Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File:                     9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier:          YKtqXxlu5mR1vx9TwFPu+4jvgSGF2dTvIpCL0QDvu8s=
Subject key identifier:   1F:CD:C0:D8:6A:F5:DB:92:57:8A:52:A5:68:79:85:D6:08:E0:E5:57
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer:       /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial:       0195E0B42F111D6F0BC9CDF443480B0BD8C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number:          14BF
Signing time:             Sat 29 Mar 2025 07:00:59 +0000
Manifest this update:     Sat 29 Mar 2025 07:00:59 +0000
Manifest next update:     Sun 30 Mar 2025 07:00:59 +0000
Files and hashes:         1: 1-qQeR-EbZDs_qM5ldnB8c124Szc.roa (hash: ofMkv+rY3TqWIfaJFchO8QPgkzQdWyH95GmuYP6Ctek=)
                          2: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (hash: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=)
                          3: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: NWM7J9UYNXefsJKWzpioDA14oeS4FAqwIPfYStVLrOA=)
                          4: S8bkAVPKOZ-Wv8bcLyLv58IY5XI.roa (hash: WjxXP1OmvNWD7wvgFTcDicv8zRYqIUNqNm/DyzGISFw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:2f:11:1d:6f:0b:c9:cd:f4:43:48:0b:0b:d8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
        Validity
            Not Before: Mar 29 07:00:59 2025 GMT
            Not After : Mar 30 07:00:59 2025 GMT
        Subject: CN=1fcdc0d86af5db92578a52a5687985d608e0e557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:dd:3f:b4:1f:c6:ad:bc:24:95:c4:74:38:
                    2c:f0:a6:0d:cc:44:de:73:4b:7f:19:7f:95:ca:14:
                    67:b1:91:02:0a:b4:9d:7e:e8:46:ff:e8:9e:e1:8b:
                    14:6a:8a:e0:89:ed:a9:94:0f:f1:6e:79:07:57:26:
                    73:03:20:6d:cb:91:e7:44:6f:ef:a3:ee:20:81:7c:
                    51:bc:bf:ca:d5:73:ea:94:0b:89:a8:41:64:2a:8c:
                    91:99:e2:8b:09:cf:5b:49:88:60:53:b8:a2:23:18:
                    af:38:00:ab:fb:8c:e5:ef:f3:be:0a:7b:68:fb:5d:
                    5f:ee:c7:36:8f:8d:ae:85:e8:8d:5e:55:17:20:6e:
                    5f:9e:25:7e:b5:de:f3:3d:c3:7e:73:de:e4:c6:35:
                    4b:c3:c1:f1:f0:4c:03:9c:30:f9:da:bf:cf:b2:99:
                    4e:95:53:a1:1c:3a:29:3c:58:af:87:19:f1:24:4e:
                    a5:a2:98:db:c9:1d:d2:ea:2f:50:9c:de:98:3c:65:
                    10:a7:14:82:af:f2:b1:d3:68:82:88:53:41:57:0a:
                    8a:e7:30:91:8a:8b:08:df:47:4a:23:a8:e6:86:31:
                    c5:69:0c:6d:b8:21:ff:69:05:fa:36:36:27:8f:8f:
                    cd:55:79:91:a9:5b:fe:b5:10:c8:ce:61:b1:30:2a:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CD:C0:D8:6A:F5:DB:92:57:8A:52:A5:68:79:85:D6:08:E0:E5:57
            X509v3 Authority Key Identifier:
                keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:09:15:b6:41:be:04:ae:af:bb:b9:bc:d8:a0:b9:7b:07:
         82:76:53:a2:64:c6:88:e4:de:3f:12:1e:13:4c:49:18:90:1b:
         36:97:67:cc:03:f8:31:c7:83:f5:98:1d:3d:e3:6f:ed:f1:a0:
         42:ea:ea:63:c6:62:35:4d:53:2a:4a:e0:19:99:1a:e3:fd:2f:
         dd:bc:cb:f1:8d:79:2b:5f:6c:61:f1:30:62:19:28:d8:f2:78:
         76:fd:f3:fa:0a:e2:af:28:46:17:41:c4:7d:47:2e:05:1e:7d:
         98:cb:55:ac:8c:1a:5a:88:b4:1b:35:d2:32:f8:1b:d2:e2:54:
         13:f9:e0:41:85:a5:d7:78:b8:40:9f:a1:0d:19:7d:bd:fe:1a:
         1e:4d:4e:a3:66:92:a0:01:5b:9a:2e:47:bf:ab:81:3c:c1:eb:
         9b:06:20:3f:b4:4b:dd:42:3b:20:10:11:fb:ef:3e:65:e0:04:
         19:03:e8:41:a0:0f:77:a7:f9:f4:a7:1f:0a:3c:a4:f2:51:e7:
         76:2d:c8:0f:91:fd:72:f3:55:7f:1d:49:2a:65:8d:09:87:fe:
         23:a3:46:31:eb:b2:14:c1:5f:bf:e4:65:8b:63:30:bc:3f:a4:
         a6:99:9b:37:4c:df:c0:01:13:7c:32:31:3e:d5:db:c7:67:36:
         5c:e6:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----