Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          rjxe00JHgtKDCjzOlrOmeJD6wzbCxBuoNURQog6tnGE=
Subject key identifier:   BF:E3:A2:16:8B:DC:0F:0E:5F:43:20:25:35:9A:95:CA:D7:A0:D0:CD
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       0195E0B46ED28FC00EB8DBA94E5FEB35D8B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          0C56
Signing time:             Sat 29 Mar 2025 07:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:15 +0000
Files and hashes:         1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: AmaDlnxwTjCI0fJIjZahBJK7uKcJAs0F3rIubmoc8Bc=)
                          2: CW5XXGbSHLy5qht82EbGk600atQ.roa (hash: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=)
                          3: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (hash: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=)
                          4: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (hash: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=)
                          5: xHovsWco0FWia8DWR-GvNsYSrNI.roa (hash: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:6e:d2:8f:c0:0e:b8:db:a9:4e:5f:eb:35:d8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Mar 29 07:01:15 2025 GMT
            Not After : Mar 30 07:01:15 2025 GMT
        Subject: CN=bfe3a2168bdc0f0e5f432025359a95cad7a0d0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a7:d3:e3:1b:b5:a7:23:ab:fc:5a:41:66:2d:
                    13:ab:86:fa:64:e7:cd:84:7d:fe:80:67:a7:df:68:
                    b8:96:a1:0a:5c:95:cb:1b:e1:37:a1:33:c8:f7:9a:
                    31:f4:ef:03:e1:17:a1:72:2c:03:8e:ae:e8:bb:90:
                    38:52:2c:53:b4:6f:ec:dd:e0:8b:01:7a:e7:9d:26:
                    e1:4c:de:f2:10:75:f5:f4:40:d5:4c:fd:f1:44:95:
                    8b:90:43:34:a9:e7:73:70:02:33:27:e9:f7:63:c6:
                    35:30:f7:ba:ee:90:07:0d:d0:cc:63:4a:4b:1d:94:
                    4c:17:78:87:89:36:b7:3a:94:dc:c9:32:bf:2c:8e:
                    9d:0b:ca:53:b1:ca:d3:88:b0:fa:fc:d0:30:1c:c0:
                    91:5c:ae:7e:f6:9c:17:cb:f7:f9:d5:46:5e:12:93:
                    10:85:30:d2:fd:b0:03:26:e7:24:c5:9b:ae:c3:4b:
                    38:ac:84:ad:6b:41:26:cf:fd:e7:38:13:8d:e8:8e:
                    73:3e:5a:c5:ad:07:31:b4:2e:6b:14:4b:a7:52:25:
                    96:ec:6d:0b:98:f8:50:d3:d9:2a:14:c3:c8:f2:3e:
                    88:b6:5e:ef:ec:2a:13:c5:77:e9:ef:e3:88:ba:3d:
                    82:1f:34:76:39:fd:dc:b6:5e:55:9b:0b:2d:40:fd:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E3:A2:16:8B:DC:0F:0E:5F:43:20:25:35:9A:95:CA:D7:A0:D0:CD
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:35:cf:3e:cb:a0:19:d0:ce:d8:ab:7f:72:f5:c1:06:43:
         00:c7:4a:bc:7f:f5:57:f3:89:cf:f0:11:f0:b5:de:f2:13:4d:
         a5:65:09:63:05:26:e2:1d:b9:0c:37:5d:a7:40:c0:93:5f:1c:
         49:71:5d:1c:53:19:3d:ec:2d:d8:33:b8:f6:77:0b:3a:d6:2b:
         b0:5e:63:9d:74:66:a0:71:da:92:d8:81:3c:92:7d:0b:13:47:
         74:0e:a9:47:f0:ac:d3:7c:8c:fc:da:88:a3:2f:0e:3b:6d:27:
         41:17:12:3d:e7:d7:bb:ef:1f:5e:e3:ee:16:bf:17:d4:a3:aa:
         a3:c6:2d:9e:76:65:9c:87:f6:96:94:37:cc:25:87:83:fd:b5:
         07:54:ed:f4:c7:ee:80:9b:8a:80:51:79:af:9e:59:79:28:4e:
         59:fd:98:e8:e6:49:0b:4c:7e:a9:80:8e:b1:75:1c:de:ff:a8:
         c3:04:ed:13:91:df:0f:0f:16:da:67:24:c1:f4:1a:5f:62:0e:
         11:78:1c:c9:12:d8:52:20:48:6e:19:71:7a:48:50:dd:54:a8:
         12:6f:d8:93:48:6e:fe:93:07:43:02:a5:97:57:b3:f5:98:15:
         1f:79:39:0a:45:a6:b5:32:c6:a4:bb:fd:02:65:bb:d9:35:1a:
         70:31:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----