Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File:                     q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier:          REYQDcRXg2WNzSvLJ1/9+JA/v6YMz5+7A71nLVax5RA=
Subject key identifier:   92:F9:F6:8B:73:12:EC:3A:CB:53:1A:E6:EB:64:02:CF:65:7A:C8:88
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer:       /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial:       0195E190455ADD6D8872A8D4B189C9772473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number:          149D
Signing time:             Sat 29 Mar 2025 11:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:23 +0000
Files and hashes:         1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
                          2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
                          3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: Oe029WimIiKk6JpGY8ztzeSYwoM7ZiYjvOe5xCnGmTQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:45:5a:dd:6d:88:72:a8:d4:b1:89:c9:77:24:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
        Validity
            Not Before: Mar 29 11:01:23 2025 GMT
            Not After : Mar 30 11:01:23 2025 GMT
        Subject: CN=92f9f68b7312ec3acb531ae6eb6402cf657ac888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:0e:94:0b:88:18:0f:b5:cf:39:69:fc:66:
                    ba:b1:bc:ba:b2:08:b5:29:fc:3c:c5:26:d5:f5:b9:
                    d4:a1:28:2b:99:da:fa:cd:56:95:36:dd:47:bd:6d:
                    55:5f:df:c4:1a:2e:3f:ec:3d:0d:ae:96:95:96:9b:
                    28:3a:2b:a6:b0:37:bd:f8:79:ca:92:79:5a:b5:e9:
                    24:8a:6e:b3:28:3c:ae:c7:f7:ff:04:b0:e4:cf:42:
                    60:e9:0e:28:7f:e3:b0:64:c6:bd:af:dc:19:1f:bd:
                    26:16:7b:cb:1b:91:7c:ef:f8:02:d3:98:95:20:3a:
                    ea:3c:86:5c:ea:70:c6:6e:2a:85:5e:9d:63:90:3c:
                    e7:5f:b2:ef:69:fa:47:c8:63:d2:53:aa:04:d5:39:
                    0f:70:43:2e:10:f9:26:0e:18:09:2e:29:67:e1:fc:
                    91:9d:f9:66:10:d7:29:93:be:f5:b3:87:9b:18:0a:
                    ea:23:0f:21:ce:1d:89:fa:b4:2e:eb:79:33:4a:c8:
                    fd:ab:58:28:75:e2:04:03:08:b5:2c:aa:18:b1:de:
                    50:52:73:d1:1a:ad:3a:f2:5a:9d:ad:9c:89:52:c2:
                    dd:12:16:cf:bb:8e:68:db:e5:3b:22:0f:53:07:ea:
                    59:77:91:6e:4a:c3:f1:2f:9c:74:67:0d:37:ca:a6:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:F6:8B:73:12:EC:3A:CB:53:1A:E6:EB:64:02:CF:65:7A:C8:88
            X509v3 Authority Key Identifier:
                keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:6a:e9:ee:43:9c:31:96:e6:41:f5:d5:f1:d6:88:e6:c7:
         75:59:92:b3:c3:b3:1d:eb:4d:70:4a:d2:f5:9d:9e:33:72:6f:
         55:4b:b4:e7:88:54:45:c2:4a:3e:c1:02:fa:ad:d5:b7:38:c3:
         f8:e3:dd:a5:4b:18:4c:79:de:80:06:33:44:04:e0:1e:fd:83:
         09:9b:30:29:dd:e1:3a:e8:21:c3:5d:cc:a2:6a:7b:ca:ff:22:
         6b:f9:4d:38:65:24:57:94:f4:b6:1f:5f:53:07:62:4e:d3:75:
         f4:f1:ce:a9:12:4b:10:4b:48:74:a9:29:69:e8:e3:7a:2b:5b:
         74:29:26:30:4d:09:9d:3d:4b:1a:95:ae:17:88:ee:ad:6c:2a:
         e0:e6:51:ce:11:6c:e8:04:02:b3:8a:31:9b:61:d9:45:a6:7f:
         c5:14:9a:ce:50:b1:18:8c:f2:95:97:15:fb:1b:83:b3:92:08:
         39:78:3c:00:8c:d6:48:6e:c4:9c:44:11:78:72:6f:1f:66:0b:
         93:50:f4:4a:12:40:11:b3:5e:27:6b:cd:82:f8:b5:d4:f2:a8:
         37:75:37:cf:1f:ed:af:3e:29:26:50:27:a4:b7:4f:eb:e6:b5:
         4e:12:7a:5a:2a:d6:df:2f:a6:fa:02:f3:15:61:e7:d7:f4:4f:
         37:24:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----