Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
File:                     evV91Sx1_OOf_ikVRp2eZW28uHM.mft (raw, json)
Hash identifier:          MyS07Q4RuviPVmkva9nT6EWYZN6s3ZJzfFzHiXfiWws=
Subject key identifier:   3F:79:13:F6:AF:D2:67:9E:69:D5:80:FC:56:CB:89:E4:A2:7E:9A:50
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Certificate issuer:       /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial:       01962DF3FF60E47D99DF2CCF36CB0B7C5E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
Manifest number:          0142
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: BG_3zKuOT7_cjnF9POkFtbvMS5o.roa (hash: 5BKguR1fraSafJ4sAR4xcrcTLRANwDpsPJzlqiUGbA4=)
                          2: Ju4W4EtU2nog7kQC4aXtFa8Hecc.roa (hash: tPAmYhNOUqRIJRD4J2TRhKcrPldpUpw9J1YTx+CS3dg=)
                          3: evV91Sx1_OOf_ikVRp2eZW28uHM.crl (hash: qATgMjbLemE2rfsisaLG/uu7WiGz8bkcSIV2z4OnPKs=)
                          4: fM8xeQxkoJSIoALDtoZFL6CSUo0.roa (hash: LcVjaA+2kIEDTRTVcEKC7frWbhDk906Dn35ydCZYT1Q=)
                          5: w2cifThx8liTp2UosKmPtTuVnbg.roa (hash: 4M3/VZ3vA0bwXmuEW9DfiaSDaEw4jhqFMcpDjEAK5AY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ff:60:e4:7d:99:df:2c:cf:36:cb:0b:7c:5e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=3f7913f6afd2679e69d580fc56cb89e4a27e9a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:87:ad:2a:73:09:a8:c0:4d:fd:74:cf:2d:
                    6d:57:db:3a:98:47:ee:18:19:45:5d:34:a2:e3:3f:
                    39:28:5d:a8:5d:a0:22:ea:ea:8e:d4:89:5b:15:c5:
                    a6:64:0f:4a:c9:1c:fc:27:9b:53:67:11:7c:ae:fd:
                    df:ec:82:3b:b0:23:d3:2e:34:58:71:00:b9:88:34:
                    80:62:71:b3:78:19:c1:ab:e5:ac:81:07:cf:e2:9e:
                    5d:1a:bd:d3:4b:cb:16:d1:65:02:8d:2a:72:43:18:
                    1b:e8:05:ca:e2:3c:eb:8a:88:5e:18:e6:42:64:61:
                    25:3f:5d:a3:29:3d:4d:4b:9b:20:8f:7b:21:5b:86:
                    1d:28:cc:3a:49:b8:cc:fa:db:ab:d7:43:9b:23:16:
                    03:da:b4:42:63:e7:1a:18:7a:02:2c:e6:72:b4:77:
                    97:28:25:5c:b5:27:57:1b:a0:e5:c6:a0:59:87:65:
                    17:09:15:1d:cf:d6:ae:23:1c:35:df:8e:13:0c:b3:
                    50:4c:00:3f:c3:18:95:1a:7e:7b:ae:37:6a:2a:94:
                    69:41:80:7c:a1:1c:32:e2:a2:d7:95:b7:81:61:29:
                    24:07:3e:39:a8:2e:67:c1:7a:d3:cc:58:cd:b2:55:
                    6f:fe:8f:f5:18:45:da:82:5c:92:25:95:c8:a1:4e:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:79:13:F6:AF:D2:67:9E:69:D5:80:FC:56:CB:89:E4:A2:7E:9A:50
            X509v3 Authority Key Identifier:
                keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:78:ee:14:08:ae:dc:33:76:cf:52:ee:7e:f2:47:bc:e8:ec:
         f5:e0:7a:db:85:d8:e5:3b:23:e2:68:21:82:31:0f:cd:b1:6d:
         2f:bc:df:99:9e:99:c8:37:eb:9e:7a:1f:ea:13:f5:a7:ef:29:
         48:8b:4e:cd:02:be:2b:96:15:20:92:57:d5:47:88:6d:9d:4d:
         50:0a:49:1f:82:49:51:c9:2e:9d:65:93:e0:e8:dc:26:42:da:
         27:a8:15:a7:b7:5e:36:8e:40:38:53:a5:01:8e:16:9a:1d:f8:
         ce:46:86:8e:21:53:9c:36:f1:d5:ba:bc:70:8d:45:89:e0:2a:
         02:14:8e:2d:13:39:9d:e3:da:b3:97:41:5f:26:4a:fe:37:5b:
         a9:4c:b5:6d:f7:56:ad:6f:8e:84:8f:d9:44:84:dc:e2:1a:42:
         71:1b:38:cb:f6:97:97:3d:8d:bb:82:dc:e4:f4:b2:4d:2d:54:
         d9:5c:98:60:f7:66:41:d9:2d:e3:1e:05:33:4a:1f:d3:ce:9d:
         e9:74:f3:71:e7:40:98:36:fc:47:bc:20:e6:b0:38:c7:35:0a:
         3e:1d:92:3b:8d:2a:f0:10:87:51:5d:ee:62:16:e6:cb:d6:56:
         a7:c0:d9:b7:36:e4:d3:63:ce:1b:23:f6:28:a3:2b:97:c6:2b:
         fd:58:4e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----