Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          UAZ5IhI2fitP8d+CKJH6zlsGJxptpdFZJ6Lhplc/wK0=
Subject key identifier:   4B:FA:78:95:0D:E6:75:82:95:C6:5E:37:1E:55:71:C2:6E:8F:AC:98
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       0195E1903769EC6DC8E154632421C9C804D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          14EB
Signing time:             Sat 29 Mar 2025 11:01:19 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:19 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:19 +0000
Files and hashes:         1: 2It_I9J9BgRnnQT5C-V712e3yx4.roa (hash: ESMa8M4XpFdW7jSu8zHJhrebxwQNF93LMCKBGt+hLE4=)
                          2: 7QBpYRu1X0RWTwiPQHhmZIwyuIE.roa (hash: FjYP9BTvkYqGvybteCTsUN9rqTv80Q0rCC7qqOI/gUY=)
                          3: 91g6z08m8q3UiOGe0AbrizL7h14.roa (hash: UzCeyAV+fH+ahYJC2yen3wKx/EfixsvWeeKacTQ1cHk=)
                          4: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: HOnOKz8qXUykDaYv4Lf7tY1LjZasXaIiKvAVBLdYlX8=)
                          5: HqbDs10urzsVBAvDFmKkb_IMAY8.roa (hash: Tv7YhD5KDICjYpHwKFaSLO8GWpwM1+kdHwDfFKeXNdY=)
                          6: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=)
                          7: PR0XIu5h_PhALm7cNgMYp1Ib5LA.roa (hash: ckJ2xQrBWkneGemnCsVt0gHYCglJwiJxyBE1KR6VJEQ=)
                          8: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=)
                          9: mYwzdqAY7_S9Fk60kMnWASIug-A.roa (hash: 52FaK7zJCUXQtBsYKmcDyOdvm3LIQVlGj6112gPSUr8=)
                          10: pUn0Uq0As5qGVatHVhYAiO9c15c.roa (hash: zFUg1Tg3M8t9PqkUwQss8qAYej6NfRetpbuzCww3bkI=)
                          11: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:37:69:ec:6d:c8:e1:54:63:24:21:c9:c8:04:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Mar 29 11:01:19 2025 GMT
            Not After : Mar 30 11:01:19 2025 GMT
        Subject: CN=4bfa78950de6758295c65e371e5571c26e8fac98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ea:1e:ad:9c:d0:c7:c5:77:5b:bb:5e:23:c4:
                    c1:af:e9:56:fc:3d:45:ef:e3:6a:0f:15:c8:b8:38:
                    c7:c2:db:31:5a:7f:79:10:f1:1c:a0:46:ae:c2:d7:
                    7d:f9:d1:b9:65:94:96:05:3e:05:84:4f:f3:a5:5a:
                    51:12:7e:92:88:0a:7f:28:91:33:1b:e1:b6:29:0e:
                    e0:bc:14:3f:96:44:d6:2f:3e:d0:21:c5:f1:66:80:
                    81:d1:f4:a7:91:c5:a9:78:68:84:10:6b:ee:28:f7:
                    41:c7:c2:93:3b:02:ff:a8:53:36:33:79:bb:77:92:
                    fc:eb:9b:4d:bd:cb:1d:81:72:2d:11:73:6e:94:98:
                    d1:99:1c:d5:6d:76:8c:f0:d7:b8:0f:69:34:86:82:
                    44:0f:22:1d:77:7d:ae:dd:2c:b1:3f:2a:74:02:cc:
                    08:5b:49:80:35:1d:54:23:8f:03:10:70:b2:21:36:
                    48:e9:08:d5:aa:11:5c:19:5e:7f:0b:d7:56:51:60:
                    71:88:8d:e8:07:5d:bb:42:16:c2:b7:b2:42:47:d8:
                    d2:67:03:f6:08:20:93:d2:d9:d3:e6:58:fe:2a:c8:
                    79:e1:84:75:63:cd:ec:74:71:e9:26:5b:64:0b:d4:
                    3a:0b:de:9f:77:e7:a9:fe:25:2c:3e:0c:9d:4a:a9:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FA:78:95:0D:E6:75:82:95:C6:5E:37:1E:55:71:C2:6E:8F:AC:98
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:62:1f:ae:66:24:6d:d7:14:49:1a:12:8b:66:ad:f1:d3:
         c6:5a:0a:9c:2b:45:d5:1b:5e:06:50:69:42:23:c1:8a:ae:b4:
         2c:20:77:9f:c8:27:c4:7d:a4:41:7b:86:99:71:aa:d1:52:1f:
         93:05:1e:f6:fd:58:da:8c:d4:85:19:11:56:e7:f7:f0:d6:bf:
         f9:be:62:73:b5:26:6f:58:b8:e3:62:84:93:ee:91:b6:9b:5f:
         d8:c2:ed:c3:a7:5d:c7:21:5e:52:f7:2f:5e:0e:76:82:08:a8:
         21:87:bc:fe:d2:d9:da:71:92:67:4a:13:c3:0a:e9:8d:4e:dd:
         78:e1:a7:c4:5f:1b:17:93:40:7a:ca:88:6d:00:e7:77:85:54:
         f4:e7:7c:a7:1d:fa:42:b5:db:d7:73:a3:8e:5a:e9:05:c9:68:
         32:e5:79:27:fa:3c:55:0a:96:cc:08:ad:d8:ef:a6:56:88:f0:
         29:7e:08:af:2e:11:fa:6f:30:1e:e2:07:34:93:20:84:95:29:
         66:ae:10:ad:d0:9b:c7:34:f1:94:f6:76:85:8c:7b:af:4f:95:
         2a:ae:57:9f:b2:2e:62:df:6e:48:a9:b2:f7:6b:35:f2:1a:52:
         93:3e:cc:5b:4a:9d:2e:83:9c:03:cd:fa:4a:e2:31:04:b6:3b:
         6a:96:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----