Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File:                     bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier:          TnZFsPGcAXa3EYy6ufdeRDPdzzE0elcpxKTrzkJUrLg=
Subject key identifier:   57:3B:10:DE:6D:8C:C2:AF:DB:58:CA:51:3F:3F:E5:D8:28:94:F6:B6
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       01962F3DB03DDC3C49115C5CA00BF3E8EBC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number:          13E1
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 1cBjbhQO7ncLuCJPPP3ax-BP1rc.roa (hash: Jy5kekjzCQxDaa0ItIoXnMNYM41DXr2Kna+F8NZUTeI=)
                          2: 2zjBMbzr_Hzm7RJmF3x5zIZyHoI.roa (hash: 3I8eVsTBgsANndjJfGHy1lpS8zVxK2ea9i+AxHZ4N10=)
                          3: 8hRBXjeqaNVqsRXwD3teVm2IptQ.roa (hash: 7trj/DN0w0nR+thBLV8DeXduqLYmWtu9yjYZdu4vyJw=)
                          4: Bx__fFiMMTggkGq_nd5kX3xmUcg.roa (hash: mKBt1ZL1NN3yHJQYqC4MudwNnNLAyAG6zsc+LH7T2yM=)
                          5: CLnjMLjaN6TgfiTPKuCp1qWork0.roa (hash: MihJ/9Q2aOSD5kcM3rgBq2rOZB5XjrnOSNAyQ0gi6BU=)
                          6: Ff-r3-0iyLfe2eC4tftKl7r4ksA.roa (hash: XBCuFAzYlK+KS0b0qdNX4BGXCyC4kES1ua5iNmQkljo=)
                          7: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (hash: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=)
                          8: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (hash: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=)
                          9: MPADllIHWdYho5SL9cNb4fTjF5g.roa (hash: 0EWuYNC8MZ5sfsDzG+GHQhkCofnYevzEpH/1M0Pt09c=)
                          10: XhfMqezXvZ9Gr1SfZAFxxiBLdqw.roa (hash: QCoblTw77lmvmm3xeIb8Fg5RScedsC6Svua+HgD7wlE=)
                          11: _363_dFkTrxVWJRfmKGhVcGEYxw.roa (hash: EFI43I2qKJ1jnWCRyPrzhjddU2bZAD3g2m1Gb9lWY6w=)
                          12: aIC6ROQmIBkJtMQV3BLilIyM4Jc.roa (hash: +ZDiWP7vx5S7AAhHLcn6ylil5bTpyx1nO3rHC5JU56A=)
                          13: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: /XLsX2H1NSw/QAMaEnA92qk/9RYLRe/JlIZWiFyI/74=)
                          14: irOUAsVrlxFg5m013u0wtydduUU.roa (hash: z7Yif2k8ig/75nD80USkf23TbWyOlu3D9+tkTdBp9Ks=)
                          15: o5T0k_44TSkIgUx_Ff4U-HFRZqU.roa (hash: IFaPUBy92F06F1cq2klHPE/ZCTKON9EkjF2KsBLKJXw=)
                          16: qSlaLn-7EYhvBs__DrzBebluApA.roa (hash: /m9RdlfwCPFmSdntKKJTP1sX7ETuhSL8wJhpD8u8EQU=)
                          17: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (hash: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=)
                          18: vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (hash: BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b0:3d:dc:3c:49:11:5c:5c:a0:0b:f3:e8:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=573b10de6d8cc2afdb58ca513f3fe5d82894f6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:70:67:49:25:ae:c0:8e:f8:4d:7c:63:ac:
                    1c:8d:26:06:4e:b9:16:e6:b2:92:97:91:94:bb:03:
                    2a:5f:b7:d0:d5:81:e5:05:cf:e9:71:9d:2c:35:22:
                    07:3e:b6:7d:6e:b2:90:8d:45:e6:d1:cc:8c:d6:e3:
                    17:b3:c1:5a:88:8c:a0:27:4f:5e:21:af:25:a5:02:
                    47:a5:c8:e8:ae:e9:d4:69:e4:74:72:6c:55:2e:ef:
                    15:47:ef:36:fd:87:62:f7:85:8d:c1:93:d7:cc:3a:
                    d6:59:22:d8:78:a0:52:a8:7f:89:05:94:9f:7a:86:
                    07:c4:51:14:e0:b2:41:d3:60:17:a5:ef:3d:fe:b6:
                    e8:29:2f:ed:6d:b9:ea:7d:7a:b1:38:91:33:84:c3:
                    a7:a4:9a:c7:e9:64:c2:17:91:c0:70:e8:c9:8d:28:
                    30:a6:3c:34:59:76:fd:d8:7f:8f:87:04:7b:54:98:
                    ab:86:8a:c6:07:42:24:73:69:9d:c6:1c:e6:c4:5b:
                    f4:63:34:d7:54:f7:4d:41:02:d3:d3:c7:92:ba:b0:
                    7d:38:ed:4e:fb:89:d5:f6:41:35:d5:49:38:e8:e3:
                    ed:fa:40:46:75:d0:b9:db:1f:96:4f:a7:14:47:15:
                    05:0b:0d:85:8a:43:49:59:0f:8f:0c:9c:32:37:cb:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:10:DE:6D:8C:C2:AF:DB:58:CA:51:3F:3F:E5:D8:28:94:F6:B6
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:28:21:44:48:a9:c9:04:bc:b5:52:ca:c1:d0:bc:48:df:
         14:41:20:20:fd:e0:12:15:c5:33:44:f8:e9:0e:c8:47:f2:39:
         51:ec:1f:72:b7:3d:d2:28:21:13:6c:af:43:c3:72:69:6f:bd:
         df:83:21:10:3e:a0:30:cc:cf:a0:24:53:c6:31:e8:0d:1f:03:
         d0:31:aa:02:6b:4e:8a:75:12:e6:36:34:1b:0e:64:de:cd:d0:
         94:91:3e:d6:7c:77:30:5f:4f:8f:00:f5:7a:09:b3:ed:f8:f2:
         1b:14:d3:a2:e7:8b:21:28:33:8a:83:74:67:2c:70:f3:f5:95:
         93:5a:8f:a1:b4:79:79:55:2d:a0:05:60:8d:8f:18:5d:d6:ba:
         e2:a8:ae:60:c0:e5:1f:b7:af:28:21:8f:0d:f6:5b:5e:9b:28:
         e5:88:6b:6c:38:21:dd:f2:3d:65:44:46:81:7f:9a:1f:af:37:
         a4:10:77:18:4f:41:57:10:1f:90:30:9e:5a:ba:5a:b6:df:8b:
         a6:c3:b5:7c:ab:3f:7d:7a:9e:ea:a9:4f:e7:8d:7c:bd:03:71:
         ba:2d:1e:48:3b:63:e3:1c:9f:7e:7f:c1:e2:0b:6c:47:61:b3:
         0a:76:c2:2c:48:80:b5:58:88:bb:b3:4b:55:07:d5:7e:9c:ad:
         39:d1:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----