Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          nE+M7x5Wh/FFpfdR+9lHhmzy8uu0ji0kJPixKsoFgBg=
Subject key identifier:   37:BC:40:3C:B0:B3:D7:57:FB:75:F8:D3:E6:53:A3:DD:98:5A:03:23
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       0195E12216E82097D3CC462585452B8A9DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          11E7
Signing time:             Sat 29 Mar 2025 09:01:02 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:02 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:02 +0000
Files and hashes:         1: LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa (hash: 8CqH09siYzyZJ5O1vmsPNnnOW14dzrYfcCdsDYcxu10=)
                          2: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          3: Zrtik5m7bnw4gbxdEJLGgHXAz9o.roa (hash: ztZ7RR7wyKUwf1RAErkEUuWfC4cJblHm2hjCh/OBgRU=)
                          4: as57UZV986n6VRNtG6RRqjdPhF4.roa (hash: bAxzeajNU06FeyC+mfOJtGJLhcgc+9AxJO6pNZ7A/CI=)
                          5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: wd44LAUKmETeR5jgLPr2sTXuVRzajQ1wrnt45V8RFtE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:16:e8:20:97:d3:cc:46:25:85:45:2b:8a:9d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Mar 29 09:01:02 2025 GMT
            Not After : Mar 30 09:01:02 2025 GMT
        Subject: CN=37bc403cb0b3d757fb75f8d3e653a3dd985a0323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:5a:83:bf:e2:ce:26:70:3a:98:b0:e2:74:
                    30:71:77:3a:35:46:09:f5:44:02:23:88:7c:5e:e7:
                    0a:2e:17:f7:8f:0a:b4:db:a9:82:a0:45:2c:08:61:
                    bf:db:09:dc:d6:37:20:84:eb:d0:db:3b:71:81:82:
                    98:2a:23:74:f9:6c:c8:a4:c6:11:9c:21:e7:8e:97:
                    74:f1:e6:51:2e:c1:1e:db:6d:26:46:f7:84:17:a2:
                    ab:32:35:99:4d:c0:78:e5:9a:27:bb:58:20:ca:a5:
                    69:07:f8:e1:3b:40:0a:05:03:64:d6:f6:dd:15:91:
                    d1:93:e2:32:a6:ae:bb:6a:9b:42:2d:ba:50:dc:1b:
                    6d:3e:6f:85:a7:3f:35:83:e2:9a:89:5d:bb:73:15:
                    91:2f:6a:94:e5:bb:73:ab:41:de:84:a1:ed:e1:f3:
                    db:6e:d0:8c:49:40:6d:5b:f2:49:36:85:5b:ff:9e:
                    55:60:ba:f0:60:54:5e:77:fa:7e:87:a8:65:3f:43:
                    df:0a:f7:10:ef:97:27:ba:71:3f:6e:8e:94:87:f0:
                    4b:d4:4c:18:d4:11:1d:cc:cf:98:49:f7:84:70:31:
                    2b:d5:4f:1f:af:6e:4c:a0:12:c6:a6:b9:cc:f9:cf:
                    9a:8a:05:41:bf:8b:83:50:60:f7:3b:56:bf:8a:85:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BC:40:3C:B0:B3:D7:57:FB:75:F8:D3:E6:53:A3:DD:98:5A:03:23
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:2b:7d:07:9d:3f:cb:cb:67:86:b5:c2:21:c3:53:9b:bc:
         89:fb:95:3e:32:a4:31:55:0c:65:91:cb:ee:a9:15:5d:91:d0:
         6e:b0:5b:e5:a7:20:1c:96:6f:06:78:7a:54:5b:ee:50:62:9b:
         c2:f4:ed:8b:ba:93:35:55:5a:cf:ea:0d:a5:04:cd:18:ea:28:
         c2:86:5b:cc:6d:94:f8:f2:28:92:e0:b8:89:e6:b7:e2:63:de:
         19:71:4d:78:b1:f0:0f:f3:23:71:29:1e:e2:48:ee:43:63:f4:
         e3:6e:38:56:ee:cc:b5:47:1d:46:47:cf:75:cc:65:5b:9d:e8:
         ee:e9:77:d7:a7:19:2c:f1:f3:03:54:2d:15:6d:ae:c3:1d:51:
         3d:08:4e:68:22:4d:d9:a4:4d:59:0e:6c:70:6c:31:16:dd:d6:
         13:18:9a:53:c4:22:b5:13:0f:f6:9c:cb:5d:b0:33:50:cf:6d:
         92:47:ce:0f:ba:22:48:2e:ca:8d:10:01:04:89:46:8a:e2:5f:
         43:ac:4e:6b:1b:d9:18:e1:5d:d4:9c:b8:6e:d5:8e:d0:ed:a8:
         0f:d4:a3:cc:2c:44:d4:4f:74:12:97:27:6e:77:4e:f3:b9:89:
         a3:29:c3:61:6e:cb:a4:d3:ac:66:11:16:c1:a5:59:d5:d3:4b:
         ea:7c:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----