Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File:                     sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier:          5qs0LzRoCXPE5W3SokSvGVIdj+5Nn7QKzL/BPH+KyOY=
Subject key identifier:   36:D3:F7:03:33:9F:C5:AD:0F:23:4D:27:A4:DD:56:95:E4:84:87:E4
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer:       /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial:       0195E1592F995040B3D449A3C633119E6C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number:          0DCC
Signing time:             Sat 29 Mar 2025 10:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:13 +0000
Files and hashes:         1: 349nznGmuYln7Euzs0toW3LL2Co.roa (hash: 2VcvoHu/ySd5oGJHcQApUau1Ip2UjCUmUdstoqEVP0Q=)
                          2: MhO0JIjv07z_oORlZPzio-JDr68.roa (hash: IGEtItNNMXdu/fJfMOFzDjAygiojo6AjHJXRHHSwZpo=)
                          3: cjuo7risFY0maWmiB6zw_cynUR8.roa (hash: fwEm242Ve1m7/7m7QExBWA9lRss1xiZPUH/+LoEjd/Y=)
                          4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: xqap1h9cGSCRFyqOjn8qCKizj/tbc9XHUD3uJi1D2Lg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:2f:99:50:40:b3:d4:49:a3:c6:33:11:9e:6c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
        Validity
            Not Before: Mar 29 10:01:13 2025 GMT
            Not After : Mar 30 10:01:13 2025 GMT
        Subject: CN=36d3f703339fc5ad0f234d27a4dd5695e48487e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:16:e1:7f:f9:d5:78:98:fb:61:e5:5e:b5:
                    64:80:ad:63:0a:67:bf:5a:e3:96:b1:96:3a:7a:97:
                    01:85:94:19:f7:7e:7b:62:9a:b1:3b:1f:f7:95:46:
                    95:d5:da:26:bd:f1:77:cf:f1:83:58:30:46:b0:3d:
                    ba:d3:df:bc:d3:68:b3:eb:dd:be:c9:d9:5d:57:6b:
                    43:d8:bd:c4:51:88:68:c5:35:d8:ca:42:96:c1:b5:
                    f5:6b:0a:b0:1a:6f:24:32:80:90:cc:cf:31:1e:59:
                    4b:bf:6d:b2:b7:0c:37:cf:02:1d:20:ba:e3:4e:9e:
                    f8:9b:95:c5:92:2b:c1:b3:6c:88:69:73:72:ad:2b:
                    27:27:9a:93:93:43:53:e6:3f:0f:0a:11:68:9b:39:
                    a2:8b:f9:5e:5e:08:af:14:46:47:ba:e1:4f:98:67:
                    c1:19:b4:f7:82:fa:ef:c3:17:7f:cb:af:50:03:f9:
                    95:2f:c3:ad:1a:e1:51:65:7e:e5:bd:99:a7:c7:e2:
                    f0:36:98:d4:5b:f8:59:3a:ba:c4:ab:ee:44:b7:bf:
                    90:7c:c5:d2:60:47:5a:65:f7:84:41:4d:88:fa:0f:
                    6a:ab:1d:a1:a1:60:01:49:9d:89:8e:44:01:b6:f0:
                    9b:ca:6c:88:10:0d:a8:01:2b:cc:b0:c2:68:8e:2b:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D3:F7:03:33:9F:C5:AD:0F:23:4D:27:A4:DD:56:95:E4:84:87:E4
            X509v3 Authority Key Identifier:
                keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:07:cc:50:0b:37:fd:c0:36:6b:74:b4:50:8b:4e:00:af:27:
         ec:cf:b8:73:66:73:be:9b:39:fe:32:63:8f:8c:e5:a0:f5:23:
         d6:e8:c9:97:11:00:32:1a:97:80:77:a0:b0:b2:f4:ec:e9:78:
         96:87:5a:68:b2:6d:fe:1c:1f:69:3a:fa:9c:9f:91:39:d7:54:
         23:88:db:e5:fa:db:41:b5:b8:21:31:18:e9:9a:e1:a5:ee:1c:
         e0:a2:8c:0c:b4:80:b2:80:2d:16:98:9e:fe:8e:bc:22:f2:ad:
         80:57:23:c6:99:fa:45:8b:9d:cb:4c:35:40:8f:d7:12:72:d9:
         0c:cf:c6:c4:1e:4a:26:de:cb:15:af:ba:71:8f:e0:a0:da:c1:
         05:d2:b2:7e:34:da:da:2c:fc:8c:fe:41:c1:74:8a:74:7e:3e:
         50:19:62:05:55:d4:71:5f:36:0c:74:14:8a:7f:4f:ae:62:fd:
         92:3b:e2:b0:5c:4e:91:de:fa:6e:dc:44:f5:9f:ea:2b:aa:73:
         1c:02:fb:a3:c7:78:86:09:70:52:15:ed:4b:fc:eb:1c:9d:81:
         bc:ac:17:95:34:1e:1c:dd:9c:1d:18:04:a6:4b:b3:11:ea:3b:
         1b:7b:1f:2b:04:5a:dc:c0:52:ff:20:66:d4:5b:1f:ad:5b:f2:
         32:5c:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----