Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          ggONdS1K9zjBpcXMLjji2aYenlQ3NKpa5mvmT2Ekh5Y=
Subject key identifier:   34:DA:02:63:41:2D:89:28:E5:CC:14:73:4E:F7:BD:77:D4:33:90:2B
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       0195E0B44D04F4386717866E75214CB3CFE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 07:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:07 +0000
Files and hashes:         1: 0uRkVKY7XXnyDogUgS2r5XX9qoA.roa (hash: lp1oaMmoBZ+ARuOSInljJOVgC+Q+LtTeEykGOBERqsQ=)
                          2: 5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa (hash: yDLDGysDDqgqhb6WLikdy1EXoOl26sXWpiZCWG5MyOM=)
                          3: DpzvwQnVRaFViTZyqTXRWJwxueM.roa (hash: au+QUyze3MKMGVHiIM5HXwnLMoQJIUaM60I83uw/tEc=)
                          4: R5bViWXBO3ouBouRqDAFF7DEDMg.roa (hash: 1qmWPpwQKC0p19qQrIunGPBkKyWE5b9Vy7KJVtEO+pk=)
                          5: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: exVZBfEsLins5r8J0YXvn/rwztqLc3QPr4gbLajQn2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:4d:04:f4:38:67:17:86:6e:75:21:4c:b3:cf:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Mar 29 07:01:07 2025 GMT
            Not After : Mar 30 07:01:07 2025 GMT
        Subject: CN=34da0263412d8928e5cc14734ef7bd77d433902b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:d8:97:bc:1b:04:47:df:a1:ff:24:65:cb:
                    21:55:22:c2:81:14:2d:31:42:26:18:dd:64:77:b2:
                    1c:8f:6f:53:5a:a0:e5:fb:8b:e1:01:32:22:74:c9:
                    b3:7d:62:fb:1e:4c:f3:41:03:08:1b:85:5b:ec:41:
                    26:48:2f:c3:10:53:e1:aa:c5:0e:29:74:42:c0:40:
                    e9:6c:29:92:f6:4e:8d:40:41:67:a6:4d:e7:73:27:
                    6f:65:d2:f1:30:d2:e9:78:7d:6f:a4:de:08:12:40:
                    f7:ee:af:5e:51:16:92:24:61:b6:03:5e:cb:78:38:
                    55:0c:90:e1:52:32:0a:f0:51:c0:e5:14:2e:60:d6:
                    16:0f:3d:84:20:57:c6:65:eb:1f:a1:50:b4:b1:20:
                    d6:1a:2c:f8:81:d7:33:82:8d:64:d6:bf:c2:38:96:
                    98:51:da:84:24:4b:f9:db:55:b5:12:91:bc:06:88:
                    d5:64:1f:b2:f8:93:a2:86:97:c2:18:49:27:54:e4:
                    4f:c5:79:82:e3:f6:a2:c2:cf:fb:ba:3c:9b:e5:1a:
                    cb:16:bc:1c:b7:34:9a:ea:66:0b:1e:2f:90:b1:34:
                    9e:8b:3f:92:ca:c0:eb:e3:02:c4:c9:54:8f:69:ec:
                    01:f5:18:ae:10:fe:61:c9:54:81:c6:fe:21:a9:e1:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:02:63:41:2D:89:28:E5:CC:14:73:4E:F7:BD:77:D4:33:90:2B
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:31:61:d1:6a:cb:e5:58:f2:0b:d3:b4:30:99:a1:9e:d9:c5:
         7b:52:6d:64:03:9c:18:7d:20:16:17:cf:28:c4:7e:10:ef:1e:
         19:ba:fd:3a:bc:db:01:e1:c9:e4:00:c9:e5:47:bb:bf:b6:49:
         da:48:d2:29:e0:2f:e5:23:c1:b7:8e:2d:69:6b:cf:e6:0b:a9:
         3a:04:e3:24:38:43:f3:52:07:46:64:cc:32:55:22:65:b3:2e:
         ea:27:50:96:b5:fe:84:a3:ed:2b:3c:e0:57:dc:b7:c9:86:d3:
         44:ca:66:b9:e2:1d:c0:60:dd:77:ab:6e:88:f4:81:ef:12:fb:
         fc:b3:b2:07:c6:4a:b4:9d:d1:20:02:18:64:03:d8:06:bf:11:
         d2:83:e9:28:48:3a:8f:d6:da:9d:51:70:52:a8:0c:b1:2e:75:
         f4:4c:41:bf:55:1c:c1:aa:f5:18:8b:21:2d:d1:b6:c6:a2:7c:
         45:63:76:8a:22:89:2b:25:6b:b2:d0:14:f5:5f:c0:70:fe:06:
         23:3c:27:ba:fa:1e:46:f5:b7:45:fc:a7:70:66:5c:d0:e2:da:
         50:2d:be:e8:23:a4:c9:04:72:72:0c:9d:42:0c:1a:72:6b:8e:
         75:31:dd:78:a2:15:00:3e:63:7d:e5:9e:11:46:58:19:98:8e:
         58:24:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----