Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File:                     x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier:          4LXc5q18DipChkj9G/IUEcgJ7SUDngRSWS2W3x4R3R4=
Subject key identifier:   1A:08:95:52:66:8E:72:20:7D:84:1D:DD:8D:EE:F5:DA:90:88:BE:2B
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       0195E18FFE66AE4AF54E34877B065B7C90BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number:          0EB2
Signing time:             Sat 29 Mar 2025 11:01:05 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:05 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:05 +0000
Files and hashes:         1: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
                          2: ER1ViB51eK3GNYidlFyIU5pz7pA.roa (hash: LuGe00nbcrMZ8l+kp9f/ed4A210HJbkXpcki+PgU3DU=)
                          3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
                          4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
                          5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
                          6: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
                          7: q2LaCm30bgdcmQ_KQ1x35ingWH8.roa (hash: U37N/CIim8sCoTJAFcqUrio7zaI1taunVmGNkj25lQI=)
                          8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: cCmoMP4GnpKnMg620svH2PMZ+ytbSJMRAI+9dC/+C5o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:8f:fe:66:ae:4a:f5:4e:34:87:7b:06:5b:7c:90:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Mar 29 11:01:05 2025 GMT
            Not After : Mar 30 11:01:05 2025 GMT
        Subject: CN=1a089552668e72207d841ddd8deef5da9088be2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:3a:c2:1b:4a:c7:91:82:bb:8c:aa:4d:ea:
                    32:ec:f7:90:dc:a5:0d:08:29:c0:7a:d8:de:f6:66:
                    e2:31:12:3f:94:02:4f:44:18:c6:0d:e7:bf:8a:6c:
                    7d:2b:2e:0d:ba:d5:a5:d5:ee:e0:11:4c:22:dc:5e:
                    ad:e2:a5:52:c6:50:dc:73:25:cc:e3:2a:cd:3d:e9:
                    e9:4c:41:8f:20:98:82:e3:53:c2:b6:b9:d2:90:26:
                    96:20:7d:90:b8:4b:0e:71:40:9f:d7:f3:4a:37:5d:
                    8e:e9:a1:7a:1f:2e:27:2d:fc:90:af:03:7d:5e:6c:
                    7c:b7:f8:ba:01:9d:94:72:4f:ae:ad:66:a3:6d:d5:
                    5a:83:e5:51:f4:dd:ae:5e:8e:f6:ed:a9:08:4e:ce:
                    fa:d6:be:c6:bf:28:4e:8f:7a:ab:61:61:88:97:8a:
                    af:39:91:72:6e:00:4e:3e:19:ee:a0:35:76:c4:cf:
                    08:9e:f1:6b:39:c3:b9:77:09:1c:84:b8:f5:a8:4e:
                    16:5f:e1:ca:84:aa:7f:5d:82:78:59:8b:c8:7f:ef:
                    1b:3b:2a:e7:b3:76:59:74:81:c3:1e:c0:28:1a:70:
                    32:7c:30:83:46:9f:a8:44:9d:52:5c:cd:a8:7f:7e:
                    8d:0b:70:91:0a:26:6a:b7:b4:ec:56:35:4e:f2:be:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:95:52:66:8E:72:20:7D:84:1D:DD:8D:EE:F5:DA:90:88:BE:2B
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:5f:12:e7:f8:54:8c:c8:cb:d9:72:1e:a3:47:f2:03:49:
         51:90:e6:09:14:f5:2e:90:f1:b1:b8:25:42:eb:d2:5d:a0:3a:
         13:a9:79:0c:94:65:e3:de:05:9b:04:74:10:36:96:56:16:76:
         7c:5d:f4:8d:73:33:4e:ab:80:59:6f:13:56:f8:29:22:5e:d9:
         49:98:3e:a4:29:c5:5e:c9:32:f3:ac:2e:3e:a7:37:1b:ce:69:
         fe:6e:09:d3:c3:8a:a0:8a:02:f4:18:b9:9a:d2:c0:b2:b5:09:
         d5:30:c7:dd:3b:22:86:33:10:8f:b5:2c:6f:7b:30:7e:03:ff:
         f9:c8:f6:5d:61:c3:b4:95:00:88:5c:13:dd:7f:b4:32:a4:7b:
         d5:b9:5a:e0:6b:25:22:ad:7c:da:65:e1:c2:ab:87:70:bf:40:
         dc:bb:a9:cd:56:b5:e9:6c:10:91:36:b1:0f:45:0a:5a:f2:75:
         ec:56:1b:fa:fa:1b:61:b7:ef:00:05:52:5a:0f:a4:25:7e:7f:
         df:35:92:be:9e:90:51:d4:f8:20:e3:03:d1:14:e0:f2:1a:36:
         18:82:25:32:cb:d0:58:4b:2e:68:4e:bd:1e:eb:78:65:7a:55:
         64:89:5f:77:2c:79:b0:ca:b8:eb:e4:c3:5f:d4:04:fd:ad:01:
         e7:e8:6e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----