Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
File:                     Suvuj-dUnRqa5Vnl2ggWQunqwng.mft (raw, json)
Hash identifier:          xGhAVJ/knOPajPGkyzFjP+HleqAQGU66j30XrvJXJ30=
Subject key identifier:   21:3D:B1:51:B4:E9:00:99:8C:14:36:61:47:7D:DC:62:CE:EB:15:1C
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Certificate issuer:       /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial:       0195E1906CF1C67B9D89645B50C38B71B727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
Manifest number:          14CB
Signing time:             Sat 29 Mar 2025 11:01:33 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:33 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:33 +0000
Files and hashes:         1: Ju4TE0Do45F3_xd1BsQ_7bnzoxo.roa (hash: 9jLkighzDSTRcfJGZNkRcSTPX467dcg1LQMrucLnEF8=)
                          2: KKZ3H1Ig1Ai_kXp1maqntJqKS9E.roa (hash: VljnOwALwBLtSWbQ+Tok7KNQehan+9sMOUJ88vhoF9I=)
                          3: Suvuj-dUnRqa5Vnl2ggWQunqwng.crl (hash: PdomUp/jyzBQ1L3rhrjB2rrQ7GaWVm8CMK7LmeMCDYI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:6c:f1:c6:7b:9d:89:64:5b:50:c3:8b:71:b7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
        Validity
            Not Before: Mar 29 11:01:33 2025 GMT
            Not After : Mar 30 11:01:33 2025 GMT
        Subject: CN=213db151b4e900998c143661477ddc62ceeb151c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8b:29:e4:36:68:20:98:ac:ba:db:00:5c:8c:
                    cb:bb:dc:d5:a8:07:1e:92:c1:7c:7d:5e:4c:45:4a:
                    28:77:83:ab:e0:76:c2:d1:ef:de:e2:37:5f:7e:a0:
                    bc:b0:c8:b5:7c:b7:fc:75:98:d1:5f:b8:e5:ef:da:
                    21:77:d6:f9:c8:f4:2f:de:52:be:12:b3:0a:a8:c3:
                    8e:fa:9e:c7:6c:0e:ac:36:45:09:08:29:02:96:3b:
                    6b:09:e7:d3:45:46:e7:16:ec:b3:e9:bf:12:36:97:
                    0d:68:7b:0b:f2:21:e6:17:70:19:62:ce:55:97:d3:
                    16:fc:cb:12:a9:8c:50:90:a6:a0:31:b2:3e:45:90:
                    64:e7:4c:07:83:ed:84:30:3f:18:be:b6:08:99:71:
                    b2:c5:58:0d:64:3c:0a:66:bd:a4:bb:3d:d6:85:cd:
                    bb:9f:54:e1:99:2c:b2:18:88:8a:99:06:fa:38:87:
                    8a:d3:88:b4:40:68:a5:45:73:0d:ab:67:08:e3:14:
                    c6:fc:3c:2b:c0:ed:44:9f:e6:e0:05:7e:20:e6:30:
                    16:74:1c:18:02:f3:b4:96:31:e9:d3:35:80:42:0d:
                    e5:5e:97:fc:bb:9e:97:5a:be:62:b5:9b:63:a3:51:
                    54:59:6e:09:31:63:49:cc:1b:62:c9:c8:4a:11:7b:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:B1:51:B4:E9:00:99:8C:14:36:61:47:7D:DC:62:CE:EB:15:1C
            X509v3 Authority Key Identifier:
                keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:44:e7:ea:2e:75:17:98:4d:51:b0:e2:38:ce:1f:8a:f8:
         54:4a:e5:c0:d5:24:66:fc:56:59:b9:14:04:e9:78:4d:ba:a4:
         e4:87:aa:42:38:23:1d:a3:c6:bb:67:fe:c3:dd:57:1a:73:58:
         37:8a:96:cf:44:2e:c4:ac:75:0e:53:7a:3c:b0:83:9f:ac:68:
         17:3e:a5:eb:d6:e9:f0:b0:3a:d8:af:f3:6c:a6:c9:e6:49:cf:
         6a:a0:7f:39:8a:4d:ad:ef:7c:75:e7:5b:5c:cd:69:03:2d:a0:
         2a:1a:73:42:6c:c6:9a:8b:6b:c5:76:58:50:a4:fe:de:ff:29:
         9f:06:11:4c:5d:17:24:bd:ba:a4:56:2e:26:75:66:8b:72:98:
         34:59:5e:2a:c2:3c:b7:1a:17:0c:1b:fd:7b:68:a3:dc:f6:b1:
         cc:7b:0b:9c:5b:7d:39:34:12:e6:1f:c9:84:77:a6:21:78:54:
         59:6c:ed:6e:9a:7d:db:34:74:f4:5f:1d:d3:6f:6d:8e:82:19:
         bc:df:66:ba:cb:ef:21:d1:fe:08:e1:b1:90:27:1d:32:81:25:
         35:b7:b2:bb:89:a3:3b:9a:5b:de:05:ac:6a:12:7d:54:f1:e3:
         a8:2f:c3:14:d3:23:d8:ff:48:76:ed:51:18:1d:a6:b0:a1:d8:
         0a:4a:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----