Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
File:                     B_C6WbHHbPINxDguWihU1xQsJro.mft (raw, json)
Hash identifier:          /WxwaG8Cgs9nOTc65GT2KK1p/pWNga2RhgRvvA7E8wU=
Subject key identifier:   A4:23:41:EE:2D:A3:E0:A0:E6:50:2A:C5:D5:60:9F:AE:4C:D0:75:28
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Certificate issuer:       /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial:       0195E046ED7C6AC8F1A97E24F20C3B418EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
Manifest number:          05A4
Signing time:             Sat 29 Mar 2025 05:01:39 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:39 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:39 +0000
Files and hashes:         1: 2YctLvghF2NTGqouDl9SU7WsK8Q.roa (hash: dDP6o/nzzzraOHQZ9zrzu942AWsku2WIoZUV4lB/aVk=)
                          2: B_C6WbHHbPINxDguWihU1xQsJro.crl (hash: S0/PufXl7Q0NEd0wPTgxPRC1xCL1+fN04yxWIyX6XgA=)
                          3: K4R2wbla95DXju27vgEj2IYahII.roa (hash: oVwWblaprncMfsgnEdqlxFveHCedyBjk+q0e8GaCPaQ=)
                          4: KDytCj01Z8HV3jbDjoNUphJ9ZqE.roa (hash: tpuGPSXore2CO2e6MYBfrJ1Vug8cc9qaaZfG9lHKTHs=)
                          5: WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa (hash: n4Yw3pq5MyOekrSTwdjLFgxLpUsIwy8D4jmXIUXMJcM=)
                          6: x5j9bCfCB-TRkwdEgD-n9hTBKuI.roa (hash: KGBK15KR60NfaIfx8RVCxr6b9iRlBdChSYDsXNFVIqg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:ed:7c:6a:c8:f1:a9:7e:24:f2:0c:3b:41:8e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
        Validity
            Not Before: Mar 29 05:01:39 2025 GMT
            Not After : Mar 30 05:01:39 2025 GMT
        Subject: CN=a42341ee2da3e0a0e6502ac5d5609fae4cd07528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:f9:5f:c8:50:89:74:d6:84:2c:4d:ac:6b:
                    20:d5:e9:b7:ac:37:27:cb:dd:9d:4d:9a:56:61:72:
                    92:d9:33:f5:2e:fe:16:34:a7:81:74:e1:de:86:98:
                    d9:9f:2e:f7:47:21:c8:96:7b:7d:e2:71:e9:d5:c4:
                    87:d6:85:da:6a:90:49:dd:09:93:26:57:a5:f3:df:
                    b3:94:f7:9b:66:ee:7a:75:cd:e0:f8:40:42:02:e9:
                    95:e4:6c:09:98:39:0f:c0:2f:b7:ed:43:c5:94:8d:
                    a1:bc:5d:54:e8:8d:08:97:97:b1:50:1f:2c:d1:c6:
                    53:49:f6:50:1c:fd:93:be:6d:9a:c9:ce:82:70:43:
                    2a:fe:03:ff:39:34:9c:79:dd:26:73:04:ba:cc:b3:
                    82:be:cc:bd:e9:d8:8f:47:53:f4:6c:30:ed:f7:04:
                    8c:9a:74:6e:27:46:42:03:c2:bf:eb:1a:21:20:f0:
                    72:62:14:ff:4e:3e:5e:76:ae:32:91:5d:70:70:05:
                    6b:c6:d4:25:3a:d2:32:4a:38:05:3c:dd:b6:b1:7b:
                    fd:13:70:0c:cc:30:78:1b:46:17:06:af:9b:12:e2:
                    83:84:ba:5c:a1:42:a4:99:6f:fc:d9:c1:19:fd:b6:
                    4c:0a:93:48:0d:f4:1c:49:3a:59:53:81:9f:3a:a9:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:23:41:EE:2D:A3:E0:A0:E6:50:2A:C5:D5:60:9F:AE:4C:D0:75:28
            X509v3 Authority Key Identifier:
                keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:d7:9f:ae:56:be:99:b0:7a:e9:6d:d1:bd:58:30:f0:bc:
         cc:c5:6d:0d:6f:6d:6f:98:af:ca:45:d6:36:24:b0:cd:c1:34:
         0e:ea:37:e6:e1:55:77:b1:6c:9d:4b:05:ef:70:ba:04:45:87:
         34:60:6e:ea:dd:44:47:2a:22:fb:05:9a:c7:d7:bb:0e:57:e7:
         e6:c1:4e:63:49:b8:ff:20:c8:a3:dd:d8:63:db:24:fb:0e:e8:
         5b:98:55:57:9b:98:b8:c5:f6:3e:99:28:ea:c9:b9:1c:81:2e:
         f6:73:da:bc:ec:fe:68:03:8f:36:2a:75:43:2a:3c:82:cf:45:
         f5:e8:39:19:6a:bf:e2:8e:cb:6d:45:21:1f:d7:d2:8a:55:03:
         ea:9b:81:64:ff:f4:f4:07:c5:9c:40:1d:53:6f:5a:f7:ab:e0:
         e0:c6:a7:90:c9:48:ba:c7:32:d6:43:5d:d5:bf:5a:6d:3d:00:
         70:9f:c9:5f:f6:5f:11:9e:01:53:8b:e9:a8:f5:46:1f:85:43:
         b7:bc:bd:b2:09:54:1f:47:1a:83:f5:3c:59:26:ca:3d:86:1c:
         c7:e5:11:38:11:be:91:7c:18:01:a9:ba:8d:94:43:4a:5c:52:
         a7:50:c2:89:ae:36:8d:94:a8:07:84:5c:a1:02:fa:bd:07:58:
         74:ef:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----