Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File:                     sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier:          0G0VFR8CQwhaXL0Zg4kLHVjCfVqeot2E8wP4fFsK0g4=
Subject key identifier:   49:80:1D:DD:31:1E:FC:41:1B:AA:4C:A0:CD:EE:83:D9:A8:16:91:A0
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer:       /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial:       0195E1905D787EC9B0471E0AE704959BC6D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 11:01:29 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:29 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:29 +0000
Files and hashes:         1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=)
                          2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=)
                          3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=)
                          4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: KZaCaJ9UHibGLMMpj7dkVuiM1tq1MusRpxWTDiU4t6w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:5d:78:7e:c9:b0:47:1e:0a:e7:04:95:9b:c6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
        Validity
            Not Before: Mar 29 11:01:29 2025 GMT
            Not After : Mar 30 11:01:29 2025 GMT
        Subject: CN=49801ddd311efc411baa4ca0cdee83d9a81691a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:17:24:bf:7c:90:de:b5:b3:c5:98:0f:84:
                    98:76:ae:6d:f7:36:af:c3:7d:47:9a:03:1f:a8:d1:
                    04:bc:cc:4b:cd:4a:bd:60:8a:a8:24:70:5d:da:2b:
                    5f:c4:c0:8e:5b:7e:56:3d:57:c9:7c:28:10:a4:2a:
                    31:b5:62:90:6c:a7:fa:2d:88:f9:18:b8:e8:a2:c8:
                    4c:1b:95:d9:ff:58:c4:99:c7:82:09:b0:1e:ca:fa:
                    83:9b:99:6a:15:fd:6b:6a:0a:fc:4e:26:09:33:2e:
                    3b:9b:fe:3e:48:d7:7a:9e:14:9e:47:29:51:1f:d7:
                    1f:7d:30:ea:00:c1:63:e2:c3:98:97:09:a2:98:e0:
                    ad:84:d6:2b:5d:46:e3:3e:54:dc:c2:4d:12:20:e7:
                    36:34:f4:90:6f:d0:39:f6:fe:e1:54:8c:08:fa:04:
                    0b:19:4d:40:cb:23:c6:32:80:d3:18:7c:71:25:cf:
                    46:f5:9a:4b:46:ff:0b:2a:d3:1f:ca:0f:35:b1:53:
                    53:c9:24:12:f6:99:be:ce:cc:f9:9b:2d:a9:0d:99:
                    92:ef:9c:e6:c3:8c:86:13:fb:ee:02:d1:2e:d1:a4:
                    8a:e6:39:11:ef:e2:89:a8:94:4e:20:cb:19:6d:66:
                    ab:f7:82:91:e5:1d:7a:db:f4:76:58:28:d2:a6:5b:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:80:1D:DD:31:1E:FC:41:1B:AA:4C:A0:CD:EE:83:D9:A8:16:91:A0
            X509v3 Authority Key Identifier:
                keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:2d:88:3d:d5:b3:54:8c:6f:8c:d5:a8:ae:fa:c3:02:3f:
         13:28:c0:30:1b:d2:1c:cf:84:ac:41:f4:66:28:7d:0b:c9:18:
         e4:9a:6b:b0:fa:a0:47:3e:82:8a:4b:8b:48:46:88:60:ff:e4:
         39:02:f1:01:e1:4e:d1:d4:e0:34:08:42:aa:29:9f:51:7f:57:
         0f:bb:b4:81:37:e7:84:f5:74:ba:65:78:61:92:c0:d9:ff:e9:
         d9:59:82:a0:8f:47:e8:20:04:61:75:99:e3:17:8f:70:96:b1:
         30:2e:c8:22:44:4e:a0:1a:0f:fc:87:cc:ac:ed:6e:56:02:e7:
         71:f1:67:4c:29:22:49:64:ec:d1:f8:8a:b6:98:e9:db:a0:19:
         8e:9c:09:76:d9:46:ff:0f:82:20:6d:9f:5b:41:bb:36:d3:a1:
         b2:e9:90:64:64:09:19:3d:7b:56:5b:c1:38:bd:64:84:6d:96:
         c4:4c:8e:93:1b:85:17:c7:f8:ae:70:b1:07:fb:48:f5:8d:19:
         f8:3c:33:a3:a7:2d:d0:cb:22:a6:c0:51:12:70:4c:5d:de:23:
         1b:6c:d2:69:48:0c:41:11:a6:da:a0:42:58:f3:59:68:9f:c5:
         30:56:0c:8a:ef:9f:ca:85:80:69:89:57:39:f2:63:fe:06:96:
         cf:75:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----