Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
File:                     nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft (raw, json)
Hash identifier:          qiHABEXIKED/blv7DwnxIZl67WAMzmzvxY0VMdyHYHE=
Subject key identifier:   0B:03:6E:C0:A3:B0:76:C2:DE:BE:78:52:73:F0:25:8F:ED:F5:AC:97
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Certificate issuer:       /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial:       0195E19043C1593790E990C5122886912AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
Manifest number:          02DA
Signing time:             Sat 29 Mar 2025 11:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:22 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:22 +0000
Files and hashes:         1: OVY04NJtWOb1QjATK5euWrh4CQ8.roa (hash: j/MgyRylmuUoLQy6OKDt9MIYFnZ2DVJgTnTK/6Q7Hwk=)
                          2: XGP4BVjR9mKecY9_Y5PB3S55Op8.roa (hash: LBuVoXcYp6eMyvTKDWsBH0kGww7zomqnau8IZ80K36I=)
                          3: eHfcFIuh7a0rJe6KKja_O8myTZY.roa (hash: GXSPQsoUru8NRUfB62M8YLlBncATWqQP9KOtIR+XCk8=)
                          4: lgOapuL_7EbGPh0vvxP468rGEbg.roa (hash: lE3QsF1vh14GOUfJI4gTv7cwcmoRbKzoN9tDRBFhj40=)
                          5: nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl (hash: nGwaycec7/yJi48vjnfjdWEQWQdHGRiTcLMigi/49Ak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:43:c1:59:37:90:e9:90:c5:12:28:86:91:2a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
        Validity
            Not Before: Mar 29 11:01:22 2025 GMT
            Not After : Mar 30 11:01:22 2025 GMT
        Subject: CN=0b036ec0a3b076c2debe785273f0258fedf5ac97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:f9:53:8d:b2:bc:d2:f8:94:e9:d9:d6:9f:
                    cb:cc:d8:c8:5c:db:72:ac:33:34:d2:2e:8e:f5:22:
                    5e:15:54:9c:ee:f3:2e:91:74:07:20:5c:24:29:c2:
                    c5:a9:19:95:cc:08:34:e8:62:39:ad:4a:83:34:20:
                    94:02:6d:0f:d0:91:1e:d3:a2:51:92:f7:80:cd:dd:
                    2b:3d:f1:3d:58:37:96:e9:1f:5c:99:09:5f:6d:f9:
                    ea:15:c6:99:a9:88:da:dd:51:3a:26:4b:a8:e6:fe:
                    6e:13:31:1f:5e:fc:1f:7b:fe:7d:17:b7:7f:d8:a3:
                    d5:3c:2e:ea:02:2d:d2:43:69:73:77:aa:19:0c:00:
                    4b:9f:a0:c1:fa:8b:f5:92:f5:f0:70:16:d6:33:ce:
                    89:67:48:fa:38:88:23:a9:e5:50:28:52:e3:5f:ce:
                    51:f2:38:f3:c3:b2:95:30:bf:1f:8b:07:35:51:56:
                    cb:36:08:d2:2a:c5:6f:b6:b3:63:36:67:c5:ee:9c:
                    94:be:e2:85:ea:c5:48:96:59:93:f6:bf:63:d8:4d:
                    22:6c:87:6a:a5:28:10:b9:75:a8:71:d6:53:0b:03:
                    45:fc:58:bd:3a:10:2b:8d:5d:e8:61:a9:ed:c5:8c:
                    21:d0:19:02:ac:b3:87:cb:44:29:23:df:c8:f1:fe:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:03:6E:C0:A3:B0:76:C2:DE:BE:78:52:73:F0:25:8F:ED:F5:AC:97
            X509v3 Authority Key Identifier:
                keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:4f:ed:65:36:63:05:0d:28:b3:70:14:5d:fb:3c:6d:5e:
         cb:40:29:cb:18:c0:7c:6e:e4:cd:48:44:3e:04:93:50:fa:91:
         b3:91:45:14:01:57:a5:0a:b4:12:7b:70:81:d6:f8:21:09:ea:
         f3:26:cc:f2:40:b1:aa:ce:a8:50:f2:d8:36:97:bd:70:4f:cf:
         b1:e9:10:c2:f1:8a:fb:ff:53:56:64:ee:5a:f3:46:30:bd:c9:
         cb:16:98:ef:10:50:e5:ce:fe:7c:5d:8a:0d:1e:6d:b5:42:7c:
         38:0f:e8:21:1f:b2:98:8e:7d:7e:5d:7f:6e:8b:f6:4b:fa:9d:
         73:1b:45:24:75:27:ab:90:4f:c1:3c:e6:4d:bf:6e:0e:3d:e5:
         c9:5a:15:91:5c:d4:6f:ec:38:44:75:41:51:62:30:4b:6b:b2:
         ff:3e:af:11:b2:25:96:d2:8f:1c:0a:79:e2:3e:82:f2:5f:46:
         04:38:03:f3:25:7b:fe:3a:bf:11:1b:38:ef:47:03:c2:96:33:
         1a:99:32:48:50:f1:29:29:2d:5a:4e:f9:63:f3:82:6e:47:4a:
         1a:19:a2:b1:6d:5f:68:e3:51:4b:7f:3a:bb:d7:10:ea:ce:c6:
         69:59:99:96:c6:1e:38:44:d0:3a:1d:25:4e:c5:69:08:5a:df:
         e3:22:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----