Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          ZrFwgTfUZPg8G7vHZqbPcBiiJZUXMQ9SNh3jvmbW0wM=
Subject key identifier:   A3:28:E3:D7:6C:E9:89:CF:71:85:C4:21:47:64:59:E0:B0:56:35:2C
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       0195E00F5EF23177DBF7CAE615B0BF52FF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0A5B
Signing time:             Sat 29 Mar 2025 04:00:58 +0000
Manifest this update:     Sat 29 Mar 2025 04:00:58 +0000
Manifest next update:     Sun 30 Mar 2025 04:00:58 +0000
Files and hashes:         1: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=)
                          2: fsiSKtfr1vd7jNqGvz2rWlb2WGU.roa (hash: JYUZh82zsCTaCv7uAVxiuRXoppFvfB/m/R6UI/2LG30=)
                          3: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=)
                          4: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=)
                          5: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=)
                          6: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: EVYtdpoGFuItyucSsiB9Knb5E9aTR1nWdNKBIDCpCec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:5e:f2:31:77:db:f7:ca:e6:15:b0:bf:52:ff:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Mar 29 04:00:58 2025 GMT
            Not After : Mar 30 04:00:58 2025 GMT
        Subject: CN=a328e3d76ce989cf7185c421476459e0b056352c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:fe:a4:8b:56:27:2d:51:a5:d5:91:65:c5:
                    d6:4f:d5:c0:f1:eb:4b:ba:85:28:32:fb:ad:b2:b6:
                    ca:87:d5:cc:b2:cf:89:4d:cc:0d:55:80:1c:22:3c:
                    e8:5b:02:f8:95:13:6c:29:54:19:7b:d3:7b:08:c7:
                    cb:70:f3:24:f3:8d:74:c7:8e:c6:9d:0b:a6:64:2e:
                    c1:5e:00:a6:f3:57:e6:22:67:37:10:67:1b:d8:50:
                    b8:6a:fb:f1:59:0e:4b:76:5b:92:e3:40:99:52:f0:
                    1c:89:2a:17:bd:06:6a:df:f1:56:ca:29:a7:36:9e:
                    d9:2a:a5:b4:56:57:cf:b5:c3:f6:c9:19:90:d4:da:
                    51:72:e1:c7:24:04:93:c6:d0:b5:05:1a:c4:76:c0:
                    f7:92:3b:0a:e8:da:ed:f8:04:b1:6e:59:d3:bf:96:
                    ed:20:7f:05:62:3c:72:6e:15:37:c2:ee:93:73:04:
                    9f:10:13:18:1d:f2:fa:bc:45:c4:e7:db:0f:47:c2:
                    c2:63:d7:22:d4:0b:95:79:22:cf:87:17:72:b2:5a:
                    39:56:c5:b4:a3:e9:2a:be:49:97:c9:09:b1:37:bb:
                    5e:d8:c3:c1:a2:55:93:0f:3b:f0:fa:6f:95:e0:92:
                    a5:a2:0c:7b:ef:70:21:86:20:2b:83:af:60:cb:f5:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:28:E3:D7:6C:E9:89:CF:71:85:C4:21:47:64:59:E0:B0:56:35:2C
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:14:64:dc:a4:d3:bd:f0:f6:43:82:98:c8:53:72:f1:12:52:
         1d:2d:c3:71:42:3e:ce:ca:5e:5c:8b:32:6a:c5:ea:c5:69:75:
         9e:cb:f9:30:1a:eb:59:ab:2d:09:02:be:32:fb:99:54:0f:88:
         e8:a2:8d:9f:a2:84:27:87:1d:18:5c:80:ee:4f:83:d5:ea:ed:
         43:fa:bb:7a:db:c2:bc:17:27:b3:f4:ba:38:c4:36:ee:ce:80:
         4b:49:f8:cc:ba:62:a9:4f:a5:c1:4d:f5:29:02:42:a1:3e:4c:
         b9:77:cd:ef:45:2f:2d:71:07:01:3d:5a:3c:e6:a7:08:56:84:
         34:a5:16:e4:81:d0:92:c5:7f:11:aa:60:54:aa:98:45:31:04:
         74:a5:f7:e8:58:ab:19:37:95:4a:1e:bc:12:32:0c:f1:57:6f:
         8a:3e:cc:eb:c9:80:e2:83:8f:d5:ae:b2:d3:1d:e5:ea:70:64:
         b8:31:19:83:cd:75:b5:2c:e7:85:42:f7:b0:a3:c1:30:13:f3:
         8b:39:e3:fe:9e:d0:58:d9:e4:76:66:9e:69:26:ad:79:59:d3:
         3d:f3:28:41:7a:aa:21:81:95:9e:e9:cf:45:a9:62:c1:25:6c:
         bf:3c:01:09:5c:99:57:cb:e4:65:9a:a8:52:f9:97:2a:f0:ce:
         bb:a8:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----