Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File:                     o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier:          +F9CKIvQw6CsrP+VP27GAXlh2VP/072rdzI17fECp/Y=
Subject key identifier:   3C:BE:89:48:90:11:EE:3E:5D:1B:1F:1D:C2:2B:EB:08:E9:50:B0:FE
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer:       /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial:       0195E19027822AEABE912ECFFDC53E33E4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number:          13F2
Signing time:             Sat 29 Mar 2025 11:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:15 +0000
Files and hashes:         1: A-6dGixYiVjP5SArd3OOXzF_y94.roa (hash: dHKBVyiR8mv13Z7wTMxDvJhUaTAdj4JJSYSEmomSgRI=)
                          2: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (hash: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=)
                          3: KWzqOLtIWSWtWkByhLp85FW_7rM.roa (hash: +yMm4K7E6517qc0jJ3daW8uChLhsqKi3MVBCXwIyDXI=)
                          4: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=)
                          5: adPv80nsAvDoMdbWFhmbQrTYx_c.roa (hash: 4ui5pcCs9o10PJAGBjhy0LQC0IJvn6eEg11QBgbYrhM=)
                          6: ayrwJOZcqXwPotZkkftDNJvjVWI.roa (hash: u8hehMe3mSy7WRp8JZKZ+vW+iYZYC7RSsKKYne4ZeUk=)
                          7: dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa (hash: n5MzTBEIB9PdMNKBfe5+OAUwctGrct8tICmAF1a6F9E=)
                          8: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=)
                          9: mPlgxbWD56Le2xy3b_FhRsqSxsc.roa (hash: AfWfwIbPTYGoiVxVmMF6d4mso8lDoU2eXTIxJq7pZSw=)
                          10: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: IunyaRTy/p19fFDxmSpEqL7FFiPp9NYR3ozD2L1BW+Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:27:82:2a:ea:be:91:2e:cf:fd:c5:3e:33:e4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
        Validity
            Not Before: Mar 29 11:01:15 2025 GMT
            Not After : Mar 30 11:01:15 2025 GMT
        Subject: CN=3cbe89489011ee3e5d1b1f1dc22beb08e950b0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:ff:6d:8e:93:67:e5:5a:29:f4:6c:f1:11:
                    0a:3d:d9:3d:e2:de:3e:8e:41:77:d0:8c:c1:db:32:
                    4a:58:aa:63:06:85:6b:d0:00:9f:a1:cc:4d:bd:4a:
                    17:43:00:fd:b6:10:aa:be:0c:bb:b5:d6:ef:6f:db:
                    72:47:fb:29:01:f2:ec:8a:91:32:bd:d1:fd:e3:66:
                    ac:c1:5f:66:98:73:8f:68:e5:0b:44:30:f2:1b:56:
                    cd:b1:b6:93:17:c4:ac:7d:13:12:df:94:86:2a:97:
                    77:5e:72:3e:e2:fa:60:ff:bc:20:9c:bf:3c:31:3a:
                    0a:db:2e:ae:1a:52:b9:c4:db:dc:8c:6d:ba:17:54:
                    c1:a1:e7:2b:9b:2f:4e:e0:fb:a0:a5:9d:e7:1f:bf:
                    7d:36:fe:57:aa:7e:3b:8b:48:6d:88:8b:9a:6b:b6:
                    74:71:01:77:a2:fb:be:d7:b7:9c:d5:36:90:6e:4f:
                    5e:d9:2c:ae:14:a4:cc:63:df:6e:6b:c0:e3:df:1a:
                    ff:f7:19:56:67:72:2b:8c:05:29:19:3d:7d:33:b2:
                    3c:0a:be:76:8e:71:47:02:15:06:f7:20:04:5a:86:
                    94:e6:ad:6f:61:7f:de:d8:10:ac:19:58:2c:11:75:
                    74:a7:4b:64:fd:8a:37:70:22:7d:5f:be:c7:63:25:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BE:89:48:90:11:EE:3E:5D:1B:1F:1D:C2:2B:EB:08:E9:50:B0:FE
            X509v3 Authority Key Identifier:
                keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:33:84:f7:42:67:60:a6:ab:20:2c:e0:7b:b8:59:d6:3d:
         c4:01:1b:13:64:bf:70:a2:6c:ee:ad:50:7f:66:4d:56:41:84:
         e1:ee:3f:1d:df:75:7c:46:7c:f8:fc:97:bf:8d:35:4e:88:e3:
         ad:d4:a2:51:6a:ce:fd:06:83:d8:53:eb:63:6f:86:e9:78:f3:
         85:db:36:57:9f:7d:6c:f5:70:ff:3f:1d:2f:e8:d3:2f:ca:4a:
         65:b5:2d:77:4a:24:42:41:e8:d9:a5:f2:8c:4e:65:b3:8f:d4:
         95:7d:50:3f:79:c8:e0:ad:c3:b4:0c:21:48:9f:88:4f:83:71:
         ff:ee:d6:bc:2d:28:05:d3:34:3c:3f:26:c1:06:0a:aa:9c:b9:
         01:03:8e:5d:0d:1e:dc:a8:40:d6:4c:36:71:83:02:6b:63:4a:
         d9:b6:dd:94:45:cb:57:a9:52:db:36:3b:79:0c:44:bf:9e:82:
         6a:7a:87:bd:47:6d:76:69:63:e8:76:97:f4:2c:f8:92:49:aa:
         ff:37:e6:fc:ec:af:0e:cb:5c:eb:c1:65:5e:32:5a:19:ad:5e:
         6c:da:54:e5:c0:61:12:66:82:70:12:ca:de:41:62:ec:41:41:
         dd:c7:bc:b3:78:8b:cb:ca:36:92:b8:57:5d:a8:23:f6:29:ae:
         1f:1f:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----