Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
File:                     GCDxMTkWE4Tq8ToffbYOLGikOVY.mft (raw, json)
Hash identifier:          tkCxZ9bORlbMZcVMksRcy7wSWuwPaH0/LfTXqcswLMk=
Subject key identifier:   9F:BC:15:02:46:AE:47:FB:28:CE:A1:15:8A:22:DB:2B:81:D7:33:7C
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Certificate issuer:       /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial:       0196C3146E45383D97ECFFE854B64AF63CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 06:00:18 +0000
Manifest this update:     Mon 12 May 2025 06:00:18 +0000
Manifest next update:     Tue 13 May 2025 06:00:18 +0000
Files and hashes:         1: 5PJP9sz2Qj0R_qvQUI34qPi3A1Y.roa (hash: pR71ZCmNXZbyYfyvw8Yav6FbU05FRtn+pbwLEcOTYyA=)
                          2: GCDxMTkWE4Tq8ToffbYOLGikOVY.crl (hash: 04u6MTxwm14cQWarJee5lTa9e0HoXkaIkStFaaKMrmg=)
                          3: gTxU19v1FIjd2W2ByIs00b9py5k.roa (hash: dE41WcjB8n3G/VzRfrS7Jc6uMbM/f0DRebeJS3Hdcos=)
                          4: k-Hv5Avloy-7_yTlO8SDAhMoc5M.roa (hash: iZ+5NIkdY2s7fnzuUEQnr4gkvl0QbM0xPICQPGddznM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:14:6e:45:38:3d:97:ec:ff:e8:54:b6:4a:f6:3c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
        Validity
            Not Before: May 12 06:00:18 2025 GMT
            Not After : May 13 06:00:18 2025 GMT
        Subject: CN=9fbc150246ae47fb28cea1158a22db2b81d7337c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:ea:eb:12:0a:e1:9e:f5:30:19:91:56:ce:
                    02:1b:bc:c0:8e:fc:e5:c4:fb:36:d1:f5:38:5b:66:
                    85:8f:a4:a4:27:28:26:26:ce:2f:cf:30:cb:94:ca:
                    10:42:57:f0:7e:1d:7f:a6:8b:b7:e6:6f:ca:51:b0:
                    04:a2:66:62:7a:62:a6:77:8d:a2:f7:da:e9:ae:64:
                    b2:24:47:e3:ae:09:ef:eb:fe:de:7e:a6:3f:7c:68:
                    f3:7f:44:b4:df:57:22:81:d2:1d:7c:7c:34:77:a7:
                    11:81:b0:df:61:d2:a7:02:5c:94:48:ea:69:40:89:
                    fa:5b:c1:f6:2d:cf:02:14:27:a7:bf:ce:8c:e0:2e:
                    23:91:a9:b1:46:21:81:16:5b:f9:b2:9d:89:d0:89:
                    49:78:48:92:8a:5e:d0:0e:ed:32:56:a4:d1:46:9d:
                    c7:83:64:04:36:29:8f:c5:25:10:cf:15:88:b8:e5:
                    f3:b8:1e:b8:04:24:09:66:8e:52:01:79:97:e7:c5:
                    0f:8b:ce:c5:0e:ac:a7:2e:79:6a:03:7c:25:30:1b:
                    a0:70:de:cb:8f:7b:1c:3d:51:da:b0:2e:03:ec:8b:
                    ba:1a:48:fb:af:21:09:4e:2a:20:5f:ba:14:17:dc:
                    d6:03:03:29:9e:36:36:8a:89:36:00:b7:d8:f5:25:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BC:15:02:46:AE:47:FB:28:CE:A1:15:8A:22:DB:2B:81:D7:33:7C
            X509v3 Authority Key Identifier:
                keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:35:8b:b0:28:29:48:61:ae:0a:56:d1:0d:ab:eb:88:b4:b3:
         79:7d:9c:96:3d:50:e0:ff:87:3c:a8:8d:5f:c9:45:dc:32:ee:
         ed:ad:b4:da:fe:2c:a1:58:3d:8e:53:11:4e:54:80:56:b4:c7:
         6d:da:70:b1:9f:3e:65:25:9b:fe:23:ec:52:31:31:2c:6a:87:
         11:1f:87:a1:29:71:67:b8:b9:21:63:7e:b8:cd:a6:ae:f9:92:
         80:1d:34:de:ac:d2:10:7f:ea:0e:c9:f4:72:23:50:cd:13:75:
         4c:b7:14:1e:d2:0a:d3:b1:05:9a:e6:90:e7:3a:59:44:fb:52:
         b7:ca:5a:ec:a5:0e:3c:16:9c:0b:e9:8a:e8:bb:b4:49:d5:94:
         39:30:27:60:88:42:c8:d9:e7:49:d8:c3:53:b2:0b:08:7f:9d:
         be:cb:44:93:b6:23:96:5e:03:e1:75:fe:f3:2f:04:fb:9d:9c:
         db:02:8c:18:e9:b9:80:ef:68:a1:e2:90:81:75:33:48:19:65:
         67:77:36:ce:e8:42:8e:f5:50:57:4d:55:54:f5:42:1f:35:11:
         b7:16:92:c0:4e:f9:c2:7a:77:7a:cb:71:91:34:9f:94:82:2e:
         43:ae:29:a2:c4:60:b7:72:8c:40:7e:8c:d8:aa:06:eb:7c:95:
         83:09:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----