Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
File:                     Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft (raw, json)
Hash identifier:          KjKlGU+I6/7WtoQXPjZ68JHRiM8zC/IOsBcnH3eW+PI=
Subject key identifier:   08:BD:D2:21:17:78:99:B0:B7:99:29:FF:1C:84:AE:9F:32:7B:66:6E
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Certificate issuer:       /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial:       01962E98E2C5C29B76C46A1E4D9B221C12DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
Manifest number:          0351
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (hash: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=)
                          2: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (hash: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=)
                          3: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (hash: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=)
                          4: A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa (hash: lggmut1+AIhHUFw/pa+hugHmAOGvNZ/jcOZNrQeZgUk=)
                          5: CLpkAB9SkASnLi0bcVjlvibT8q0.roa (hash: h9ZbpSD1UKLYDhyFqL5vdv53fTWYJR5sayvIQP/wamo=)
                          6: DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa (hash: JXy3wpgCmIL1KJ6V2fbPe71TEfjeAQIbVCR92SplqIo=)
                          7: IrBZbjh9bN6sX88jSCcr0jSDjf8.roa (hash: 4rxNfDiQKwVlFDVfgBPRO7cwVcJtlUjG/xAc+wH5P2Q=)
                          8: N1R0GyvHuTbb0-EH84-V2sEbngg.roa (hash: OtlluPp/GFk8dMowu4n/6CaWorYPCyKsdg3cuhnY21w=)
                          9: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (hash: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=)
                          10: Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa (hash: QTVqmpZONM6esupsMvufy9vRDscEqFkzSQftaVkJdcs=)
                          11: VWObvOSvF1AXNIIRn3xBmcVBaCA.roa (hash: k2TM3+amiq1VQwMqtDCgTlWYgVGq94+g2GBovKDeCf0=)
                          12: Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl (hash: p7iQptyG1curg/YDrpRbtbeFbQyOOMM3dM4dlmZwxvU=)
                          13: Zh-8f0tKdwJJmTErbAZbBlAu2-k.roa (hash: Krjl31rGf1mkJQ9LvksqzyPEEMfTl0Ol/mUhHx32Z6c=)
                          14: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (hash: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=)
                          15: bSQ2KJkghyGNH1xM4L0qwKLgqKc.roa (hash: ferYAqATun5kAev+OYfREU8H5PWvsH+O2JxdN9vsL3s=)
                          16: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (hash: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=)
                          17: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (hash: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=)
                          18: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (hash: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=)
                          19: ga0KLDUpKphpd5uhD-u7xvCdgo8.roa (hash: iNvTkN67twKCRuI+xwjBz8piFCF9xnDfvAKVgLU20KI=)
                          20: hIsb24dWsZ8VsBWOEEjl3fdkCsE.roa (hash: A4XAyp6Fewl0t4Uxa5BTFhXjIGGvivyuEJQWo21WUn8=)
                          21: mKJqEI739B0iTvnzxCUb3biwris.roa (hash: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=)
                          22: pCE1baMGsmwCYXSEoEEcUwBkH8o.roa (hash: GsYlVdD3sX0x5By8y8crNFzjEYXJ2ZK0i/TeckVJ2AY=)
                          23: tQlk1mJ3Q57dUylH0cWwEXNsNO4.roa (hash: 88L8h3QT3LZj5nAWKf1psRrxbrTm+VcpE0c7xWTV8YA=)
                          24: uON2AZKewn22ph48wsucePPeGGs.roa (hash: fM2a4O9fUH4LhlB9C9HNNSyscgd8emrCgv/XCKrRpN8=)
                          25: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (hash: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e2:c5:c2:9b:76:c4:6a:1e:4d:9b:22:1c:12:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=08bdd221177899b0b79929ff1c84ae9f327b666e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:62:4b:e2:89:c6:07:65:f9:ea:38:d8:8f:
                    64:04:9b:22:b4:9b:2a:92:63:63:32:e2:81:f8:55:
                    2f:f7:ce:26:65:4c:55:f8:65:b0:90:30:d2:11:42:
                    c0:2a:af:23:bc:b9:35:e7:c6:5d:2b:45:07:6d:13:
                    b8:dc:52:69:56:c5:d5:d4:77:1d:2a:66:6d:3c:d1:
                    6d:b7:32:0e:3b:cc:fa:49:04:23:4b:0a:62:25:50:
                    54:48:ec:e9:f8:df:4d:e4:93:93:ac:75:5f:38:5b:
                    5b:3c:aa:e1:71:02:f0:92:85:14:cc:aa:a2:16:29:
                    c1:fb:37:45:e5:9b:b5:d5:7f:a8:34:88:42:ff:f7:
                    02:c3:e9:50:90:90:17:e9:71:73:5f:b3:4a:a1:26:
                    34:46:3d:29:09:a0:88:35:9c:96:fb:93:35:a2:d3:
                    aa:36:f5:c6:84:a6:71:e4:a9:07:72:da:75:03:4f:
                    cd:72:6b:cb:11:d4:ed:6a:47:94:3f:c2:b7:e9:78:
                    ad:a4:2d:ca:8d:2d:6f:58:df:ce:b3:5f:71:06:7b:
                    8f:cd:3e:f3:93:f7:8a:55:ba:1b:5b:e1:78:83:8b:
                    b0:81:a3:af:dc:27:74:5b:9a:28:c4:6d:ef:0b:f4:
                    c6:4f:3e:32:a7:a9:a2:6e:a6:09:75:3a:69:f1:56:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BD:D2:21:17:78:99:B0:B7:99:29:FF:1C:84:AE:9F:32:7B:66:6E
            X509v3 Authority Key Identifier:
                keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:25:31:88:1b:a0:2e:90:77:45:88:06:b4:76:81:02:72:ea:
         f8:8b:9b:42:6a:ab:8e:90:1a:fe:d1:20:ca:03:e8:d3:56:ad:
         71:cf:d6:7b:9e:ab:e2:8f:03:45:92:a2:2b:69:7c:ba:64:be:
         b6:77:30:b6:c2:a1:94:1f:cd:8e:51:0c:f1:1b:9f:77:71:2b:
         62:9c:0c:11:47:00:b5:7c:82:2f:0c:dd:d7:a4:cf:34:f4:ea:
         52:7e:88:44:72:28:57:e4:15:1b:f3:9e:3c:65:94:c6:dc:be:
         13:29:f7:0e:63:92:fd:32:91:09:a5:71:4f:9e:a8:c1:9c:23:
         33:fc:78:4e:cd:e9:37:cf:2e:e6:8f:2c:d3:00:07:5a:d9:52:
         32:fd:02:f9:41:70:8c:38:7f:b0:00:c8:72:69:bc:c4:ae:f2:
         73:e2:35:b9:5a:83:9f:df:c2:11:38:69:e4:88:cf:0c:94:e2:
         04:a9:3a:a1:73:72:d6:ff:e1:26:0a:48:d6:40:27:78:f0:26:
         b4:9a:b4:35:3a:59:7f:dc:94:48:a7:17:60:66:84:a8:aa:72:
         b0:5d:31:5c:7d:e8:8d:cf:4b:9c:e7:bf:04:fc:69:10:43:d9:
         34:29:9f:07:31:b1:a5:81:13:bd:3c:7e:ab:89:a9:9f:b5:4b:
         6d:5f:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----