Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
File:                     nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json)
Hash identifier:          MvIkxZlCfqx9jbIXz8FDGYWFCOXvk07y4cZKrlLEK4Q=
Subject key identifier:   A5:8A:77:41:7A:73:E7:BC:6B:52:CB:FA:21:97:3B:2B:15:55:65:98
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       01962FAB9EF98DDBCD4C52C10519D7B42814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
Manifest number:          150F
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 1-W6dNN7nS41OhiX2-XV_KGHmokY.roa (hash: Onsuz/Jpw7AenTCzarTD9Si7u90ClXn9NgWm5b3k5iE=)
                          2: 2YqdGEIdMzY2vhH5bWxnKdddSEU.roa (hash: 9LWiPodvJQom88P/dBp1yCiWmPws557eiQuQBNs6yF8=)
                          3: BviWEmaP3_lgIrWubDU6uMTA2H8.roa (hash: atRgCl8RxHKHCEL0/AcFViVgxr58CMMvRd/DcUp5/fw=)
                          4: C0Doi3jyevr2-pR2IftNN92p59I.roa (hash: IIK5hBd1iLDFxEspDzzgvSmRdaIP8iF48tDZdnCcOcc=)
                          5: EV3RLPCtuI3lLeq6ottkvu3RCX0.roa (hash: j3FY48aHBuxh9abdvmrJO1cvpOYjsUrGf4ptwj/I2mQ=)
                          6: FybzIFcZSE5lsnT6b5cIlMlH9IM.roa (hash: toJxUUA3/IPlRPBEPuQc0lw9h60Drcko4fLHszQIAow=)
                          7: IbQ-D2yslx0iHz7liSbbaOCcfXA.roa (hash: Kl5zFWGMECrHwpmHWu5uCTOc6qSUXrcJGW6y65HYm/g=)
                          8: MDI3PVTTBwcyecs75qaLcWEEgQU.roa (hash: J7xJKQP86jfo8IhCdMIH6NbDyPPPNyVklFSD5qYitM0=)
                          9: MNsgwpzMGo9ny09J-jp2iHl3erE.roa (hash: rsV4oTpDDAsXfrCe5I5AMLsbpMjSWW+2NPe89PcwdUY=)
                          10: NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa (hash: 8g5jKG/3k2R8GSQmnC21Ug5DsSBfIQTr0ptpHX5icAA=)
                          11: QQVkAwo--2Lt9xnTOmPMO5FGF7Y.roa (hash: bJ2Nfv2wZhNbOARIqp31fKQFXd4d6cW7n2uw7pHNCB4=)
                          12: SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa (hash: f9GEO2mKmV3YeM6oy8Q/SaJoAwb8zCw8nw1p8bg3GlE=)
                          13: aQCk6hvPoTmhPc0e5kydy3D8sWU.roa (hash: 6ETMfCfXE4+PmgEWBXrcFMAYtDdlxlq3pPGYTBG/KZ0=)
                          14: bT1D_GIGnTIb7UhfAkPO6nAxSAM.roa (hash: zt3d+v/4QH55XWn1NDaCM7sBKlqG8C4EgKfte1Y+FyE=)
                          15: dH7B0DaeyCDV-QwznQB8W2QHPrc.roa (hash: UjgYoN3aRA7tctag/yj4QVec+og5fXBAmkTeQQuaztU=)
                          16: fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa (hash: 2hWk6Tz7S8lDQWf6IFB7UfW3IQLP7xOfkykS1elEFd0=)
                          17: gMolns_uejn9VG4O2M9g9t6tvgo.roa (hash: pPHWNiYrbOjsjJvc3tnPANoOhTs+IAl6nKZxeY0Xyos=)
                          18: i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa (hash: yCustTGvO8JgJOXmLOMgvkNIm9AOeeXsZljacnVY85o=)
                          19: lI3KcK_JQBvOB3k2IueM3WHtrfw.roa (hash: Gb7bXt8QtmOseHG0MDJ5JR67PlBq2vdcxr+aQTeaaZE=)
                          20: mI7DIe-ZWUKxjXm68wpxaummpVQ.roa (hash: 8ILL3a5+iKTvSgugQcyufNykJWsVj3L0HY6IKspIJxE=)
                          21: mQTwlxrMVeib6W7__4VllTW-6C8.roa (hash: Ous0wtpwiez89Z5w9/QarT0NcGVwIRO+IhvC6Ze0CEc=)
                          22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: wCjSWNrvL6LyqcKZqhUmyBaAxQAIvdcaHGCJ1HsnUH4=)
                          23: ppW43VM2CosiQ0jXWBLP26MIgec.roa (hash: fkLyzmpdBhfbIOJrEyE+Zx2ZEoyizeyrfXYsByRxcls=)
                          24: qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa (hash: lgA7RrHTvmHBvzE9swyzozhILfgUmn/MQgrElmqhrAU=)
                          25: rUdLZ9H9NmIsZBannjA8IlEwiOU.roa (hash: UpDDwAK8lbQbhgQsmAizBJjhr50ngPTJj4DgWqUhhss=)
                          26: uazolYHYZBtijCrhgDu0uI9nLCk.roa (hash: PFT6HKinQsQ7x3TcytDfopexTxqZWQMq9Ui5wk2to2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9e:f9:8d:db:cd:4c:52:c1:05:19:d7:b4:28:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=a58a77417a73e7bc6b52cbfa21973b2b15556598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:65:97:da:80:46:0e:a2:e5:6c:ba:de:cb:
                    15:1e:8a:a1:d1:39:9c:9f:55:44:f5:1b:d6:17:a3:
                    de:e4:a0:26:f9:b7:59:af:d2:0c:48:80:3d:75:6d:
                    44:38:7c:6a:33:3f:03:35:42:c9:c6:a0:78:ae:04:
                    7b:94:70:f9:5d:ca:22:cc:62:60:e7:5b:e1:31:7b:
                    3d:14:b4:0b:9d:68:33:89:db:d3:48:0a:5c:7c:45:
                    7e:79:25:bd:0c:60:db:48:87:d7:dc:9a:3f:06:c2:
                    ab:b4:8c:b5:3d:b6:36:2d:09:26:26:dd:54:4e:f2:
                    65:58:81:30:36:7e:96:6e:1a:85:28:b3:a3:09:12:
                    2b:50:81:23:72:f6:c8:d7:7d:d7:0d:0b:3d:75:ac:
                    a8:9b:b0:8b:c3:b0:cc:46:e9:7a:07:51:1d:fc:d2:
                    78:e4:ca:7a:da:75:bd:79:0f:dc:74:83:3a:0c:0e:
                    67:57:be:d4:73:83:a9:5e:da:e7:16:d3:88:5d:b8:
                    25:64:52:b0:db:c0:88:3b:44:83:24:54:bd:9a:f7:
                    c4:e6:54:72:ab:b6:7b:ea:02:1b:9b:77:ca:45:89:
                    52:ea:01:b2:f9:a9:17:40:6d:46:59:6d:6d:a0:a8:
                    ab:ed:1a:f4:86:4b:af:9c:02:d7:19:ea:0c:59:99:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8A:77:41:7A:73:E7:BC:6B:52:CB:FA:21:97:3B:2B:15:55:65:98
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:5c:d5:11:2b:52:84:bc:59:e1:34:75:58:8f:2d:53:6a:
         29:03:84:5d:15:7b:d4:a1:ae:98:df:3d:f3:a6:fd:f6:43:f1:
         09:62:80:06:0f:9d:19:46:3b:aa:72:1d:71:ec:0e:41:31:f8:
         4b:1e:70:d5:e8:54:a2:90:43:95:20:18:ce:4f:a5:d5:50:6c:
         81:45:f5:aa:95:74:25:b1:15:8b:6d:8d:a9:d3:1f:f5:0c:45:
         4e:e9:59:84:56:cb:b3:e0:3e:2d:3c:12:2a:84:93:80:1c:4a:
         99:40:15:0f:ec:54:b3:51:d6:e5:24:0a:5f:74:78:fd:26:03:
         79:e5:3c:e1:f6:13:28:61:9a:b8:c9:bf:a3:a5:9f:34:52:01:
         7e:5a:d2:0b:d7:ff:0e:19:a7:0c:9b:40:9b:34:f6:81:96:d7:
         69:e1:41:4b:e2:b2:5f:f1:f7:9f:fa:78:16:c3:c6:f8:c1:67:
         7f:65:43:19:86:f5:ba:c8:99:12:ff:52:f3:88:36:ee:bd:e6:
         42:89:9c:65:15:2e:c8:aa:4f:16:f7:17:a2:95:2f:b3:51:cf:
         cc:eb:7f:d1:66:fd:fc:7d:bf:2a:08:80:3f:86:ae:ba:8b:84:
         d0:db:07:10:78:aa:a1:dc:5a:38:f1:87:46:08:dc:2b:49:ce:
         7e:14:e7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----