Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
File:                     EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft (raw, json)
Hash identifier:          m8SptS74weFJEylZqjdAJE7xEeUWM7so+cY91G2fVLM=
Subject key identifier:   70:3C:F9:3B:54:1C:8F:75:A3:B1:F5:F7:62:FC:BF:91:E3:58:42:E3
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       0195E159BEAA3C1E21632236E98EC38666BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
Manifest number:          081F
Signing time:             Sat 29 Mar 2025 10:01:49 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:49 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:49 +0000
Files and hashes:         1: EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl (hash: 9tU0Z5IQ0nxU5RLFbDvZQ9JtwCeYedox4Hsz1tJw8EA=)
                          2: cTTyZG3sGYW4--iA37L_e4KKCac.roa (hash: jAHavpEeqSxn7Wz6qgij8QBMxDH2bPHO8CwBbW3Q6eI=)
                          3: jOfgwbHFHsIIF0LL75vu6P_Fe8s.roa (hash: dWpwGB2a9oIdE7pk2wUUzH1wz99i3EaKumQo1e/dHRo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:be:aa:3c:1e:21:63:22:36:e9:8e:c3:86:66:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Mar 29 10:01:49 2025 GMT
            Not After : Mar 30 10:01:49 2025 GMT
        Subject: CN=703cf93b541c8f75a3b1f5f762fcbf91e35842e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:dd:57:00:07:10:80:fc:4a:13:10:69:f1:
                    9e:72:d6:41:60:63:b8:57:71:33:53:88:a8:67:05:
                    a5:88:ad:8e:8c:68:9a:14:dc:e2:c4:68:84:47:77:
                    2c:98:3e:14:dd:24:56:af:e2:c0:46:d9:49:78:7e:
                    51:3c:ac:20:3b:dc:e8:8e:6a:74:f2:d5:6a:a2:f0:
                    24:6f:01:9e:f0:01:7a:e8:56:16:b1:c1:ff:94:0c:
                    57:2f:1c:c4:b0:f1:80:44:cb:cf:fc:7c:dc:b0:c9:
                    70:cb:2c:36:e0:07:99:73:83:cf:0a:af:5c:66:aa:
                    31:6b:d5:4c:90:32:05:45:41:69:dd:eb:eb:2f:79:
                    0e:b9:0b:bd:35:2b:ae:5c:79:bf:ab:d7:b1:98:3c:
                    52:de:74:b4:39:87:a6:b5:c3:3f:c2:ca:89:dd:8f:
                    3e:09:29:d4:6d:37:af:2d:e1:6f:b9:b8:d9:10:d3:
                    f6:33:ec:4f:bd:65:c2:64:52:19:d7:a3:f2:83:e5:
                    2a:e8:c9:d8:0f:47:60:ab:0b:32:4d:2e:ab:83:9b:
                    e3:4d:32:a4:69:56:79:7f:d2:e1:21:d4:a1:f6:5c:
                    0d:54:7c:f8:df:ca:84:0a:65:83:d2:a7:9c:ae:0e:
                    b4:00:b8:29:e7:7a:07:00:41:ab:78:d9:5f:e9:37:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:F9:3B:54:1C:8F:75:A3:B1:F5:F7:62:FC:BF:91:E3:58:42:E3
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ce:5d:f3:27:5a:71:7b:90:45:86:fc:92:7f:fa:40:ac:91:
         05:25:1d:06:9e:6f:29:30:71:8d:18:de:39:8f:28:91:5e:70:
         8b:92:a5:fc:b0:2c:57:15:d0:3b:0e:6a:30:60:f5:28:be:e0:
         f5:ec:ea:cb:d0:9b:91:41:53:28:a0:0f:aa:be:57:1c:06:df:
         7b:85:c0:43:74:0d:85:5e:a7:ea:02:7d:01:3d:a2:ce:24:9c:
         ad:58:b9:c1:24:e9:24:f5:9d:12:50:40:c8:9c:13:a2:56:ce:
         bb:d1:ef:18:d4:a4:a5:ea:f1:9a:1e:16:d1:d1:38:cb:f3:4c:
         19:2b:0c:0a:94:0e:d2:07:71:7b:db:f5:6a:73:0e:22:3b:6c:
         01:bd:f4:44:85:bd:a5:ab:f9:92:c6:a2:22:24:92:af:43:3f:
         d2:1d:82:16:e3:9d:1f:16:9d:c1:5b:44:86:98:bc:a0:62:88:
         75:49:02:00:b0:82:05:b4:a4:c0:c8:0d:fb:95:59:6c:7f:90:
         69:36:10:b6:56:10:a9:04:97:32:23:b1:85:bf:6a:bd:aa:e1:
         82:b5:f1:c2:f5:8b:7c:c5:85:4b:6a:96:45:25:df:c0:d8:1a:
         58:e9:9d:b1:0e:fa:ed:48:ed:5a:0f:53:27:8a:d4:e4:19:2e:
         18:87:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----