Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          ds/8lkaObsu7H4VvWBunBkH0eG/ClQLzBHWp4Tb4bFg=
Subject key identifier:   CD:9A:98:D0:2C:73:C5:FA:5A:84:8B:CA:3A:B1:CB:3F:80:72:51:E0
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       0195E190641EF0E1B39208F9B45FB0FD9C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 11:01:30 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:30 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:30 +0000
Files and hashes:         1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
                          2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
                          3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: A12+Z61sxAzJPQgfsCEPodAiNZPAn4SRzuRkRKD1zak=)
                          4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:64:1e:f0:e1:b3:92:08:f9:b4:5f:b0:fd:9c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: Mar 29 11:01:30 2025 GMT
            Not After : Mar 30 11:01:30 2025 GMT
        Subject: CN=cd9a98d02c73c5fa5a848bca3ab1cb3f807251e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:59:d0:c6:82:14:4c:06:32:8f:f4:8a:5b:
                    88:00:0f:b9:07:c7:c5:ba:26:fa:03:f6:2d:8e:9d:
                    dd:ed:df:4f:df:a5:88:9b:8e:7f:db:d1:ff:c2:00:
                    6b:a9:a9:18:00:d7:29:a5:da:b7:96:a3:de:ba:cd:
                    cb:57:50:b1:31:cc:e0:f6:bc:4b:8a:03:12:a2:c7:
                    ba:4c:2c:9c:ee:8e:9e:f3:21:d1:6e:e1:46:e1:c6:
                    20:8f:08:92:f2:95:fc:cb:44:b8:c4:e1:1f:f8:dc:
                    fe:a5:72:86:4a:3f:87:75:65:57:a5:db:9d:20:2f:
                    94:f5:86:e8:30:19:55:7e:e2:06:7b:93:63:b3:3b:
                    08:9d:cd:cd:e4:58:f6:5e:14:53:1d:21:95:ef:48:
                    c4:02:b4:06:0b:d9:d6:fa:4d:08:c4:f1:c9:b2:93:
                    13:a2:ac:95:09:bb:8f:98:e3:6a:4b:7f:72:2c:38:
                    6f:ad:57:00:89:85:06:3c:60:8e:5d:9e:67:f1:fd:
                    a5:e2:a7:a0:df:8a:9b:6b:cc:17:a1:c3:55:6c:69:
                    06:fa:91:55:85:a6:5f:67:f2:f9:2a:2c:2d:ab:ee:
                    7e:18:b3:b6:77:49:43:05:95:6c:e0:4b:76:e4:6a:
                    4e:50:5d:35:83:a2:0a:d8:44:de:39:b9:4b:0e:ec:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:98:D0:2C:73:C5:FA:5A:84:8B:CA:3A:B1:CB:3F:80:72:51:E0
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:f9:06:dd:ae:a4:e9:27:d0:69:02:d7:cb:15:0f:f7:a9:
         94:b7:d5:35:9f:bc:27:00:c7:9d:9f:b4:42:93:a8:20:26:d0:
         df:e5:1b:51:1c:7b:7e:b6:ca:e2:a4:4c:9b:d5:df:eb:f1:5e:
         ee:f5:3f:cb:b8:1b:73:e9:8d:ae:38:0d:40:5b:74:e2:ce:9b:
         be:b2:a2:b6:6f:87:fe:ea:e7:af:f2:42:97:cb:f7:ef:97:51:
         1b:64:ce:69:d0:48:ce:92:9d:32:85:5b:bd:ad:4f:83:bd:ad:
         c5:48:54:de:d5:a2:44:5e:1a:f0:60:36:0b:9b:53:d9:4a:03:
         ab:39:a5:af:23:18:51:2d:4a:98:72:73:85:be:11:48:7a:37:
         65:53:8f:de:4d:15:bd:14:1a:da:78:05:60:fc:8c:d4:3f:d2:
         3d:c3:cb:7c:b0:f2:d5:49:37:8e:dd:58:60:a7:1e:1b:27:46:
         d9:0c:21:f7:81:30:cd:11:9b:30:c8:32:26:5d:f1:9b:ba:c6:
         59:bc:3d:b4:5b:59:e0:4c:df:a3:b8:b4:f3:b9:81:0f:bf:1d:
         7d:0b:70:c8:0d:af:54:33:1a:37:27:50:14:c1:a2:0a:ea:5d:
         2d:a8:4a:a5:3a:72:25:0b:a0:53:70:aa:32:f5:b3:51:dd:6f:
         b8:f0:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----