Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File:                     2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier:          suNd3KYPeLJ+Z/fpQckU4wu8n3ShpSFOwYhS71g9izw=
Subject key identifier:   36:23:4A:81:9A:CE:90:4A:F0:1C:57:F6:A5:4B:25:6B:73:DC:62:C6
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer:       /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial:       0195E121FF830F63055E17F4B4BD43382D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number:          0130
Signing time:             Sat 29 Mar 2025 09:00:56 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:56 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:56 +0000
Files and hashes:         1: 0hXs769ouX7ZtQTTiOLlFP8mh8M.roa (hash: MgGCpokd8fHgthtlPirKAzSDRHQrtYokNuVt7GJrmes=)
                          2: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: GIltLHjcTFgRMtBEF+lFETvx55b9RV7ZyI052Jn3pNc=)
                          3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
                          4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:21:ff:83:0f:63:05:5e:17:f4:b4:bd:43:38:2d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
        Validity
            Not Before: Mar 29 09:00:56 2025 GMT
            Not After : Mar 30 09:00:56 2025 GMT
        Subject: CN=36234a819ace904af01c57f6a54b256b73dc62c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:8f:6b:97:7d:83:97:60:a4:e2:c7:17:65:
                    4a:39:86:e6:38:bc:2a:b4:95:62:8f:69:6a:94:54:
                    91:2d:65:e9:7e:2e:16:5f:29:eb:92:cb:5a:36:25:
                    33:7c:44:4f:24:33:b3:0d:43:e4:6a:40:da:da:cd:
                    ab:a0:31:50:df:65:02:f4:b8:a7:6a:13:c3:2d:45:
                    b6:d8:20:26:d7:96:2e:c0:0e:42:b0:3d:56:43:c2:
                    2e:2d:7d:b7:a4:99:25:c0:c1:3a:b3:82:3d:0e:0c:
                    06:b0:d1:66:5a:35:f5:31:c5:a1:dc:8d:cd:cb:1f:
                    cf:e2:25:42:ee:71:07:b8:4a:a5:81:f2:d9:bd:8e:
                    c6:1d:85:6e:8a:c2:e2:e3:48:02:7c:f6:e3:d4:26:
                    95:34:47:cb:c5:22:4f:45:a6:58:12:8b:9d:cf:ee:
                    86:6e:5f:1e:cb:1e:3a:62:b9:74:45:49:99:f4:f8:
                    41:32:ee:a2:63:a8:c9:8a:00:0d:16:11:ad:cc:e4:
                    e9:ad:38:40:4b:68:c0:ad:33:d5:52:f6:82:a5:95:
                    d9:28:be:75:db:2a:6e:c9:64:6c:50:b7:8d:58:07:
                    21:be:69:49:79:77:a6:2d:be:ae:f7:c4:88:f3:e6:
                    d4:90:7b:e1:51:1d:63:91:ad:c4:8d:d3:c5:60:cb:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:23:4A:81:9A:CE:90:4A:F0:1C:57:F6:A5:4B:25:6B:73:DC:62:C6
            X509v3 Authority Key Identifier:
                keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:73:1e:07:43:33:70:7b:48:fe:c5:51:c3:c0:08:05:cc:e8:
         fc:00:cd:08:6b:53:83:4d:d1:45:4b:ab:30:af:2d:e1:81:25:
         5f:f9:91:a3:d8:c8:e3:ed:54:d4:12:49:c9:11:0a:24:b3:0a:
         3a:27:44:38:4e:a6:1a:b5:84:25:f4:01:a4:82:4b:cf:ec:c1:
         b2:10:d7:d9:03:3e:64:15:23:d8:05:d6:71:a8:0b:b2:9d:c6:
         60:e5:b6:da:ff:33:2c:fa:53:9b:f5:7f:fa:e9:8d:50:d0:54:
         49:5c:21:3e:39:bb:4d:64:5c:ad:06:ea:8c:3d:df:64:35:0f:
         c4:60:e4:cf:0d:3b:84:17:c4:bd:2d:80:7e:a8:e1:e4:10:ad:
         61:d5:1c:94:77:50:f0:a2:3f:e6:33:10:9e:7f:0d:2e:a6:8e:
         b5:14:5d:f7:03:91:85:00:cf:bf:36:40:5a:6e:dc:c5:67:49:
         6c:b0:12:fb:cc:44:0c:e6:04:e2:9f:44:23:3d:8a:cc:d1:8e:
         3c:4e:67:50:4c:06:fe:e8:52:f1:0d:8f:01:54:04:65:f2:d0:
         80:ce:0b:2b:5d:63:d0:e9:44:7c:a2:54:8e:40:21:07:db:46:
         df:b1:c3:72:ac:44:21:83:a0:d4:31:d0:17:2d:92:5e:77:85:
         25:d1:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----