Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          F3yW8rXJnwkHuveD114fw4vM1ObUcMsGxDDPMJD/8xo=
Subject key identifier:   DA:27:FB:79:32:4C:7E:0B:98:8F:DC:01:21:2C:DE:D1:28:BC:1E:7A
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       0195E12251A5C23799EA3A9A0185ACE57FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          14C8
Signing time:             Sat 29 Mar 2025 09:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:17 +0000
Files and hashes:         1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
                          2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
                          3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: 5zS+XeqvfmpuTIG7z0m8qDmHzJDIRIBAN3TjWXRa27c=)
                          4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
                          5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
                          6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
                          7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:51:a5:c2:37:99:ea:3a:9a:01:85:ac:e5:7f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Mar 29 09:01:17 2025 GMT
            Not After : Mar 30 09:01:17 2025 GMT
        Subject: CN=da27fb79324c7e0b988fdc01212cded128bc1e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:0a:66:0d:a6:10:d3:e6:3b:0a:34:68:55:
                    80:8c:de:47:2c:14:7a:be:72:80:2e:70:e9:24:e9:
                    f6:8f:66:81:09:bc:10:54:7e:4e:73:b8:30:6a:f1:
                    ac:11:51:b3:29:b8:39:90:32:59:75:4e:a6:69:79:
                    20:3c:13:19:3a:f9:c2:90:e2:5c:e2:cd:10:35:1f:
                    e9:ab:4c:59:52:75:9a:56:59:3c:9a:c8:63:0a:09:
                    27:10:69:2d:26:5b:de:9e:63:c4:af:86:95:2d:c9:
                    2a:5b:b2:61:61:e5:dc:f1:81:44:cc:f8:70:7c:f6:
                    4c:a4:2e:46:c7:40:21:df:87:c9:0d:78:b0:d3:5d:
                    c9:56:4f:34:52:80:d3:ba:70:47:ea:c4:ee:11:8d:
                    0a:14:c3:92:8e:3f:c8:31:1f:7d:7a:56:5c:be:c8:
                    69:f7:eb:c5:2d:2e:44:76:eb:88:eb:02:dc:ea:aa:
                    52:17:ff:22:92:9e:60:b6:e6:45:8d:bf:06:09:d4:
                    72:5c:d2:bc:4a:bf:83:99:7d:9d:6a:d4:36:28:0c:
                    a3:5b:9f:d3:67:84:c2:ac:2b:46:37:76:7b:77:e6:
                    19:59:cc:1f:3b:a1:d9:fa:43:dd:c1:7b:e4:58:50:
                    94:09:45:66:8b:d5:d9:b7:bb:a2:19:b4:c3:cc:7f:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:FB:79:32:4C:7E:0B:98:8F:DC:01:21:2C:DE:D1:28:BC:1E:7A
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:9b:ab:17:fe:ba:c6:f9:0f:6b:0a:11:c7:d2:dc:ff:c6:
         1a:08:a7:4f:45:92:49:cd:86:d4:5d:01:a3:23:34:d6:43:63:
         b2:2d:40:58:12:dd:29:96:7f:75:98:d1:bc:2a:92:77:e0:69:
         5c:35:b3:5e:b9:ca:7c:5a:d6:54:8e:95:74:42:b1:bc:a5:cc:
         fc:bf:2c:79:7c:c6:eb:1f:c5:1d:c8:a3:79:ee:37:f2:7f:be:
         c7:ba:b1:78:99:16:36:f6:80:c2:8c:08:5e:77:a5:1d:34:36:
         28:a7:3b:8d:bf:59:a6:b1:2f:62:7a:38:02:db:b3:f2:65:d3:
         fe:e1:14:8a:ea:ec:8d:cf:00:89:f2:c0:71:df:8e:b0:a6:5b:
         9e:24:aa:7b:9d:7f:bb:df:31:29:b9:64:d3:91:96:35:2b:78:
         ff:c2:fb:7f:1a:cb:36:c6:ba:f2:e9:40:9f:15:36:58:15:b3:
         a2:7e:1f:1c:f9:fe:43:b6:ca:4c:11:8f:24:55:98:82:16:71:
         eb:09:25:a1:c6:09:53:c6:fd:3e:51:6b:20:02:5e:61:80:2d:
         7a:16:88:64:85:c6:77:f0:df:a5:f4:ad:6b:aa:ee:62:9a:b2:
         fa:0e:cd:df:07:21:b1:55:41:f1:39:70:7c:bf:95:84:e5:51:
         3a:ed:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----