Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File:                     Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier:          wM4zAnP0jUUFlYlxYvEcP4uZr9wSUmPtxe1c+O4Tecw=
Subject key identifier:   9E:CE:A2:62:BC:77:4F:65:0B:65:7D:CE:D9:E6:45:5C:4C:61:DD:77
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer:       /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial:       0195E15A0B907E0D6F7CA3E100E851CEA8A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number:          01C7
Signing time:             Sat 29 Mar 2025 10:02:09 +0000
Manifest this update:     Sat 29 Mar 2025 10:02:09 +0000
Manifest next update:     Sun 30 Mar 2025 10:02:09 +0000
Files and hashes:         1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: QWlSeC3G2i38KoO5yKcV6E5rExW43Vcxi9D92saILs4=)
                          2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
                          3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:5a:0b:90:7e:0d:6f:7c:a3:e1:00:e8:51:ce:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
        Validity
            Not Before: Mar 29 10:02:09 2025 GMT
            Not After : Mar 30 10:02:09 2025 GMT
        Subject: CN=9ecea262bc774f650b657dced9e6455c4c61dd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:bd:00:23:d0:7e:3a:96:fe:1e:35:47:eb:
                    8b:6a:76:69:82:2f:b2:54:7f:4d:60:e9:04:9b:90:
                    6d:ba:e0:8c:14:c5:b1:cc:ec:05:74:0e:0d:74:a2:
                    48:0d:d0:5b:a3:85:c5:37:e1:e5:fb:ec:59:b6:03:
                    02:04:74:63:d0:54:4e:f6:5d:af:b1:b2:65:ec:76:
                    11:f1:59:d4:50:8f:0b:8a:2b:7c:db:13:c3:31:10:
                    7e:b3:54:70:a1:7d:2e:1a:eb:89:8c:87:2a:9c:af:
                    16:a7:75:05:82:5a:91:b7:53:da:d6:70:3a:44:b2:
                    a9:d8:c7:8f:29:f5:78:12:e9:79:12:ee:49:6b:ac:
                    64:c6:46:9d:99:ec:95:e5:d9:ce:a2:51:03:bf:2a:
                    50:b3:9c:a5:93:41:7c:89:8f:28:eb:f8:0b:00:32:
                    dd:35:86:12:83:65:dd:b7:4f:94:b9:c6:e0:33:59:
                    b5:b5:80:6c:22:43:69:2a:dd:65:94:a6:c2:10:ab:
                    62:e5:89:d7:1a:07:db:18:18:54:92:db:bf:b1:f1:
                    0f:ea:91:3b:5a:ad:6c:9c:0c:ee:1e:c8:f5:95:0e:
                    7c:3d:36:5e:b6:b5:c2:53:69:29:25:a9:bd:f1:0f:
                    55:ab:26:7a:d6:bd:ae:1f:27:b0:42:97:3d:48:1a:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CE:A2:62:BC:77:4F:65:0B:65:7D:CE:D9:E6:45:5C:4C:61:DD:77
            X509v3 Authority Key Identifier:
                keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fc:ad:67:61:23:d1:01:fe:ee:ba:04:81:ca:82:2f:05:8c:
         5d:57:d1:f9:3a:df:43:74:c9:28:85:4a:ec:eb:f0:9c:95:1a:
         c2:c6:83:22:0a:30:c8:7c:af:a2:a6:79:a6:90:b8:d0:51:cb:
         fe:5e:4d:68:64:30:e3:90:ce:86:19:b6:17:44:32:32:fb:af:
         20:cb:0e:6d:e3:5a:e8:55:10:55:9b:e5:63:17:73:15:6c:6e:
         41:b5:f6:aa:90:90:2e:ed:23:5e:b0:fc:ca:57:ac:ee:fb:4f:
         c7:6e:c5:6e:5b:90:ec:5c:0b:e3:0a:04:3f:60:94:8b:6b:bf:
         53:25:a8:aa:3b:15:d1:c5:cf:50:1a:81:fe:5d:3d:f6:6e:1a:
         32:bc:43:dd:4a:d3:31:a9:69:be:a6:66:18:44:c4:87:29:8c:
         fb:42:f6:37:a2:51:64:99:1e:40:85:9c:30:94:61:d0:0c:81:
         3e:3b:19:3a:0e:86:50:15:38:2e:93:ba:be:31:5b:ef:b8:dd:
         b6:86:18:dd:a6:40:a3:01:1d:54:80:fe:c4:b8:7a:85:11:54:
         5e:60:5e:0c:34:88:a8:68:30:6a:95:71:92:02:74:7c:28:b5:
         56:4c:dd:a8:05:73:16:1d:c8:50:8a:cb:12:1e:0d:fa:a6:89:
         7d:40:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----