Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File:                     GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier:          zITlAFCf2CpJP/cHsXUJQ9q0g5zT11tcg/ekzTqofms=
Subject key identifier:   BA:21:38:F0:97:35:C6:03:F2:E5:55:CB:E6:35:31:D2:82:97:99:22
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer:       /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial:       0195DFD8843D8803E77BC684CEECE83E092E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number:          0444
Signing time:             Sat 29 Mar 2025 03:01:03 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:03 +0000
Files and hashes:         1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: 9dYGBqEtiOsOdhVtIKeA0P1qkYPEFWfGNN07d85IrOE=)
                          2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=)
                          3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=)
                          4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:84:3d:88:03:e7:7b:c6:84:ce:ec:e8:3e:09:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
        Validity
            Not Before: Mar 29 03:01:03 2025 GMT
            Not After : Mar 30 03:01:03 2025 GMT
        Subject: CN=ba2138f09735c603f2e555cbe63531d282979922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:81:e4:59:5d:7d:f3:5d:6b:95:17:9f:05:
                    ee:06:08:15:7e:d9:f6:03:5c:f4:ea:11:20:62:44:
                    29:2c:0a:89:de:7b:d6:1d:9a:89:a6:c3:67:8c:8a:
                    0f:e0:1c:26:eb:58:4d:f4:3a:57:47:2d:98:b0:9b:
                    2b:5b:66:42:48:65:85:0d:2b:cb:45:0b:8f:3a:7c:
                    cf:e8:e8:7d:a2:b4:b0:10:b4:70:48:d8:c4:a7:18:
                    18:66:3f:5b:9d:05:25:8c:cb:a6:f2:f7:6a:64:fd:
                    48:da:f7:cd:ed:6c:16:41:03:f4:6d:f1:f2:f8:3e:
                    a8:3e:69:83:89:11:14:11:fe:2a:36:13:99:00:6b:
                    26:f2:bc:45:a9:e4:d0:e1:7a:cd:16:27:ae:64:f5:
                    ed:50:28:36:b1:ee:3b:9a:3c:0f:d2:c5:63:7c:b2:
                    60:fa:bb:47:f5:6e:06:98:58:d2:56:42:a9:27:19:
                    15:a2:c7:6c:4b:d1:a2:09:bb:f0:3f:cd:df:5b:25:
                    23:4d:3d:62:13:95:d0:d9:5c:ee:6a:6f:af:b9:31:
                    e0:8c:a6:0b:d1:86:3e:4b:54:3c:0e:39:ac:5d:88:
                    47:9d:2e:92:05:40:24:34:4b:0f:b9:da:d1:e0:43:
                    7f:73:eb:0e:fc:72:24:a4:79:91:03:97:87:e8:56:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:38:F0:97:35:C6:03:F2:E5:55:CB:E6:35:31:D2:82:97:99:22
            X509v3 Authority Key Identifier:
                keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:c2:ba:ac:59:68:f9:8d:b9:2f:55:c4:00:b6:6b:4e:d2:
         70:a1:53:f5:e5:97:fc:4a:59:5a:41:c1:fc:e5:6d:7e:64:99:
         1f:90:64:9d:ff:8a:a3:a0:b5:e8:6b:2a:b6:d8:9d:b8:86:6e:
         a1:11:6b:03:89:4a:45:95:2c:e5:ca:99:fc:16:aa:9a:04:c6:
         1a:26:ce:e8:1b:4e:f9:84:6e:f5:de:0a:b7:a1:9f:6b:22:90:
         ac:91:c5:c7:95:e4:c3:c5:32:3a:3b:4e:1a:5f:74:b3:fc:32:
         69:64:dd:82:dd:b0:20:85:03:ff:c1:4b:45:10:95:6b:23:6b:
         b8:40:98:28:0d:a3:3d:ac:9e:bf:bb:f9:f2:3b:01:c0:55:17:
         b7:d0:36:5f:39:b1:a1:b3:ff:b6:fc:84:0c:5e:30:5d:0c:83:
         4a:97:34:0b:57:8c:95:87:19:93:e1:34:40:b5:22:a0:f3:03:
         18:8e:27:0b:0d:b3:eb:b2:80:cf:51:99:9e:6d:7d:ef:6e:ee:
         fd:90:8c:36:c7:58:78:f9:bd:1a:70:83:08:21:06:32:bd:cb:
         99:fa:f9:17:10:d4:89:98:86:19:0c:ee:28:7d:99:0c:97:b4:
         c5:56:c8:59:1d:40:ab:52:66:5f:0c:6a:3c:38:bc:be:e8:83:
         05:6f:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----