifier:
                keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:62:65:cc:2d:59:13:a2:82:cd:1f:d1:97:bc:ca:89:96:
         0b:26:68:97:7a:e9:89:66:ec:4a:a3:aa:dd:23:32:2d:9d:29:
         59:a7:f9:2f:3a:fe:3c:be:09:f7:e4:44:43:8f:fb:fa:b7:79:
         3f:ee:5d:c7:f9:f1:b5:ec:63:a8:30:06:39:a2:a1:6c:da:8d:
         a4:a2:95:1c:34:8a:c5:d4:5e:8f:3d:88:65:a4:66:d4:71:3e:
         57:4d:d1:3a:ee:39:e2:d8:55:2f:ed:c7:8c:c6:b3:e4:6d:b6:
         94:12:26:bd:f2:03:73:76:cc:3b:c4:35:32:a6:2e:fe:40:08:
         5a:2d:fd:99:7b:dd:27:79:ed:e1:3a:74:c0:e3:d6:db:a1:b6:
         27:8e:8c:cc:31:37:ed:af:7d:5a:1e:04:54:96:ff:e1:33:2c:
         b9:25:0f:28:1e:db:5b:03:ef:d4:1f:5c:30:27:0a:21:32:e5:
         a8:cf:87:82:74:78:d7:72:eb:bb:85:f8:e3:78:ba:22:cd:f9:
         f6:09:ee:2f:27:d9:bc:d4:92:13:73:71:38:56:1b:0a:0e:82:
         c6:73:bf:e6:00:06:0a:64:9a:88:ee:a6:88:03:96:02:cf:36:
         c3:f5:f6:4c:ee:2d:47:8f:2c:09:4c:82:4e:48:25:f5:20:bf:
         c0:d7:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----