Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          gn/5qnzQDy8S6b0JWdkYsQwc6AueKkDWCGp5Qidfs54=
Subject key identifier:   82:DC:06:52:4E:8D:BA:9F:2C:CF:6D:EC:59:44:41:59:3E:96:15:0F
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       0195E00F92AE390699C2A007F6B9F4D58F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          11ED
Signing time:             Sat 29 Mar 2025 04:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:11 +0000
Files and hashes:         1: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=)
                          2: UGR0Nm7XgEo_C52g4hZe_Rs5ZcQ.roa (hash: LA6rXbOmVl2jO/KpnJDcjc8gvW16w8N7yWXEbyRFi7Q=)
                          3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=)
                          4: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (hash: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=)
                          5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: 431FHXFx0f/3qDPV17Pqr/xFopl0Nrm3DwBUWlgUFfA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:92:ae:39:06:99:c2:a0:07:f6:b9:f4:d5:8f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Mar 29 04:01:11 2025 GMT
            Not After : Mar 30 04:01:11 2025 GMT
        Subject: CN=82dc06524e8dba9f2ccf6dec594441593e96150f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:17:89:fd:f9:4c:78:22:fc:99:a5:d3:5f:
                    8f:c3:43:0a:f5:db:f2:55:85:9f:ac:38:c7:b3:2c:
                    79:61:da:0b:26:9b:f8:70:65:56:8e:78:56:5d:f7:
                    71:4a:ef:56:b0:17:71:c9:ed:fe:c0:f9:83:08:ec:
                    91:18:a0:2b:ed:4c:11:7a:e2:77:e7:99:f6:2a:1a:
                    36:b2:aa:7b:01:e5:14:1f:cc:c1:5e:f7:91:1f:80:
                    b2:48:79:da:12:20:17:32:9e:c4:5a:85:12:b4:82:
                    dc:6d:5c:b8:2e:32:71:f8:90:d8:93:5f:5b:a7:a8:
                    b0:7d:16:9d:44:42:59:41:57:c8:1d:d3:d0:5f:25:
                    58:41:3d:14:48:71:e9:f3:6f:70:44:f2:21:57:15:
                    db:42:25:ca:f6:50:67:5f:25:6a:c2:1d:5f:11:72:
                    24:7b:80:32:35:15:fd:13:45:11:81:e5:cc:d8:0e:
                    df:a6:64:7a:ed:1f:a1:c3:11:3a:a6:1c:49:62:c1:
                    eb:cc:70:ec:41:15:76:c4:64:f8:8f:01:64:64:9d:
                    42:14:5b:41:8e:57:e9:cd:9e:30:8d:dd:0b:dc:8c:
                    ad:7c:b6:df:d1:f3:43:48:26:a8:f6:b1:d0:9e:63:
                    5c:25:57:de:0b:9e:e8:a2:2a:af:ab:93:29:29:f4:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DC:06:52:4E:8D:BA:9F:2C:CF:6D:EC:59:44:41:59:3E:96:15:0F
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:05:f5:95:fe:a1:4a:05:c1:77:b0:e0:0a:10:06:51:68:09:
         e7:03:0f:20:a7:44:46:e2:f2:2d:f5:14:7b:d5:86:e0:5a:a6:
         ee:b4:65:ce:8e:d3:6e:c6:62:96:fa:38:ea:e1:cd:39:69:58:
         25:b6:25:16:2b:cd:72:80:4e:86:cf:02:6f:23:33:b9:ca:8a:
         c6:e0:73:2d:92:e0:ce:69:f6:eb:e0:fa:49:c5:2c:85:53:01:
         2e:ca:08:51:13:43:76:01:79:f1:7e:e3:3e:f9:ca:4a:85:86:
         96:ea:ed:1a:ee:18:15:bc:39:8f:bf:3f:e8:98:69:d0:9c:4e:
         2c:d7:84:f6:f7:00:48:b5:ba:c2:f2:5d:58:af:cd:13:2f:17:
         d8:7e:c6:1b:fe:06:95:2f:a1:55:4b:b6:ce:df:e6:a5:2e:a8:
         8f:2d:1d:17:b8:8e:ed:6a:8c:af:d5:26:0f:18:2e:fc:b7:98:
         cb:db:3b:9c:62:9d:1c:60:61:b6:c9:75:98:c6:36:ca:28:40:
         4a:52:51:81:cd:12:1d:91:f1:02:8d:8f:10:dc:23:1c:74:41:
         9b:81:95:74:0e:05:3e:d4:39:b3:51:d3:b3:eb:31:36:a5:ec:
         6d:10:29:9e:41:23:7d:f5:9e:7b:f3:02:36:5e:6a:9a:27:be:
         52:be:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----