Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
File:                     xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json)
Hash identifier:          NBCa8g3Pqj1MImuSMtaaavOpj1yiWnF8u2OK9JzI+iA=
Subject key identifier:   65:CF:96:92:70:AF:19:27:59:98:FF:D5:4C:E8:86:FF:60:A3:85:B7
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       01962F065F821A14A7E3B352AECCD4B915AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (hash: pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=)
                          2: VWhDL_pbFyyRh5F_p1365369fw8.roa (hash: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=)
                          3: eStVA852783cSRla3cS6Sa73nTo.roa (hash: hjwJSk0hM/n7mjZhOiCDKrp/IiuwE5tJF1ttaMrAUdQ=)
                          4: mz6tpSTyWG1tpsywf2xFprKsdgk.roa (hash: TcXisvKqSL089bUIJMzgiUZfK9JnlvU+0pDp8FZCWe4=)
                          5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: UMwPRZFNNP94PvF1xkxJu2T6rwvGMefC2/1ZSq/Z4Qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5f:82:1a:14:a7:e3:b3:52:ae:cc:d4:b9:15:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=65cf969270af19275998ffd54ce886ff60a385b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:e7:a7:47:ee:7c:6f:79:2e:80:6d:f5:22:
                    46:16:b8:43:c1:65:73:5e:d5:9e:0e:15:0e:d7:0e:
                    f5:ef:41:eb:05:4b:66:40:57:02:1c:b7:aa:d1:d6:
                    05:21:ec:62:80:58:93:1a:02:32:c4:39:4e:e9:ac:
                    47:3d:51:3f:5d:02:6e:5b:6e:e6:21:2c:97:84:de:
                    da:2f:dd:5d:1b:9b:51:51:3c:0d:86:57:41:8b:28:
                    b8:de:9a:30:27:e4:a7:2a:6f:55:e3:82:50:48:74:
                    c8:05:c5:70:50:b8:f7:86:9a:55:90:96:38:77:fb:
                    82:c0:cc:ad:9d:13:36:87:ff:a2:ce:54:88:17:9a:
                    00:c4:03:2f:8b:48:b8:c1:c7:c8:14:0d:ab:d7:b6:
                    93:e5:c4:30:8d:0b:f5:b5:f4:8f:1d:b9:cf:6a:ed:
                    a8:63:80:c6:8f:b0:d6:2c:d4:42:82:b7:cc:88:c3:
                    14:af:7d:13:e0:5d:91:37:65:9c:44:d6:f1:19:39:
                    93:e4:4b:13:37:9b:a8:6c:7c:78:6d:31:c6:55:e0:
                    31:b0:8e:cb:bf:08:3c:29:7f:16:6c:0f:52:f6:f4:
                    2b:41:7c:f4:22:a0:a9:34:9d:82:ea:45:6c:81:90:
                    2e:86:96:77:46:50:d4:85:b4:fe:d7:f6:67:2f:ef:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CF:96:92:70:AF:19:27:59:98:FF:D5:4C:E8:86:FF:60:A3:85:B7
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:55:4f:54:c8:13:aa:c4:8c:d8:74:02:b6:00:76:8c:93:c0:
         52:9c:09:b3:32:d5:76:4e:07:1a:a6:db:06:75:28:7b:24:4e:
         bb:d3:98:ab:f1:a5:f4:cb:8f:cc:3b:ad:8b:20:77:da:a1:de:
         4b:29:ca:10:16:40:0b:ef:72:6d:43:2c:da:3a:08:a3:07:a5:
         17:ec:4c:47:5f:38:fe:ce:42:7b:cd:f2:bf:dd:29:35:48:cd:
         84:b6:d4:31:9a:9e:d9:da:28:20:3e:d5:7b:3c:8f:83:21:fe:
         a8:b0:fb:29:19:85:83:ed:9b:0e:d9:eb:95:47:94:2b:91:eb:
         68:64:87:57:8b:98:bb:32:50:d1:90:54:25:c9:89:2b:f4:3a:
         2e:01:41:94:18:fe:e9:5b:0a:9a:ff:8d:5f:43:d4:ab:16:80:
         f9:55:96:d9:09:8b:93:dc:13:7a:4c:16:26:0b:c6:be:f4:57:
         da:c1:49:ba:71:75:ab:61:2c:0b:ac:be:c2:27:40:40:71:b0:
         d8:44:cf:ba:8f:9f:de:12:e7:85:fd:fe:6a:26:b9:b0:0a:5c:
         04:4a:4c:c1:ee:9a:49:3e:e5:9f:93:12:93:33:19:76:12:c9:
         63:c7:1b:cf:d0:98:a3:2f:da:f8:7f:b6:1f:79:6a:96:ac:c4:
         13:b4:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----