Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File:                     9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier:          M53ICP/7APa2cdZgV6VmU+ZPm3i1Oz7qEnQhxhFLKCA=
Subject key identifier:   9C:40:72:C8:53:F4:C9:22:B1:56:C9:D8:4C:9C:2E:A3:9A:DD:7A:04
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer:       /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial:       0195E0EB2484A8019C5CD4D2C4078411217B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number:          14CA
Signing time:             Sat 29 Mar 2025 08:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:01 +0000
Files and hashes:         1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: eT3WVOiUd+prucykx/GxppMtxDss7VU4cyS53hC5qqc=)
                          2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
                          3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:24:84:a8:01:9c:5c:d4:d2:c4:07:84:11:21:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
        Validity
            Not Before: Mar 29 08:01:01 2025 GMT
            Not After : Mar 30 08:01:01 2025 GMT
        Subject: CN=9c4072c853f4c922b156c9d84c9c2ea39add7a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:72:fe:e3:b3:d2:7b:08:29:01:e7:71:fc:
                    70:d4:40:f6:75:c5:6f:13:c8:57:22:15:f6:7c:eb:
                    98:50:f6:90:75:8c:5c:d5:56:61:33:39:2d:d0:46:
                    f9:15:15:a5:2e:5e:28:74:02:8e:53:8d:26:36:f8:
                    11:28:d0:96:83:bd:36:fa:cb:99:3d:b8:25:e0:32:
                    b9:99:33:fc:6c:91:cd:1e:ea:74:94:f5:84:af:75:
                    43:ac:84:b7:69:a2:84:33:32:0e:ef:9c:25:fa:93:
                    ad:a7:88:92:b1:4d:45:f7:6a:70:3e:d3:14:14:03:
                    b1:83:cb:42:e0:4e:6f:8c:33:f4:e3:6c:a7:56:c0:
                    0d:ad:88:ba:67:91:fb:5e:93:a4:56:75:2f:f0:8e:
                    43:f1:64:e2:2c:4f:f2:49:ae:e1:e3:5d:c9:87:7a:
                    21:c3:21:f6:82:56:b2:b2:24:d2:84:cd:d4:7f:b8:
                    94:a3:01:1c:12:44:44:d5:3c:d2:55:bd:46:90:40:
                    f4:5a:8d:24:2c:8f:b2:a5:e0:c9:e4:f4:49:0a:ec:
                    41:ca:b2:a2:d3:11:8d:df:8b:40:84:be:af:fe:ba:
                    71:b3:51:e6:68:d2:44:81:25:60:c4:c2:1a:c2:d3:
                    23:e9:ae:5d:32:cf:39:8a:e9:1d:fa:d0:25:ee:60:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:40:72:C8:53:F4:C9:22:B1:56:C9:D8:4C:9C:2E:A3:9A:DD:7A:04
            X509v3 Authority Key Identifier:
                keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:75:00:cf:20:46:c7:a7:85:81:bb:c8:63:c3:c8:bc:82:9b:
         dd:1d:cd:f8:9b:12:6a:73:60:62:3d:ae:6e:f1:0e:a6:70:dc:
         3e:cf:2f:42:3a:bc:5c:b0:75:a7:95:97:71:53:de:70:7c:29:
         51:4f:27:0e:c8:5b:c6:59:38:f4:bd:41:ba:7a:63:56:b6:a5:
         44:0d:7a:d9:3d:8a:e6:c3:8c:3b:dd:b4:37:96:be:dc:9b:25:
         f8:69:fb:4c:72:30:93:37:76:9d:9f:5d:68:ee:36:99:55:9d:
         7e:15:e8:33:38:e4:9b:5b:9e:f0:87:98:73:62:91:6b:84:b0:
         ea:52:7e:68:77:d1:1e:7a:63:ab:7a:4f:21:09:e0:3e:7c:f5:
         10:06:6e:aa:18:cc:cf:26:2a:64:ab:44:d2:31:44:06:0c:e0:
         13:22:38:60:e3:31:21:fd:92:cb:4d:9e:8a:e4:de:26:cd:bc:
         ae:7e:e5:0f:67:5f:47:a7:76:36:2b:8e:7d:2e:b7:cc:c1:a2:
         29:89:3a:4b:79:1d:5e:b0:16:fa:08:0e:89:4f:a7:22:a7:b8:
         ed:4e:88:aa:be:6c:ab:25:02:11:a8:55:dc:f5:b4:79:77:1e:
         12:4f:61:a1:b9:f7:e3:a7:01:6e:3c:d2:48:f4:1f:16:d5:c2:
         e6:05:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----