Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File:                     A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier:          9GLKhMWyvUxkB9uzWRNrEZ432yQsCbT21KlCinfjhv0=
Subject key identifier:   DE:3A:6E:19:3C:F4:0D:34:E2:F0:67:4D:67:1B:49:05:1B:3F:A8:61
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer:       /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial:       01962F0709B4F3CAB9A663A60DC2F855D83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=)
                          2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: 0ShTHiTZSNLx4jsF9PoStDPVcP2WHptlOlijmU5cpgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:09:b4:f3:ca:b9:a6:63:a6:0d:c2:f8:55:d8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=de3a6e193cf40d34e2f0674d671b49051b3fa861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:b3:7e:9a:da:1a:ab:74:fb:b9:75:26:2d:
                    89:e8:65:b5:cf:e5:ee:95:99:62:dd:ea:9c:32:9b:
                    e6:5e:88:51:1b:9c:aa:60:ca:63:d6:21:d6:56:96:
                    9f:9b:90:80:a5:a8:5d:a5:aa:db:66:35:e5:d9:64:
                    7d:de:5f:09:dd:74:f5:fb:75:50:8a:bd:84:76:22:
                    83:cc:ba:0d:cd:25:2e:d2:9a:87:a1:d0:8a:cf:40:
                    28:9a:32:81:c2:99:bf:97:52:c3:e2:5e:31:b5:76:
                    a1:4b:c3:b1:e1:ad:af:67:6a:0a:e3:1e:c2:98:2f:
                    03:a4:d8:32:99:da:47:a4:c1:68:68:ed:cf:58:b5:
                    cc:80:89:0f:ae:4a:f3:b7:17:4e:32:27:b8:ab:1f:
                    9b:08:91:ac:c7:35:27:f2:f2:bc:10:3b:54:ca:87:
                    0b:6a:9a:e0:1d:10:d8:af:8d:fb:91:aa:79:41:fc:
                    6f:c1:a6:9e:77:a1:a3:a1:40:91:c0:47:fb:d7:37:
                    e0:e6:52:a1:e4:7a:ba:43:3e:96:f8:bd:13:25:9b:
                    e3:bc:7d:a1:ec:00:a5:0a:70:bb:dc:c0:ac:d9:9e:
                    30:3e:27:10:f4:3a:3c:22:62:f5:b3:e1:50:7b:37:
                    af:2e:b8:6b:5f:c1:15:ec:47:f8:30:50:4f:15:4a:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3A:6E:19:3C:F4:0D:34:E2:F0:67:4D:67:1B:49:05:1B:3F:A8:61
            X509v3 Authority Key Identifier:
                keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:23:6b:4f:64:6f:86:24:5f:3f:b6:af:97:3a:2f:f8:e6:
         33:33:3e:24:90:ce:12:8c:55:01:19:a0:f2:c2:dd:c3:f5:f6:
         43:59:3b:6e:fe:a1:13:67:a2:28:8a:d4:76:4d:4c:e3:05:a7:
         00:ea:b0:d0:c3:6e:89:81:39:04:e8:21:ce:2e:4a:77:89:de:
         3c:50:df:c1:91:5a:dc:5b:ae:5f:67:fa:f2:82:a7:86:3f:ee:
         49:6b:97:67:87:9f:27:8f:fb:27:33:30:c6:a2:6c:7a:fd:42:
         07:1a:de:f9:ab:d9:0d:0b:d5:37:96:fb:43:be:93:61:61:fb:
         24:40:aa:9f:7c:28:01:37:b2:a6:c7:96:b7:9d:93:12:66:d9:
         ad:89:6b:8f:9c:29:75:33:74:9f:fd:24:78:9d:a6:3b:12:91:
         41:f2:cb:6e:72:00:dd:35:f7:0b:51:ed:65:06:c0:d0:85:74:
         bd:db:73:e9:7d:f7:08:d5:ff:b7:c7:75:76:8e:d8:f2:b3:08:
         c5:11:da:f7:c3:19:04:de:b0:07:bb:44:d6:25:a6:22:20:59:
         04:a8:b0:f6:5f:e1:95:20:91:77:19:95:2a:be:bf:2d:69:79:
         24:0f:e4:5c:59:dd:9b:3e:9f:09:a7:03:55:e6:66:23:07:97:
         86:ba:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----