Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File:                     hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier:          /GGcfoE+Ekv8OWWqjrVK1/r89FgsBOoh8mh4O8rc4QU=
Subject key identifier:   11:8A:88:FE:C8:17:94:86:67:B9:36:E1:0C:06:13:1D:00:F5:77:97
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer:       /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial:       0195E0470225383928C11246607F92E05E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number:          08BA
Signing time:             Sat 29 Mar 2025 05:01:44 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:44 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:44 +0000
Files and hashes:         1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
                          2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: avQfvjwhmmLgiAXPgzmxfoSNRnLgGR49AUoTjx+aJPU=)
                          3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
                          4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:47:02:25:38:39:28:c1:12:46:60:7f:92:e0:5e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
        Validity
            Not Before: Mar 29 05:01:44 2025 GMT
            Not After : Mar 30 05:01:44 2025 GMT
        Subject: CN=118a88fec817948667b936e10c06131d00f57797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:b2:f3:6d:d5:d9:b0:ba:9d:56:f4:b2:d7:
                    41:22:c7:46:13:38:35:87:81:7d:78:2a:6d:27:d3:
                    8c:86:d3:7b:07:39:81:a1:39:a0:f0:f5:23:6c:45:
                    64:7e:85:c0:df:c2:20:d3:82:aa:43:ba:4d:48:bb:
                    5b:ce:fa:cd:ab:f8:32:2b:ab:2f:9f:6c:b2:b7:45:
                    10:31:71:8c:97:bf:40:17:c5:7c:a3:20:c1:33:df:
                    06:cf:4a:db:7d:fe:c5:be:2a:50:c2:db:4f:50:9b:
                    11:fd:7b:44:e1:78:5a:5c:ce:01:1c:3b:4b:c5:43:
                    5c:fa:4f:88:31:49:34:b8:82:89:44:e7:de:9d:70:
                    95:de:e0:88:99:8a:1d:d3:ae:7e:83:74:2f:d8:2d:
                    bc:53:36:56:5f:c0:23:ab:ce:d8:f8:bd:7a:dc:20:
                    02:e6:69:81:47:c6:a8:5e:6a:86:41:b2:9b:3f:a0:
                    9f:92:98:f3:1a:b0:23:56:ec:24:8b:3a:88:6b:23:
                    9b:f1:58:bd:6a:78:ff:cb:d5:32:43:25:30:e7:2b:
                    fb:c1:0f:0c:ca:ab:70:15:79:bf:b9:d9:6d:91:a4:
                    4a:c6:4f:cf:dc:62:94:12:7b:6e:47:e7:95:23:19:
                    e2:15:4c:0e:08:57:fb:9c:45:4b:db:63:c2:3c:25:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:88:FE:C8:17:94:86:67:B9:36:E1:0C:06:13:1D:00:F5:77:97
            X509v3 Authority Key Identifier:
                keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:81:08:be:a9:35:58:1c:60:17:45:39:54:da:39:19:ee:fd:
         84:9b:bc:af:b1:a5:f9:f9:17:df:fd:26:e9:6c:82:31:29:1e:
         0a:02:19:da:ea:dd:38:b2:cc:0b:0a:79:83:9d:11:4a:ed:9d:
         de:76:26:71:b3:cc:e9:98:5f:02:af:57:eb:0e:a9:7f:b1:ac:
         5c:b0:2f:79:e4:d9:47:6f:7a:9b:95:28:d1:6a:80:f2:e8:f9:
         a7:ed:8b:2e:c7:e9:e1:1b:69:73:a3:97:f7:07:36:74:ca:7e:
         b9:da:b4:a3:70:50:8c:fd:d2:f6:70:ba:28:cc:33:65:94:01:
         f4:00:e8:30:3c:de:ab:87:a2:6e:b7:64:1e:fa:9c:28:5f:d2:
         90:94:b5:74:33:a0:48:61:e3:b8:10:d7:76:bd:81:f3:7a:28:
         f3:69:a0:37:39:e2:dd:26:00:32:09:6d:e2:b9:1b:5d:79:aa:
         4d:53:3d:a2:f7:17:87:db:d8:ca:c8:69:9a:fd:97:50:7b:1b:
         e8:7b:ec:b7:ec:9a:15:7c:23:a8:ca:26:8c:57:45:82:bc:e2:
         86:bb:c2:9c:2f:84:4a:71:f4:4a:50:a1:94:32:38:dc:ee:24:
         e4:b7:89:72:f7:90:36:4d:31:40:ce:aa:e8:7b:2b:17:10:f5:
         ae:03:6c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----