Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          6xAGhsUT/37XM2sHU8n/w6iym13akGaCVMaNcrW8/Ek=
Subject key identifier:   A2:07:50:C6:F9:7E:33:96:E2:EA:5A:37:30:88:30:20:B9:D6:21:19
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       0195E0467D91FE45EB4B8F559472A6A66889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 05:01:10 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:10 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:10 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: l+PucctbQeiJBRyWKiIaoK2TTuMI5RNTdbFoHbQSwxw=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:7d:91:fe:45:eb:4b:8f:55:94:72:a6:a6:68:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Mar 29 05:01:10 2025 GMT
            Not After : Mar 30 05:01:10 2025 GMT
        Subject: CN=a20750c6f97e3396e2ea5a3730883020b9d62119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:a6:6c:0b:1d:06:f0:19:35:c6:ef:3d:20:
                    04:60:c8:6a:c4:2b:18:0e:07:fe:cf:28:32:50:99:
                    18:4a:78:e4:70:b6:8b:35:34:c6:79:63:0c:a5:73:
                    11:79:bb:e7:ea:97:2e:78:3d:43:76:36:59:0e:43:
                    ef:03:1f:e0:eb:ab:39:d2:2b:2a:09:0f:66:ad:42:
                    27:5d:fe:d0:0a:b9:90:74:cb:6c:d5:49:ba:9b:d6:
                    b1:44:9d:d6:2a:02:3f:17:09:a0:33:e9:c4:77:0e:
                    ea:f7:88:43:52:29:45:58:e7:f7:86:6b:ab:94:50:
                    d0:47:76:30:5a:bc:0c:0a:20:ba:20:b5:25:3e:48:
                    fc:89:e1:7b:55:93:3b:e4:cf:1f:68:b5:49:74:4d:
                    4f:8d:7f:4f:b6:b3:78:7d:b6:c5:45:1e:db:52:b5:
                    51:63:33:bc:8c:97:5d:1c:c4:43:53:18:f9:7b:8e:
                    34:e0:71:32:fc:b3:89:b6:a1:95:bb:0d:d8:b3:1f:
                    01:e2:0e:70:8e:1f:43:a8:6d:fe:69:f9:dc:99:c3:
                    0e:b8:99:b2:8a:9a:84:67:2a:77:1e:82:b1:53:6e:
                    7b:6a:48:b4:d4:01:e2:01:42:af:db:3f:e7:36:b3:
                    04:ab:15:b0:9d:ab:b1:82:99:6b:f7:e9:f1:a2:21:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:50:C6:F9:7E:33:96:E2:EA:5A:37:30:88:30:20:B9:D6:21:19
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:65:49:a4:41:6c:31:46:1b:2d:fe:e8:00:3a:20:70:cc:
         eb:e2:a7:95:c4:82:6c:bd:1d:d2:eb:af:af:0d:a9:fc:5c:68:
         23:ce:56:6f:25:ab:d0:37:80:7f:8a:5a:9e:ba:48:1b:ee:5a:
         83:8e:cf:dc:e1:5f:ad:96:5e:4f:1b:c2:f8:69:dd:0b:21:f9:
         3e:37:42:43:79:ad:ba:9f:0e:c0:15:22:25:0d:13:80:a4:bf:
         1f:b5:10:70:de:5a:85:bc:53:68:3c:3c:a7:d6:4b:e2:69:43:
         dd:23:01:69:02:60:13:28:a2:59:d6:31:cf:31:ca:67:af:e5:
         93:3e:c1:a5:71:76:12:9b:a6:61:88:1a:39:46:0c:e2:f5:48:
         ca:4f:38:83:b7:3b:61:6d:f1:7e:54:db:42:e7:f5:54:37:35:
         f7:1d:04:1b:28:96:87:65:26:b9:ca:68:f3:6d:bf:56:c5:7d:
         b8:95:4e:dc:32:ee:f1:f0:3f:1d:57:58:f1:0b:e6:7a:0b:7d:
         ff:25:4e:c8:66:e0:10:d4:54:e2:5c:44:ce:0b:51:6f:a0:77:
         57:78:06:d9:a6:67:87:aa:f6:1b:d8:9c:48:67:c0:3d:64:51:
         80:3e:a1:e9:ce:1c:ef:81:88:dc:34:88:86:0d:d5:83:6c:66:
         9a:b3:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----