Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File:                     lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier:          lJuAv6mazGQd7VgmJJ4KjVGTNrwtOuA8uHiD/qCDbk4=
Subject key identifier:   75:83:C5:FA:25:83:C0:14:5A:71:48:12:79:74:BB:0E:6D:4F:61:4F
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer:       /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial:       01962E98BF02ADBAE807F4F9154A4966EA49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number:          1160
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=)
                          2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: JtvcymF1OK17UhPvMSl0Pu0Et0AuJsELLaFBaUKL4pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bf:02:ad:ba:e8:07:f4:f9:15:4a:49:66:ea:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=7583c5fa2583c0145a7148127974bb0e6d4f614f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:f0:70:af:21:30:6b:f6:81:b8:10:08:9d:
                    a1:1f:86:76:76:79:a4:23:ee:a3:f7:b2:69:70:a0:
                    54:7b:16:af:93:81:9c:e4:b5:41:fc:d6:67:7d:8a:
                    80:bb:aa:00:32:53:ca:b3:73:74:19:b4:4f:72:56:
                    04:2f:17:ea:c2:ed:f8:36:66:06:ef:0b:d8:91:1a:
                    5b:72:53:dd:b6:67:2a:bd:1c:9c:cd:e9:3b:4f:46:
                    08:4c:51:87:18:29:44:f9:b5:fd:e9:20:19:fd:7c:
                    66:b2:2e:e5:06:41:ae:a9:d3:7d:d9:f4:b6:37:65:
                    e6:6d:5f:e1:a2:96:49:a0:1b:0b:82:a9:41:3b:51:
                    f2:81:bf:14:10:2d:f9:3b:48:7a:14:ca:e5:61:34:
                    64:8e:40:2b:dd:5f:0a:95:a7:74:6f:7f:bf:55:ce:
                    36:60:db:1a:eb:9a:05:80:b0:a8:af:0c:7d:f3:c3:
                    1a:d8:8a:c4:15:aa:67:d3:ff:ac:bb:ab:9f:5a:4a:
                    08:86:02:ef:fd:03:81:68:df:da:5c:58:ba:41:23:
                    16:23:c7:5c:f6:8d:37:3b:e1:48:16:d3:4a:ab:85:
                    2e:f7:5c:7e:0d:7b:b7:c8:ac:c0:99:a0:a0:d4:d4:
                    39:91:a2:ca:b9:5f:69:0c:6b:fd:6c:da:e9:c8:ff:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:C5:FA:25:83:C0:14:5A:71:48:12:79:74:BB:0E:6D:4F:61:4F
            X509v3 Authority Key Identifier:
                keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:46:b0:67:64:05:3d:04:60:e9:ba:c9:12:f7:b8:45:69:3c:
         f4:34:93:c7:68:93:6b:b4:af:05:cd:52:6b:c4:3c:6f:8f:bc:
         5f:d0:62:f5:ba:d7:54:d3:e1:4b:b9:17:7f:1e:d9:3b:bc:63:
         f5:fb:0a:9b:e2:ce:40:e3:ef:f3:d7:9d:3f:4f:4e:83:b6:da:
         3e:1f:8b:3d:80:e4:2c:f0:48:76:33:f2:54:2b:9b:54:fb:8e:
         dc:15:8b:ba:c0:07:e1:42:d3:ca:40:4c:93:b9:79:1b:d8:d1:
         c2:82:c8:c2:42:ec:b1:85:09:67:94:3e:d3:35:56:b5:de:ac:
         27:a4:5f:1e:65:f5:7e:54:13:a1:28:df:d6:d0:63:79:88:8a:
         cf:ef:cf:d3:f9:c7:99:9c:bd:1f:b3:dd:ee:9b:76:b5:86:14:
         ec:bd:5d:72:d6:0b:7e:d8:1c:01:d8:0b:11:be:c4:d4:ad:0e:
         ad:4e:29:3a:b9:60:d0:26:38:72:11:76:1c:f2:67:87:ec:be:
         19:29:56:5f:73:ac:8e:ce:17:1c:e0:24:fc:eb:84:3a:8d:cf:
         a4:b6:0b:3d:94:a3:0d:04:62:49:a9:b2:5f:cb:6f:96:a2:af:
         24:41:fb:07:9e:1c:d0:af:aa:84:72:8b:7e:ef:16:44:29:d0:
         f1:c7:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----