Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          xaGAN9UCqDtvXeb5vSKmTedlAIhsVFzr2kMUmJNaafA=
Subject key identifier:   43:8E:CC:36:C5:88:3F:58:B9:84:61:48:48:C8:0B:B9:44:DD:2B:96
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       0195E07D8DCDF1579950105A0B4E30E49E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 06:01:19 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:19 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:19 +0000
Files and hashes:         1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
                          2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
                          3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: CD+g95IbBfFT7CJuCKv3OonsXtozx7+bnH56THkXuQw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:8d:cd:f1:57:99:50:10:5a:0b:4e:30:e4:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Mar 29 06:01:19 2025 GMT
            Not After : Mar 30 06:01:19 2025 GMT
        Subject: CN=438ecc36c5883f58b984614848c80bb944dd2b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:5f:b0:e4:f3:09:3c:be:31:37:d4:58:1e:
                    81:c8:b7:b6:b9:6a:e0:66:4a:92:74:31:9c:52:33:
                    fd:e0:a4:8a:44:ec:19:49:9c:cc:6a:59:9d:30:1a:
                    35:58:37:a0:c9:64:2c:12:b6:07:ae:60:b2:bf:2d:
                    af:5e:9c:ff:23:3d:de:2f:ab:9d:94:f3:d4:07:61:
                    d7:d3:07:da:72:e8:83:b6:73:f9:50:a1:84:59:27:
                    06:4c:43:ab:3b:e8:51:f3:cf:96:75:2e:71:f5:78:
                    5a:03:60:94:b7:ba:49:06:28:d6:cc:0d:a1:a8:c0:
                    4b:b2:6d:49:f7:a1:b8:a3:1e:4a:72:41:a3:14:1e:
                    82:6b:b3:62:89:f2:25:fa:9f:b5:d0:54:da:6e:26:
                    ae:2d:e5:70:6d:9f:c4:b8:8e:cb:6e:86:09:cd:a3:
                    de:b9:de:5a:d6:25:7d:9f:ac:28:c0:cb:32:d9:61:
                    8a:01:e3:f7:dd:7f:60:a7:26:10:a6:99:16:f7:94:
                    0c:88:07:0e:c7:4c:15:f9:1d:50:2d:c4:0c:56:7b:
                    6a:2a:67:e6:e9:e8:41:c3:d0:fe:c1:d4:b8:b2:4b:
                    18:eb:cd:28:4f:d5:4d:f6:9f:09:96:aa:d2:e6:02:
                    8f:27:44:d6:8b:b6:49:1b:14:f5:65:d1:fd:65:00:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8E:CC:36:C5:88:3F:58:B9:84:61:48:48:C8:0B:B9:44:DD:2B:96
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:85:ce:b4:4c:a5:b0:ea:f7:78:ad:a2:35:3d:f9:8a:db:
         e8:1c:66:3d:da:80:00:fb:b9:c0:de:91:1d:c2:c9:9e:85:1f:
         ef:9b:d2:20:d5:20:bb:ab:3b:84:b7:38:93:70:7f:d2:81:4d:
         77:b8:0a:e8:0a:a7:bc:b5:6f:68:95:f4:6c:22:42:d6:ed:2a:
         3f:90:69:51:a5:bd:e2:89:a0:71:7f:87:6e:19:b6:59:c7:c8:
         09:83:2a:d1:cc:6d:87:e7:a4:7a:6b:ae:c6:56:40:8d:b6:9d:
         c1:88:fc:8f:60:c1:23:a7:b2:13:c3:42:49:d7:45:4c:14:5b:
         4f:11:4d:c9:9a:eb:a0:59:6c:4e:84:cf:d5:73:44:64:3f:cd:
         d7:d9:be:7d:c5:0b:5f:65:9a:1b:fd:ca:a6:fc:ff:95:4f:7d:
         6a:02:87:0a:55:ed:f0:40:39:03:19:ee:11:7b:31:2f:c3:14:
         db:97:ed:80:23:af:3b:cc:09:a0:ad:91:70:2d:1b:08:69:84:
         eb:b8:86:3d:fe:a6:fb:e7:96:d6:e0:9e:75:de:7b:a8:db:6a:
         7c:1a:a7:19:f9:9f:8c:31:07:aa:f5:56:c2:e4:40:ec:db:46:
         d5:52:cc:42:9b:e0:9c:ca:36:b7:fc:f8:b9:d4:20:e9:a4:8a:
         01:c1:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----