Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          tDHDUAzOVLLrFMnQS9bQzI47aBtnnHzvHOMWSX+ucac=
Subject key identifier:   24:AD:FD:6F:DB:24:67:93:3C:41:82:D8:19:60:97:65:3F:C2:0E:F0
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       0195E07D97E5F9FFC16019DEDA3C17E515F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          14E2
Signing time:             Sat 29 Mar 2025 06:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:22 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:22 +0000
Files and hashes:         1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: qQTVROTeeiN20ngYUNB1cWiISmKhw02dNcAuputHeTk=)
                          2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=)
                          3: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=)
                          4: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=)
                          5: YxnLmhiEAoRIPwqx7D5pI2tVg0E.roa (hash: Z5VZl3NN5nIeNmBSmYIBYR811mPwFTzRI+uDPXf+8B0=)
                          6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=)
                          7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=)
                          8: myrzpFPZKEFrMiKvWzGEDQDrl_I.roa (hash: J9rVlZg9Lutrp3UmbnqdopvJazmPd6IwXd6xHibeysc=)
                          9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=)
                          10: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=)
                          11: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:97:e5:f9:ff:c1:60:19:de:da:3c:17:e5:15:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Mar 29 06:01:22 2025 GMT
            Not After : Mar 30 06:01:22 2025 GMT
        Subject: CN=24adfd6fdb2467933c4182d8196097653fc20ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:36:2d:0a:9c:c7:81:44:51:c7:8c:f0:36:
                    80:ba:5e:48:e7:dd:b8:7c:b0:a1:e7:36:42:be:16:
                    64:9d:3f:3a:0d:38:2c:32:2b:47:b2:46:04:79:63:
                    22:71:ee:51:ee:b0:83:9f:1d:b4:a4:4c:72:c3:ec:
                    6d:c9:63:5a:d6:2b:3c:0d:0e:d6:b9:da:38:c7:c8:
                    b7:44:09:85:60:22:f4:f1:95:7e:71:b2:6b:a5:72:
                    f6:24:a2:51:ca:3d:e7:e6:4b:23:cc:62:21:ff:c7:
                    9d:ca:df:a7:41:aa:dc:9e:59:d2:e6:24:35:88:7c:
                    49:44:59:1b:70:ae:e4:f4:d3:fa:51:cc:05:f1:60:
                    81:f0:3c:26:7c:dd:02:df:8c:f7:cc:cd:12:af:0b:
                    ec:62:88:26:92:d4:88:c5:66:2b:0d:a8:94:57:6c:
                    58:58:a0:c1:54:2e:0f:4b:7b:41:58:8e:20:6a:95:
                    31:3c:70:7e:52:94:34:88:5c:03:a6:a3:3d:bb:58:
                    22:a5:03:f1:a8:89:f4:c5:80:86:1a:d4:2d:6b:c6:
                    28:44:a6:a2:1c:81:90:fe:d7:f6:9e:ec:43:34:ef:
                    46:ba:50:72:6a:4e:ba:67:87:de:14:73:2a:7d:32:
                    b3:75:56:56:8f:f2:86:2d:54:7c:0e:43:fa:c0:2f:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AD:FD:6F:DB:24:67:93:3C:41:82:D8:19:60:97:65:3F:C2:0E:F0
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4d:f3:ab:d6:32:a6:07:9d:75:a0:cc:f2:3d:33:5a:6b:23:
         2a:a0:27:2f:88:b7:9b:16:e4:3b:c9:20:17:38:f9:84:b8:ce:
         5b:84:26:8d:f1:27:67:56:3b:29:dc:a6:c5:f4:96:2a:9e:a4:
         06:b2:ca:58:2e:01:9e:30:8f:19:df:9b:55:de:b5:9b:53:7d:
         d9:31:22:59:03:71:bc:a9:79:b5:3c:d3:74:34:86:6b:f0:08:
         4b:e9:ba:b7:6d:58:da:4b:48:e8:7f:a2:ad:97:9e:c1:22:c2:
         00:e4:1a:bd:fd:7b:02:43:f7:a6:98:b2:20:89:06:a0:f9:1c:
         4a:69:18:8a:8e:e3:70:0d:25:8a:13:67:b8:03:1f:c8:cc:63:
         3a:88:c1:d5:2f:27:b6:8e:ab:89:96:b3:9f:6c:1c:25:61:16:
         b5:e2:31:92:fd:7d:e1:ab:f7:76:55:5f:bc:b4:b2:cd:62:fa:
         a4:1e:47:6e:4d:6e:21:35:9f:f7:a9:b7:06:33:11:4c:19:41:
         de:a7:fc:b0:ff:56:fb:45:65:95:d2:68:43:a4:aa:31:c6:70:
         21:e1:5e:ce:ec:4a:0b:0d:ac:65:af:0c:11:f4:f4:c3:bb:e3:
         7c:4d:8e:9f:e8:97:04:ea:e8:b0:8c:b5:2b:ea:fe:8c:89:72:
         77:ab:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----