Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          B+jF83XAyl5l9boYC5mo3Vy3XY8rMFFcYZQV6mpVC7I=
Subject key identifier:   9C:DD:51:F2:4C:C8:30:5C:F9:05:06:3B:E9:1C:44:F9:00:B7:3F:FC
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       0195E12270D28883549942A186E8DC223B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          14D1
Signing time:             Sat 29 Mar 2025 09:01:25 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:25 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:25 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: kI95OqljvpuP19xNeatpCC78QL0.roa (hash: xeIJsQyiu78m/ov5MVv9GnNEdwzfiIiPyuIblum8QtY=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: MhsyCtFh2NnPN70gJ7I8Y0P7h6J/n0j738OuJ4taG9A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:70:d2:88:83:54:99:42:a1:86:e8:dc:22:3b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Mar 29 09:01:25 2025 GMT
            Not After : Mar 30 09:01:25 2025 GMT
        Subject: CN=9cdd51f24cc8305cf905063be91c44f900b73ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:1b:c7:b6:6c:d6:79:4b:46:4d:04:f5:e3:
                    fe:9a:92:d6:d3:33:76:d9:89:70:e9:79:40:5e:57:
                    af:14:be:f0:e6:1c:a4:f6:04:16:d0:5a:94:61:f8:
                    57:60:95:d9:49:9b:42:32:69:a4:59:02:ab:33:60:
                    0c:ce:b9:ae:12:28:59:b9:e7:6e:af:e4:71:5f:62:
                    37:4b:be:c6:96:71:6a:40:80:d7:13:dd:91:7b:65:
                    0f:11:07:b0:1c:81:37:76:4b:d3:ed:84:5f:f4:99:
                    81:77:f5:46:00:7f:36:f8:9b:98:15:b2:76:cc:b5:
                    09:65:45:49:48:ca:72:ab:ac:af:b7:98:f7:bf:22:
                    a2:6b:a1:74:b0:76:4e:cb:2c:b3:f3:d8:6b:71:e1:
                    63:7a:be:5f:f6:55:30:74:e0:1b:26:ba:25:2a:75:
                    13:21:f5:26:13:ee:a5:aa:a7:05:1e:04:79:02:65:
                    36:d5:7b:5b:09:8b:f6:39:d1:b7:8b:6b:5e:63:42:
                    e7:69:02:6f:ed:87:6e:c7:dc:cb:5c:65:97:9b:4c:
                    e5:bc:88:3d:5f:41:a7:3e:62:20:d7:db:b6:ee:7f:
                    d2:2b:b3:79:f5:b5:10:2b:c4:38:dc:48:91:e7:12:
                    57:a6:72:a4:b8:3c:7e:34:3d:16:9e:71:70:e4:f0:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DD:51:F2:4C:C8:30:5C:F9:05:06:3B:E9:1C:44:F9:00:B7:3F:FC
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:06:a7:53:82:69:6e:a0:22:92:9f:bb:b7:cb:1d:38:c5:
         d6:53:68:35:d1:2b:02:02:86:fb:13:c4:ff:1b:f0:08:42:00:
         32:05:47:52:cf:5c:7b:3c:94:ec:8d:8b:3b:c3:9d:18:fb:b0:
         ca:c7:af:d8:19:fd:7c:1b:94:14:52:dd:3b:93:d9:7e:92:b0:
         69:c8:62:00:bd:c3:68:dd:c5:69:ff:5f:1e:86:36:e8:fd:dd:
         14:d1:62:72:12:45:3c:02:e6:24:12:f5:a7:2d:b5:a4:54:ce:
         f3:82:08:a1:99:8e:87:f9:09:ac:e3:81:99:67:29:b2:b7:70:
         e4:31:c0:bf:ca:e2:29:60:d7:44:fb:18:7e:7b:1b:ee:b4:11:
         9e:b2:86:3d:0a:09:9c:8b:52:dc:3d:a4:a0:eb:b9:7b:83:b0:
         bd:9d:31:5a:eb:3c:b9:0d:76:c6:29:98:97:ba:2e:7c:b7:35:
         7a:15:f5:b0:01:5e:cb:ff:f3:74:e2:a0:6c:5d:0a:a6:56:c2:
         ec:df:5f:2b:83:99:0f:aa:cf:00:64:4e:5f:a8:1c:65:5b:33:
         e1:cd:eb:d8:2e:c2:cd:4d:db:40:57:6b:6f:4d:76:06:bf:cd:
         a2:1c:fc:32:79:d7:8f:b0:2f:c3:9b:2b:f1:9b:c5:a4:1a:f9:
         39:db:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----