Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
File:                     sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json)
Hash identifier:          s+81USV+t3vEV5udkTpkWBz0vZYfqe0M8aD2E2peP2E=
Subject key identifier:   6F:DF:00:72:B4:BC:F3:FF:47:0F:9B:A1:AC:D0:30:59:30:A7:5A:21
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Certificate issuer:       /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial:       0195E07D431EBB03144DAB0E1D99C9B00A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
Manifest number:          10C2
Signing time:             Sat 29 Mar 2025 06:01:00 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:00 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:00 +0000
Files and hashes:         1: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=)
                          2: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=)
                          3: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=)
                          4: RMUAOIvwf3inYjouQKpjmE3cbu4.roa (hash: omzNp6f6UVs5Cn6DCoPwZ62vmGvmnzR01Dhy9oEX3Us=)
                          5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=)
                          6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=)
                          7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=)
                          8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=)
                          9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=)
                          10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=)
                          11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=)
                          12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=)
                          13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: 5zvo5+aKxV+zi6gtkzWzs9ojDh0LiBgsWGWFhUQqyAI=)
                          14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:43:1e:bb:03:14:4d:ab:0e:1d:99:c9:b0:0a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
        Validity
            Not Before: Mar 29 06:01:00 2025 GMT
            Not After : Mar 30 06:01:00 2025 GMT
        Subject: CN=6fdf0072b4bcf3ff470f9ba1acd0305930a75a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:ed:14:d2:4a:6c:01:f4:b7:aa:ba:58:a5:
                    9a:27:79:d4:1d:5b:c2:82:92:92:6c:ab:75:1d:87:
                    fa:7f:4f:08:4c:1a:df:f8:18:6b:de:0c:43:02:ef:
                    57:c8:b4:84:75:55:c5:1f:cf:30:1c:0c:08:a4:53:
                    89:85:a5:28:4e:db:67:b4:aa:f6:df:76:8e:88:eb:
                    66:38:d6:cf:f5:b1:11:1b:d2:9f:5e:60:74:a9:b7:
                    4a:a0:77:34:1c:52:4a:ba:f5:11:f4:e0:10:4e:af:
                    36:64:30:e9:98:5c:2a:4a:06:85:ec:88:b0:77:c0:
                    57:59:f4:be:23:47:f9:04:e0:b8:3d:21:e5:5f:dc:
                    de:b6:29:d8:a4:ac:6e:b8:9c:12:58:27:f6:1c:87:
                    d5:9a:84:44:bd:b4:77:58:e3:e9:0b:74:2a:45:74:
                    7f:de:b3:94:a6:d2:4e:c6:bd:ed:20:a8:86:44:51:
                    d2:f3:4f:aa:8b:14:3b:ab:77:dc:7f:44:cb:b5:22:
                    1e:76:0b:25:da:9f:ca:5c:ff:55:9e:64:e2:63:c9:
                    78:72:74:e2:56:85:cc:54:eb:4c:36:26:d3:bc:9e:
                    69:d4:7e:e5:a9:4c:bd:3e:43:03:8c:6c:68:6c:f5:
                    02:bc:a6:29:2c:bf:0f:94:7e:d0:5f:d2:55:cd:3a:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DF:00:72:B4:BC:F3:FF:47:0F:9B:A1:AC:D0:30:59:30:A7:5A:21
            X509v3 Authority Key Identifier:
                keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:04:8d:b1:17:f6:db:d2:44:c1:e0:bd:84:25:41:fc:87:7a:
         73:e8:1d:93:ad:26:eb:a1:61:ff:01:92:5b:14:b0:7c:ae:b5:
         6d:bf:68:b9:32:87:51:92:cb:f0:ff:e2:ba:46:58:10:23:fc:
         fe:bc:d5:e7:d7:f3:64:19:b6:93:a3:86:2b:9c:5d:e7:38:18:
         73:d3:d3:11:12:fb:aa:b9:08:e9:23:b3:f8:08:37:00:38:ed:
         b5:71:ba:06:8d:96:b6:86:9e:02:32:28:bb:97:75:41:d7:d8:
         ac:9a:f9:82:9c:8a:3d:29:b1:44:a7:b6:49:45:b8:3b:21:3b:
         77:02:38:cc:14:57:4a:c1:ce:9f:ab:04:ef:97:f1:1c:0f:8d:
         e6:98:8e:5c:bb:a2:4f:eb:2b:f0:7a:df:73:81:f6:e0:99:a0:
         2e:d8:3b:45:9a:99:43:2c:7e:5d:65:f0:c9:80:68:23:c2:d1:
         fa:8a:ab:88:cd:bc:15:2b:57:be:2a:21:7d:b2:16:4b:64:f2:
         bf:1c:d4:3c:46:78:bc:1e:5f:d2:46:77:7b:1b:e3:73:63:6d:
         d7:80:a1:48:ad:d7:95:90:27:83:99:43:ab:35:b0:7a:27:40:
         54:fb:52:e2:12:b4:06:0c:c9:3d:6e:b1:d7:6e:05:8b:b8:67:
         92:1d:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----