Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File:                     T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier:          8Jho/do9fJ6yoQqc5FPqWbsvwzqq8rKpuPbbsmmJAGQ=
Subject key identifier:   07:4E:74:C4:6D:E6:44:6F:FE:2D:92:F4:39:76:A0:2E:AD:90:DD:86
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer:       /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial:       0195E046810F8F8736641BA5281E99D1349A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number:          14C8
Signing time:             Sat 29 Mar 2025 05:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:11 +0000
Files and hashes:         1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=)
                          2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=)
                          3: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=)
                          4: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=)
                          5: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=)
                          6: SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa (hash: hS1AFnLFbyQCTAlmoU4gf8KnF5G/ZsoLJZ6QNcU/zBo=)
                          7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: FgNMlVG3p+d3RUGoE06v1aYimp+3DuZ0XQMMf64S18E=)
                          8: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=)
                          9: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=)
                          10: psSTG0Xrqssglub7odw_Aeumxw4.roa (hash: ZT7znN26M2IQ2XLLuIQT50IETg9WXMqInwpcq6t20hA=)
                          11: yMcsDqcikj-Oh_XyHzZuU6ywJns.roa (hash: Rs9ukiIBzgtbtWyPVHVA61SngL94EX769rrYMrF5bW8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:81:0f:8f:87:36:64:1b:a5:28:1e:99:d1:34:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
        Validity
            Not Before: Mar 29 05:01:11 2025 GMT
            Not After : Mar 30 05:01:11 2025 GMT
        Subject: CN=074e74c46de6446ffe2d92f43976a02ead90dd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:b6:c5:f5:93:d7:c9:cd:55:da:7f:3c:3d:
                    0b:d3:d0:f8:b5:76:8b:8b:e8:d5:0b:02:97:2e:3c:
                    36:bf:e4:04:5c:c2:00:7c:8d:c1:4a:96:fd:e5:b3:
                    e7:47:15:99:6a:00:a1:a8:84:81:c8:66:03:3c:39:
                    4d:ae:c6:bf:00:e0:9a:97:95:b4:b4:51:bf:3e:52:
                    dc:fb:5f:46:15:04:85:d2:95:10:cc:50:99:ba:86:
                    6f:67:71:61:87:80:19:bb:ea:d2:dc:96:77:04:35:
                    1e:00:a5:46:9b:be:2d:5b:b6:fd:09:93:8f:65:6a:
                    74:9e:19:13:e1:86:18:c3:eb:de:ad:56:ad:e0:4e:
                    07:85:af:a2:27:51:9a:d9:48:1d:ec:6c:2a:98:c8:
                    f4:21:48:2c:ca:4e:7c:f2:c4:61:da:c7:44:df:21:
                    15:86:7c:2f:f3:8c:35:ba:75:86:5e:a6:3e:58:71:
                    b5:b4:b3:17:94:39:08:a9:5d:d6:ac:81:77:da:50:
                    34:e9:72:3f:28:83:03:29:10:01:ac:33:ca:53:25:
                    d9:72:4a:32:a7:5d:0e:e5:3f:3b:97:25:a7:39:7d:
                    33:f5:66:8f:86:76:f1:0c:e1:49:97:33:21:ec:fd:
                    7e:1b:a3:4e:56:96:07:21:35:34:70:9c:8b:8d:3e:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4E:74:C4:6D:E6:44:6F:FE:2D:92:F4:39:76:A0:2E:AD:90:DD:86
            X509v3 Authority Key Identifier:
                keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:32:fb:a1:44:de:1c:da:ba:b6:03:f3:1e:05:ed:3f:dd:25:
         f8:2e:1a:df:af:25:a6:a4:c1:b4:0d:59:52:80:d3:77:46:34:
         da:2a:b6:4a:52:d0:ae:62:25:cf:de:fb:d3:4f:a2:64:15:8a:
         2c:95:d9:f6:b7:95:48:8b:b6:c4:44:3f:f9:54:aa:f6:ea:8d:
         70:df:af:50:d3:c7:70:b3:7d:76:dc:6e:bb:8d:be:eb:d2:a6:
         6d:a7:5c:3b:0c:c8:a0:58:71:ca:12:e9:a3:39:c5:c3:44:07:
         6b:0f:fa:4c:70:d8:23:05:ca:64:32:4e:cb:6c:b6:9d:6e:19:
         74:c3:2a:0d:48:69:a9:08:67:97:90:97:6f:4f:a0:98:78:f2:
         25:b4:1d:7c:44:e7:28:f3:4a:c7:72:93:cd:65:9e:11:24:99:
         f8:f7:63:18:2b:ff:1b:3e:68:9c:5b:15:6d:1f:12:c4:a2:ac:
         59:f4:80:49:ef:e0:db:ee:61:26:49:1b:1e:62:57:b0:d1:23:
         a8:f6:c7:ef:ef:e9:4c:b5:91:a2:5c:72:65:44:51:61:94:9d:
         cd:be:58:07:3d:02:c5:3b:e8:1b:c6:8a:45:cd:68:76:9e:3c:
         81:5d:8f:ca:ba:02:b1:3c:09:38:c0:07:5c:b2:70:45:d9:df:
         b1:56:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----