Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          Ifn5Gb0y84nxYRi8WK5W2VDxLyTw0gvUXLNZ+Eg9I44=
Subject key identifier:   C3:B6:7A:D8:F4:B8:2D:3F:42:11:91:86:B2:78:AF:C6:F0:95:61:56
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       0195E190794C9B6FE9EA4D850A79EC74AEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          14C8
Signing time:             Sat 29 Mar 2025 11:01:36 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:36 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:36 +0000
Files and hashes:         1: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (hash: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=)
                          2: Ja52sUHZmNxWRgmcFqK35S3gf4U.roa (hash: gzJdIYNLI5m1VhTa8D7lky18Y5IJWwZN4llDEnmcK1o=)
                          3: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: mXQZOviLj1sQa4NXP0GJKcLUkhAzkqi9aD4Vy6xvAB0=)
                          4: pvgIN6QNHNBs60IvrUFIahwkpN8.roa (hash: SRb6cmNEXQNaL5JeiDfLUBlTpbbbs7eTPPHe0FchMao=)
                          5: qVkX5RlHS3sPyQOw3galYp3H46c.roa (hash: o5KCCl+KevQFiSBwzLjv5f5HLVAkS9bSZz+fAqp6nWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:79:4c:9b:6f:e9:ea:4d:85:0a:79:ec:74:ae:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Mar 29 11:01:36 2025 GMT
            Not After : Mar 30 11:01:36 2025 GMT
        Subject: CN=c3b67ad8f4b82d3f42119186b278afc6f0956156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:65:b6:cc:14:1a:67:09:36:e2:9c:5e:cb:22:
                    0b:dd:4a:01:df:18:d7:ab:35:35:e9:49:4c:6c:e0:
                    d1:19:3b:cb:ee:c4:cc:99:cf:00:40:87:92:ca:d5:
                    0a:ef:05:e7:fa:ee:4b:17:85:95:19:c4:fa:33:5d:
                    df:3f:cd:78:b6:d6:74:74:ba:07:51:aa:e2:3c:55:
                    03:0c:fe:1f:d8:52:4f:dd:56:4a:01:79:64:1d:6f:
                    94:ab:9e:08:44:81:19:5b:5a:0a:57:cd:ab:1a:7e:
                    9e:fe:40:d8:7a:c7:a6:3e:af:d4:bc:f8:b0:a9:37:
                    d5:6a:8c:b2:66:5f:71:c4:7e:19:8a:d4:1d:f5:65:
                    fa:a5:69:05:b6:09:e0:60:e4:de:10:20:57:eb:3b:
                    56:82:27:83:1e:26:2f:32:60:40:bd:6c:12:d0:88:
                    71:55:64:c4:9f:c0:a0:80:38:83:44:5a:6b:35:16:
                    38:80:ac:11:15:75:9d:56:82:81:db:03:13:8b:0a:
                    7f:4d:b0:e3:ba:9d:91:67:45:d9:58:d4:d5:25:f2:
                    35:86:51:0f:37:95:ab:97:bf:ef:91:7c:51:68:d3:
                    d0:a9:cc:e4:48:18:fd:44:a9:d1:e0:82:48:98:95:
                    d3:4b:a8:17:68:83:48:92:1e:2c:27:75:d8:79:10:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B6:7A:D8:F4:B8:2D:3F:42:11:91:86:B2:78:AF:C6:F0:95:61:56
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:8b:cc:ee:8d:c6:e3:df:9e:aa:46:4f:a2:6b:c5:f3:71:
         9d:5b:d6:b0:e2:ab:85:08:da:ad:cb:0b:4e:8e:0c:11:ed:b4:
         e3:2d:48:12:18:5a:ee:b5:8c:b5:b7:db:58:0e:02:57:10:42:
         c9:f5:3c:db:f9:da:ab:70:96:0e:be:1e:1b:67:b2:c6:15:9b:
         41:09:0a:2f:7e:85:ad:7d:61:23:da:4a:e9:30:c4:d6:b2:ae:
         f9:5f:2c:9c:ff:f8:60:ec:d0:0b:e8:5f:17:b7:91:38:0a:d5:
         e1:8e:56:e3:8d:dd:89:70:ca:dd:e6:9d:ef:c2:18:df:1f:9b:
         40:0c:2f:93:73:fc:54:c0:60:3d:63:da:71:69:28:75:b8:f0:
         57:c1:7f:62:0a:e7:63:a5:53:4c:0c:0d:6e:e6:cf:47:ee:a9:
         82:49:42:6e:25:f1:81:da:f9:e4:9c:9f:0b:90:20:36:5c:43:
         de:73:70:f7:8a:3c:cf:04:e2:22:53:55:e3:dc:53:58:9e:95:
         2f:36:82:4f:d0:23:00:a6:96:6c:a6:2e:82:62:1c:3c:57:e4:
         4d:37:65:c1:4d:42:da:fe:a2:cd:b5:59:bf:0d:a8:b2:d1:96:
         96:a1:27:04:b9:86:63:83:a8:0d:5a:35:5b:c6:a4:61:80:fb:
         c2:68:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----