Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
File:                     V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft (raw, json)
Hash identifier:          eiaqHE4fK4O23fBHtzPIvVbvPf+Jz+jcj6j7tiHqFFk=
Subject key identifier:   54:CA:CB:95:1F:DC:13:FA:01:28:CE:EC:B6:0F:E1:16:33:6F:AA:65
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Certificate issuer:       /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial:       0195E046DDE4185F702891287624EE0B5697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
Manifest number:          14CA
Signing time:             Sat 29 Mar 2025 05:01:35 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:35 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:35 +0000
Files and hashes:         1: 0HQu8Zx0bqoT8VblZx7T-KABTMs.roa (hash: PMmgS2CzSt2RGIZOxQkouUiRA5CO+OAI06wmRBvm14c=)
                          2: HAFTWYZhRl2JhSvJ17kRi_EORRw.roa (hash: 19em40Igf72cORttMpVzO/f9hKOd+3zplkZkJTc0zOw=)
                          3: V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl (hash: UCvh93ex50u3Dzf5l5g9zW3jQWw+YDFwXAl7K7byzXI=)
                          4: XzHbUO4u5QutpWYtZyqfUUIrRTI.roa (hash: dO0CtFUpXZ4k5F0vBkaTPTnFApdf6AbyjKu5COO/Zms=)
                          5: yQx5YUSfcqcgx3IA4ICMejwqPbs.roa (hash: cBatkYbqWez1EI7dU65y7uQSmyGeXkq58ToIkxccLCs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:dd:e4:18:5f:70:28:91:28:76:24:ee:0b:56:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
        Validity
            Not Before: Mar 29 05:01:35 2025 GMT
            Not After : Mar 30 05:01:35 2025 GMT
        Subject: CN=54cacb951fdc13fa0128ceecb60fe116336faa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:4e:38:ba:43:a8:7b:df:bd:9f:7e:af:b6:
                    ef:28:76:ee:ca:74:6f:ed:c3:31:18:2d:1d:64:ea:
                    82:5f:5a:f2:33:20:6f:a0:b4:de:22:18:2c:95:a1:
                    c7:85:49:9d:87:4d:04:24:e9:c1:81:00:8a:4a:77:
                    6f:be:bf:cd:21:47:06:1a:cc:77:7a:81:3a:1e:1f:
                    c1:58:d6:cd:21:2a:a6:83:ca:5f:24:81:17:ce:09:
                    56:e4:e0:3f:14:89:64:0a:1e:bd:8c:1b:9f:e7:45:
                    bc:88:43:ea:05:fc:c2:7a:f2:e0:cc:34:7c:e6:b2:
                    7a:bd:f1:1b:ab:ae:68:ca:8c:f2:0b:be:3f:43:54:
                    b9:f7:d0:92:f4:8e:f9:59:16:d9:3a:6a:8a:36:84:
                    6f:8b:d4:3b:2a:61:cb:86:d1:4b:3b:1e:14:0e:97:
                    60:61:c7:4f:ac:99:2d:9f:1d:73:ee:e1:69:39:39:
                    1e:21:3c:d9:88:5d:fe:ca:3e:7d:9a:e7:2e:6f:da:
                    cb:d1:ff:28:e5:4e:a6:c3:8b:0a:26:bb:14:a5:2b:
                    a6:06:b7:56:2f:11:78:53:49:af:9b:69:56:5f:05:
                    e7:b7:e6:5b:25:51:fd:ee:d7:ec:2f:32:b8:61:87:
                    5f:15:ed:63:f5:47:5a:c8:e3:7b:9d:31:bb:c2:26:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:CB:95:1F:DC:13:FA:01:28:CE:EC:B6:0F:E1:16:33:6F:AA:65
            X509v3 Authority Key Identifier:
                keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:ce:af:47:c7:4c:10:e6:55:ae:59:64:a4:22:56:85:20:
         d3:61:bc:77:76:c5:d8:dc:81:3c:2b:df:5a:14:7e:b6:55:6a:
         03:a3:5a:f7:2e:57:d3:94:05:59:5f:f1:ca:08:58:7e:90:7e:
         29:b0:7f:98:23:2d:8b:46:64:45:92:0f:2c:5b:16:9d:e0:fe:
         bc:c3:6a:aa:1b:b0:aa:0c:11:af:13:b2:59:55:57:36:71:3d:
         7b:a5:06:f3:e6:b7:c1:a7:a1:f0:21:4e:84:3a:df:c0:13:9f:
         32:06:31:4c:4c:a0:79:1e:37:3e:b9:25:5d:06:a8:ef:e0:22:
         4d:3b:5d:be:b1:29:41:4f:34:11:3d:14:96:dd:91:f9:79:b3:
         ed:c4:96:7f:8c:eb:d6:3a:83:59:18:eb:b1:2d:f8:3b:71:d1:
         5d:8f:33:8d:fb:33:fb:ae:87:a4:df:3c:b2:3b:a3:fe:7b:70:
         fd:28:23:48:b9:7e:79:f5:3e:23:34:c9:06:27:f9:12:05:1f:
         6c:aa:ad:b1:02:02:ae:50:0e:34:d9:19:1d:63:89:fd:11:c5:
         11:b8:82:25:27:ed:c6:2d:01:64:44:30:a7:b6:48:9f:bc:ac:
         11:2e:f4:90:e9:a3:36:6c:9e:6d:8e:35:ba:ae:e9:0c:d1:c1:
         6d:9a:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----