Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          N3jnYfv6InBGxBLtEOIaFSonCubZYy+vhMuUqsPCuJo=
Subject key identifier:   35:75:EA:1C:15:5F:28:9F:D5:7B:8A:2F:E1:8F:09:2C:1B:DF:EE:D1
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       01962F3D9A42BB6B06B3A97AB9D2C72423B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          01AC
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 1XdgTT7O1cFBl17mNlJJSrOd3fk.roa (hash: wimOvTU0Udfym02N3oPJ/PQrKaSWZuQr8ga8Wsigo2A=)
                          2: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=)
                          3: BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa (hash: jOHIlKdvXIgJGWM14XmaB7UsAMXtqbb4a2RVgY2if5A=)
                          4: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: bjqCTBd9kg4SNwg2ojGEdcUm0mAOq3+KT5AdIKykYM0=)
                          5: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=)
                          6: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=)
                          7: LWsi3KmW8bzkCxEOXVP0T6JNl74.roa (hash: ++a3kmsuF/zJu9wF6l25AqVnQ10r4JeQqeeIizqUJQ4=)
                          8: QiWAHKME9j6jXWoDWmLBMtajJvE.roa (hash: aMoyecQaaEfNleHM1MRWgY3enB8c6H07Bf7pHPlVlXU=)
                          9: YDFeVGcfCRWwkla5yvVihURp96w.roa (hash: KXYzCuBnwDyE4MCQIyptZv94ewf8cBJZDBMejoQRhWY=)
                          10: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=)
                          11: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=)
                          12: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=)
                          13: uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa (hash: br5Lt3idKAa3r0A/AYPd7r0VCPVHp7gxtlokiM1B+jU=)
                          14: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:42:bb:6b:06:b3:a9:7a:b9:d2:c7:24:23:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=3575ea1c155f289fd57b8a2fe18f092c1bdfeed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:21:2d:58:25:5d:65:74:93:d7:63:d4:99:
                    71:17:1a:f8:2c:4c:e1:e4:93:4e:87:b5:30:5d:f1:
                    54:49:dc:8e:1e:6d:28:40:af:7d:a0:a5:48:be:8e:
                    66:67:63:34:f8:58:0f:98:d0:c0:4b:36:10:7c:33:
                    f5:4c:0c:13:74:d0:f4:3c:a3:a4:fd:1f:72:7e:ef:
                    b1:b3:89:4f:37:8e:89:84:97:a4:55:b4:43:27:f6:
                    eb:25:c0:af:f9:31:c2:15:96:81:e8:85:10:47:b3:
                    e1:15:8f:25:ba:9d:6a:75:8a:13:4e:c0:e5:82:b4:
                    69:4a:b3:1b:3f:2d:cc:24:74:e6:51:6a:38:4e:6f:
                    f3:a4:81:ca:5c:00:16:23:85:ba:c4:23:55:a5:da:
                    5d:37:f7:e9:1e:85:45:3c:40:c4:f1:f2:73:69:c2:
                    1e:c4:35:11:32:3e:e9:0d:4c:82:03:09:fb:4e:bd:
                    61:a3:5c:42:37:34:ca:8b:f8:85:8d:87:d8:3a:8c:
                    e1:1e:8e:63:58:c4:4b:78:02:00:1d:ab:17:e9:cb:
                    76:9a:cb:23:ab:5e:9c:96:35:63:0f:b9:b6:df:ac:
                    6b:75:7d:a5:92:e0:fd:5e:81:51:41:88:51:0d:a7:
                    3f:d0:05:ff:63:c2:6e:43:be:2a:2d:97:47:5b:c6:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:75:EA:1C:15:5F:28:9F:D5:7B:8A:2F:E1:8F:09:2C:1B:DF:EE:D1
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b4:06:f7:cd:6d:24:6f:f3:24:69:40:c5:74:06:e6:bb:1e:
         4c:6f:71:53:38:79:80:95:89:53:fb:fa:21:4d:5a:9e:12:65:
         6a:32:ea:6c:38:df:53:94:cc:02:c4:20:52:15:54:a4:00:e0:
         06:54:03:39:e6:0d:14:63:16:4d:bd:95:e9:5f:e6:8b:bf:6f:
         f0:13:d0:a2:23:10:db:33:b5:e9:c2:df:e6:eb:d6:7b:9e:0e:
         e8:67:bb:1a:db:c6:a0:c2:eb:3a:0f:6f:12:79:3c:00:85:9d:
         15:6f:40:38:ff:f2:de:0d:88:42:eb:9a:2a:00:02:61:7b:01:
         bd:ec:b3:09:ef:e4:32:aa:13:e3:89:24:85:15:98:16:f3:fb:
         9a:7c:96:da:c7:40:da:55:0b:75:0b:64:65:63:c0:0f:67:b1:
         9c:8e:9d:64:5d:92:dd:0a:c4:2b:2d:d4:b4:98:3b:02:57:a3:
         67:93:53:e7:6f:49:09:34:78:de:4e:44:0d:ba:c6:c9:ad:b4:
         59:b6:5d:ab:49:2b:e8:fe:8d:c7:2f:f7:a6:3f:48:d3:aa:db:
         a1:01:7e:ff:d8:26:a3:31:46:ac:af:88:a1:e9:a4:93:65:d3:
         6e:ad:ca:d8:e9:39:58:a1:27:46:5a:46:13:dd:0b:50:5a:93:
         ee:e7:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----