Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
File:                     sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json)
Hash identifier:          0A2pygdj1yUiTPOELCdlYeGlqasLLjO6RU7kLvvilAQ=
Subject key identifier:   D3:8F:A8:74:06:7B:73:24:8D:DD:23:F5:4B:13:41:E1:EA:92:77:54
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Certificate issuer:       /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial:       0195DFD99524E85107A1A115EAE70C0A713F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
Manifest number:          14D4
Signing time:             Sat 29 Mar 2025 03:02:13 +0000
Manifest this update:     Sat 29 Mar 2025 03:02:13 +0000
Manifest next update:     Sun 30 Mar 2025 03:02:13 +0000
Files and hashes:         1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=)
                          2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=)
                          3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=)
                          4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=)
                          5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=)
                          6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=)
                          7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=)
                          8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=)
                          9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=)
                          10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=)
                          11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: 5hBbPoPQpofH5t17QRf3x7XJKdCaYkx0AD0o2fFJF8E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:95:24:e8:51:07:a1:a1:15:ea:e7:0c:0a:71:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
        Validity
            Not Before: Mar 29 03:02:13 2025 GMT
            Not After : Mar 30 03:02:13 2025 GMT
        Subject: CN=d38fa874067b73248ddd23f54b1341e1ea927754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:32:f0:f5:72:5c:1d:36:45:27:59:7e:dd:
                    d2:55:6e:14:2d:e7:8d:e3:8b:cd:02:63:da:47:2c:
                    ce:85:e4:59:99:c3:a5:b7:77:46:13:9c:1d:03:75:
                    6d:ab:75:4a:29:d0:8a:92:00:2c:ac:1b:c2:fc:32:
                    9d:1f:7a:33:cd:78:30:de:5b:5c:5f:8d:12:47:b6:
                    3a:9f:47:10:63:ca:03:f0:d6:f2:77:ad:62:3e:f4:
                    16:8c:5a:df:bd:6a:19:97:19:b3:a2:f6:93:f8:3c:
                    b9:97:fc:6a:e2:fc:ca:ca:74:4d:4e:fd:77:e4:c5:
                    08:49:f6:2d:3a:16:0f:57:32:dd:c7:52:fc:af:10:
                    1c:70:67:0b:87:75:d3:ba:05:6d:64:df:87:85:47:
                    65:34:5f:a6:d3:34:4c:47:c2:08:04:98:42:46:ae:
                    11:73:0f:0e:fb:d4:7b:d3:c2:99:c9:4f:b8:7f:73:
                    9b:24:3e:4e:a0:da:56:57:c1:bb:04:27:60:08:7d:
                    e5:b8:2d:7d:b6:fc:43:99:63:2e:10:52:1b:aa:c1:
                    17:73:8e:6a:31:d3:57:e8:73:49:ca:b0:aa:f4:ec:
                    65:4e:af:8c:35:ce:4a:e3:3c:4f:6d:49:08:ad:10:
                    59:04:66:d5:21:f6:1d:09:26:31:3c:20:bc:0c:a0:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8F:A8:74:06:7B:73:24:8D:DD:23:F5:4B:13:41:E1:EA:92:77:54
            X509v3 Authority Key Identifier:
                keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ba:30:7d:3e:84:5b:72:72:13:2a:0d:10:64:85:01:7d:79:
         4c:35:0b:de:59:80:e1:a1:53:17:63:4e:23:19:b8:ea:bb:c2:
         70:41:c8:20:7d:44:5f:07:4b:1f:e3:d2:fe:87:e2:dc:1c:c3:
         4e:6e:0f:9b:55:d1:e9:68:93:d0:4e:b2:f4:86:62:57:f5:a4:
         25:7c:e1:1b:fb:ed:17:80:1f:7b:f4:18:fe:69:75:3f:8e:5e:
         34:f4:f7:a8:3c:3d:72:08:86:cb:c0:63:89:fc:da:06:98:99:
         f8:4a:37:bb:2f:f0:9f:0a:f8:dd:1a:d2:4e:76:48:c6:0d:84:
         82:67:44:16:79:d2:b5:12:e8:1a:66:59:8e:38:1e:72:7b:5c:
         31:e4:d8:92:17:d6:5b:8e:a9:d9:29:04:a1:ce:46:f2:a2:0c:
         1f:ae:83:27:e1:bd:2c:f1:59:92:44:3d:8a:e4:6a:f6:bf:0e:
         fb:c8:2d:9d:34:50:e2:d3:6d:30:bf:01:fe:3b:25:c1:9d:ec:
         ef:74:74:8e:cc:e1:c8:08:52:5f:b9:f9:9f:94:03:de:c7:ef:
         f4:66:45:9c:c1:27:5f:2f:eb:ee:d1:aa:95:05:1c:79:86:55:
         37:c2:e8:17:8a:7b:15:c1:ed:ff:29:1f:19:29:7e:1d:b7:cb:
         1a:92:fc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----