Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
File:                     h64K8oLdTpvBuCGUrtOxlpPYcpg.mft (raw, json)
Hash identifier:          WbrTHAUkVMpFIHuGeIlW8tiitamBkziui5HMaFVLn34=
Subject key identifier:   09:F2:86:63:36:F8:A1:58:94:D6:72:A9:54:DE:B6:64:53:AF:2A:C0
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Certificate issuer:       /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial:       0195E046AB9DC0851C6070694B9EF811393E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
Manifest number:          1459
Signing time:             Sat 29 Mar 2025 05:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:22 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:22 +0000
Files and hashes:         1: h64K8oLdTpvBuCGUrtOxlpPYcpg.crl (hash: T4/isMyIjCHEGDQPgSQpGjDJ8xW4BFVwYxpGs2kQhqw=)
                          2: lCgmr_XGKmVFxjrMNQZfz_gK7D4.roa (hash: mLbnmSbQ6vGnKj69SLVqu+Yh8gagKvZ4GHe9rwR2Lj0=)
                          3: lbtG49eN0a1POYPwkNLEN0HddFE.roa (hash: KWEYHURJFnJiN3hEz4GFQQGAyl2j2r/yzzHo/uu7its=)
                          4: mmjcJ5mRHHvtoWGmfCfndX-I0nE.roa (hash: XJ8W6auBJZmG59tDkBVeAttPeBBOTBWVE2NfyT5YHGc=)
                          5: wjT5KqK2qsN2ZpBkVaeAc7uLZdI.roa (hash: Fan3WbewEC2StpbKQkBe0buOZw2QS1aWcf4mNkJr634=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:ab:9d:c0:85:1c:60:70:69:4b:9e:f8:11:39:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
        Validity
            Not Before: Mar 29 05:01:22 2025 GMT
            Not After : Mar 30 05:01:22 2025 GMT
        Subject: CN=09f2866336f8a15894d672a954deb66453af2ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:d5:cc:2e:f4:1f:7f:de:03:da:9c:7c:de:
                    78:a9:e3:09:c1:a6:e0:42:84:17:16:88:55:8c:41:
                    d0:94:6d:a2:90:0c:c0:3e:08:ac:38:94:49:f7:cb:
                    9a:50:d8:42:0c:54:22:a3:e7:db:b9:45:13:11:66:
                    49:0f:bb:8c:8c:4d:e8:ba:a5:f2:9d:cf:5f:55:98:
                    1a:53:38:be:b5:35:78:b4:6f:af:9e:cf:c5:42:13:
                    5e:fb:c2:59:fc:1e:1e:0e:93:f6:48:ef:c0:59:17:
                    62:bb:c3:8c:34:7a:f5:39:a2:d9:63:9c:87:4d:0a:
                    29:43:88:69:eb:3a:b2:ed:03:81:c2:9c:11:f8:f0:
                    fc:c3:bd:21:72:62:05:fc:af:8b:25:57:1b:05:d7:
                    f4:9d:a5:6a:4e:e5:9e:2e:ff:96:22:da:d8:01:37:
                    2d:fd:c1:e5:b7:54:94:f2:26:9e:57:11:26:7f:7b:
                    e0:cb:8e:0a:d2:28:d2:09:4a:73:a2:29:d8:1e:c5:
                    8f:80:24:97:fc:ba:64:bf:57:96:4f:60:1e:ff:4d:
                    2a:ed:4a:0b:9a:f0:dc:b5:46:e6:0f:05:f8:10:88:
                    8f:d0:4b:ae:91:13:bd:6b:35:eb:bd:91:b1:46:99:
                    a2:18:8d:04:18:70:69:b2:38:3b:07:6d:8d:99:6b:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:86:63:36:F8:A1:58:94:D6:72:A9:54:DE:B6:64:53:AF:2A:C0
            X509v3 Authority Key Identifier:
                keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:12:a5:b1:0b:db:54:8b:01:e4:f7:bb:fa:09:18:20:32:14:
         15:5d:f6:26:da:fa:3b:d6:ee:82:c2:0a:5c:37:d4:26:8d:eb:
         96:27:04:fe:15:c2:07:a3:f5:ff:4b:64:bc:26:2e:5f:42:76:
         af:34:84:3a:ff:24:ed:50:f4:d7:a9:4a:bf:64:c2:cb:d7:e5:
         20:d0:01:f2:a6:9f:4e:02:47:68:1b:f5:51:b5:62:df:d3:87:
         d4:4e:81:f1:9c:fa:03:26:87:b2:bb:67:ab:83:8e:e3:d2:58:
         c3:0b:d6:53:98:b8:3d:35:7d:e0:7d:cd:82:3b:dc:b6:88:c9:
         b2:cb:9c:18:31:7d:df:a5:a7:1f:86:f8:43:82:7c:12:11:10:
         7c:9d:4b:ec:39:8e:54:a3:18:6e:4c:27:19:9a:a4:6f:40:c2:
         87:55:cb:e3:70:f6:42:ea:ec:94:d8:7f:f8:8b:63:36:f5:35:
         af:03:66:e8:0f:63:7b:65:98:60:5b:ea:ce:e4:49:76:b9:33:
         80:c6:f8:fe:3f:87:42:d6:57:d4:0f:47:a1:06:1b:1a:e4:7f:
         e8:7e:24:9b:bf:27:ca:18:92:46:80:89:32:68:13:c7:c1:53:
         45:20:b0:32:4f:70:bc:ac:4d:23:d8:da:a3:84:42:ad:50:3b:
         b4:93:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----