Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          tppi9txe0IPYIgAfAVdMw3Xw65JuXEHPgbCBucodDcU=
Subject key identifier:   1F:32:31:63:EC:7C:D8:64:2C:48:F2:47:EB:61:16:0F:42:3C:CF:DB
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0195E12209C4BA666484A66DBAA6E9A806B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          1558
Signing time:             Sat 29 Mar 2025 09:00:59 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:59 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:59 +0000
Files and hashes:         1: 1-L9qSgE09LkQG7Ea8EBDdDw4ino.roa (hash: L03XGEs9qhc6ohMjsbyVjgW+T6aNu0Or4uMNslNgGaI=)
                          2: 4iHcBGfl4oJ0jUkqbJpTpkjJRRA.roa (hash: 9gUiJ2PpTaXRBDYpcks5/ZTXgi/FI7Hpa6+iF/UooaM=)
                          3: 5GpN33ElR1lUI3r69WNur5XVlhs.roa (hash: Ag+FWXz8zur3U3WfkactLdqUhbzus2FhO2lgG9Wdyos=)
                          4: 72pbmlHoUDNNi9_U2U3igLv-Ejw.roa (hash: +n5e4ojLZqtJRZkCcqRft73mFkgQhj3CgkBkuxQfYWM=)
                          5: ApvhjKPqS54Ym0klIaNKAJ8kwfA.roa (hash: G7CMBZzYEWEowN0oeXl4yB4eRy4GZVwzz9Vsjln2SbY=)
                          6: Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa (hash: 1LM6MDYaE6Y/jo/PARMtexnN79ZdrRCB7ndwYT67l/g=)
                          7: D4fjlMdzoE531488p0OTA-8Nk-o.roa (hash: ZYvjH+ox9QqmVT8DocHf0I+vPA4vlzbkktR49hxKf8Q=)
                          8: LRsE8HjdoDuIOCHhNJWGn8Yh3Z4.roa (hash: x5/q1IzKRQsjqMHjgJuVRy8oArjf6h7TAw1i1N5j5cs=)
                          9: MsFmWJOoSFY3BCE49erYLm5IeF8.roa (hash: +ULhpY8+EhNOI9KNs3g5QfGlO9AZRphDDwBCNw26nt4=)
                          10: Mz8Xzjb4Em-bp16qe94uV9f2KSc.roa (hash: IgI2K3rzQ3JJ+QIwmVbORi3IMlNvAYMKIlRufn/wj8k=)
                          11: QOd_WFMEgwOyxqu-Xk2hZvgMcH8.roa (hash: uXkg5eescOxXc9nW3DCPgg8rcsXy8Kvy8S+sNh4PoXk=)
                          12: QsDL7x5oAgXjMeRoqEotR0YXQIw.roa (hash: z8q4Yda7b/Bhl+Mb3DcVE7Ved5TmFaoFf3dZxwrq/z8=)
                          13: RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa (hash: fyJVWs7abgQPirZqK6oCiRYQDMcFiF3X6qhzJ7XsPjw=)
                          14: T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa (hash: p7kOptu0n/Z95hIwZVAQ4UU0Tcx07mXU3vGZb5npLhU=)
                          15: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: B8E5aDRMY29kMR/Mp0SvXRIXMKgxPZO1T+1ZH6HSoG4=)
                          16: TLLe4Fv1ZWKn7cU4s2eOqRGhW2A.roa (hash: LIvDYJiCNzHfZb5Qat96s04TPvC5BTwrmEMarvzgqYw=)
                          17: TP20cqgrRS62gq18eb59UXXXu_4.roa (hash: R3eXtiwBlk955gzJVNGvUpi8z8C3GRcoXeIJ9oVuG1Y=)
                          18: XDf-VYAuh-nDO2CMYXVIF4SuPC8.roa (hash: cl+9twv2D+eBNV8KlvTFCcF9tVblyskg3wu09JdTgSQ=)
                          19: YvEsta7UkUfJxn1JV9JHj6QzL1k.roa (hash: cVuuCBZsVwaCNI4FHR4twQLuwRlOFeF2gBPEHlJV5sI=)
                          20: ZTeJrV44cuelAuZVlfb9KznDqF8.roa (hash: fF8x7hlp4yott2TezNaaq/nLq2M2TgyvOaX91+gXVXU=)
                          21: cDexNbgz65SAnilI4jNQbU6GDQA.roa (hash: fm8UnKsXFZ8Kv7++bvjbjI+U2EMIi8pzLEAUXfPizog=)
                          22: cbLUFQPWDFBGgeTsBo59RiL6NGo.roa (hash: 3TCJxN5y669eIRDifXi9lQDad+lKQ5Y4Rq48mm7g5Zk=)
                          23: clX0YNiQqxrLh5KRIQ1WDmi_sYg.roa (hash: lHdAtOJZ05TKI2DoNumHZCY0VkGmTIkvqW26oGZ3P+8=)
                          24: dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa (hash: QsY9itLfjJ5WmB+KPuW0ZbZL+FhYgpcBDGOifX3R4vk=)
                          25: jCiHPK3wNyuRtDEUwZHSN0KDuO4.roa (hash: Qj7y4x7BMyHXAR38SpBo01o4/+J3Z9RBCroeA9exmWw=)
                          26: l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa (hash: Kdrvt9fByjaGxTJ7co7gZehnEAPmEhpF7v2Q4ea8KVE=)
                          27: lPrZs3D91Gt-m6B9Dr3LWvP3o94.roa (hash: fhopXrhhREaGMI2tIGmpG5P4JKsz7B7bhwx1BvlGmtQ=)
                          28: rtmJ15QCyMu37KZSjTEhWQ0zmek.roa (hash: Lz0OEHkJQ5eiVEeDAp2VWfKoDiv6W8z6xoQRzfJhjuk=)
                          29: xmPrjXwgzAc4bi6Op-k92DP0zYQ.roa (hash: Yg07yPbPmPxhkY2QOReSXpIrXS2cz6DJVyYuiKyL6xk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:09:c4:ba:66:64:84:a6:6d:ba:a6:e9:a8:06:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Mar 29 09:00:59 2025 GMT
            Not After : Mar 30 09:00:59 2025 GMT
        Subject: CN=1f323163ec7cd8642c48f247eb61160f423ccfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8b:fb:e9:c1:12:c1:92:30:09:fb:34:76:97:
                    e0:ca:37:38:b7:cf:76:e5:6d:5a:4c:00:24:cb:9d:
                    af:db:7e:d3:fa:5e:a9:38:0e:57:a5:07:da:c2:a3:
                    52:6f:b4:59:7e:13:5b:15:f3:dd:2b:8c:41:a9:bc:
                    f0:ff:8f:f9:d3:12:a5:63:bc:9c:22:0d:0e:f2:e4:
                    78:ad:2a:91:52:85:20:a2:e9:6c:50:75:20:31:94:
                    c7:11:f9:28:d5:8c:1d:28:c8:1e:c3:b5:f0:3d:6e:
                    55:70:4b:ce:f7:c1:34:82:29:72:81:8a:e9:a4:2c:
                    2a:d1:ff:9f:a0:2b:25:19:44:85:18:ed:17:cb:33:
                    34:7f:95:e7:ab:2e:44:b5:94:0f:11:67:23:3e:74:
                    14:b6:da:22:4e:29:62:03:9c:77:db:6c:d0:7e:ce:
                    b8:13:8a:db:09:6b:26:2b:1c:b2:0b:2d:95:8f:49:
                    01:7e:62:44:19:86:97:08:fe:39:a1:94:f8:a7:d3:
                    84:d4:af:ff:be:f2:b9:83:fe:3d:f8:07:14:1d:47:
                    44:3e:96:ae:38:3a:47:b3:98:07:1a:2a:b9:bd:8d:
                    4d:0b:2d:b0:fe:7f:88:b3:7e:04:05:6c:0a:c6:9d:
                    d2:31:b2:f0:dc:05:81:5e:17:f8:74:6a:a7:33:92:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:31:63:EC:7C:D8:64:2C:48:F2:47:EB:61:16:0F:42:3C:CF:DB
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:1e:c6:a0:4f:8f:2c:a5:21:89:96:7f:0b:bb:5c:3b:45:
         52:e4:f8:b4:0d:40:86:ab:47:ba:fe:9a:65:03:a8:85:6f:1d:
         d3:6c:64:9f:9d:30:d0:2e:24:18:21:84:bc:4b:b6:47:8c:3b:
         47:00:60:b5:65:57:a9:a3:03:7d:0e:6f:9f:1f:97:62:31:27:
         61:48:9d:da:20:b8:aa:be:22:0b:eb:53:21:d6:c4:dc:20:7d:
         f0:04:75:02:f8:7a:cd:2f:c1:ee:61:57:45:cd:a4:cc:1c:b4:
         74:6c:6b:0b:07:53:35:bb:75:42:5f:fd:d6:32:6f:d9:99:5c:
         dc:f2:05:8c:9b:51:80:ef:68:10:6a:5d:a3:af:0f:4e:2d:2c:
         64:7e:ab:97:af:90:05:ce:3e:30:ae:41:6f:d1:44:dc:21:ef:
         a4:7d:99:68:9a:b7:0e:58:c2:7c:1e:04:61:c9:8c:8e:7d:27:
         c3:74:dc:45:ae:46:2e:36:35:3f:c0:6e:18:8f:81:87:df:4e:
         d3:f1:2f:bb:f4:86:0b:c7:2e:58:9b:9a:c2:51:46:ee:d3:77:
         0a:b8:0d:ad:83:ba:8d:4f:52:32:f6:5a:0b:fa:bc:94:17:9f:
         f2:0c:f9:db:84:90:78:5e:5a:e6:c8:be:da:cc:1f:0c:95:1c:
         16:f6:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----