Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File:                     10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier:          sMBvTp+UN71L6xz2STKLJCrt3J+yHDmlgJqbBbZgwcg=
Subject key identifier:   3B:3F:CF:98:77:99:30:AD:40:06:15:DC:71:E9:BC:DC:0C:8C:20:D7
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       01962F073FA3B28FD5F75B5E2F2109E1826D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number:          158A
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: j3Or8xaXWlZ9RiTN01nNszuk5GXxwkmpfhSwgCO88Hc=)
                          2: 1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa (hash: m8wwCwecp0KG21zfw+PHnUnhiPotAg/Kcldtw5QJnwI=)
                          3: 6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa (hash: qSzWqPlKHdtkFhY0N3iiqf+44mjD24bSbWGh/QepF9U=)
                          4: 7DLgW1_AEJnFRBnMP9DUZFvxjOk.roa (hash: raPeEfqiYW57HqMcse3rmHrWriulB1kH4YGu8bRaYZQ=)
                          5: 7fJvelaeWRPaeeOqQiVdqp5Exxc.roa (hash: u3Jlx57PaTOE1SJ38utPoD5WJWb3hvAAlv0+GWsZJkE=)
                          6: CjTVhDRUdYeYGpfw19vf8IdBcu4.roa (hash: mdffuqPdTXZApk9676GRStovFZhT4PmFv7pCJJymj+I=)
                          7: DvLbsc5ECTtzWXwAHat2lS2CmCQ.roa (hash: 27SjmQLahfEV8/oOJ8A2X0mKS+LdBuzCoqfA36DRon0=)
                          8: E8kn7aEukt3A02XfkuhthKBKbNM.roa (hash: Tt0umHn7tFpaKFeQtx4HB3IwGyxvBq1weMf6aMmIN9c=)
                          9: Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa (hash: 6g02bbz7+35Jk54vCdrzHk533LcEU45qtdmE3cJZevQ=)
                          10: GysfUH2MCfjA8nLdJEk_MWpeRaY.roa (hash: FTtF1KAkY5eA9jWzzhIkCpHcwIHK9I+CYjxuXsSKzrw=)
                          11: Jv8CRfjds1b_ZfNR_DA8H4cnRe4.roa (hash: 73nQMY7oUme6InpZuiFQ8pzh3gvcuZ+jCA6e3CNfQE4=)
                          12: JxvXv1SK_8H7hNIOu3azheEUN_c.roa (hash: x34KV2+MPw2bH9bEpIO2qyGptTiGLHv6QYjhlgGztgA=)
                          13: LmQkPTctK2jSGiSfsndjKmsIN1s.roa (hash: nFCXSPzYZ400StRreKtw2z+wi7uGbR4CjXlF+FAF7u4=)
                          14: R4plGPMvWUjpa9aukliAnhzGe2A.roa (hash: oscewSfDrM/B93KPAN0LoRkJw9vGJj8ctioIUb2phK4=)
                          15: Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa (hash: oKk2du3XesafVCaeuT8l0tzTai4bCgh0qNTFPpfoKhU=)
                          16: akkUXfA8yjmbAbge7T9s-UuKdck.roa (hash: bTuwJwUzkex/N9xt02kabUmVlqjLA6HLXLMaFWG1Vj4=)
                          17: dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa (hash: jx6o6656P1/2uAu6tNuMhpveGEMTalzlqd0P2gLiCYA=)
                          18: dT4eKxKuiMlejujStpkeBlqhlOM.roa (hash: jTmPsaj5YAbHSTlj3nB1Krnj3ip2XzfaIfy6VeLkbfc=)
                          19: eXmLXScgkQlZFJY2owYgI3HJtns.roa (hash: aE7sjemkm9QvnBnknfgKs5kPN5UFKUUkPmfsuOVG/yw=)
                          20: gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa (hash: wCggpARdDyZ/wAC1b4ExDASBW4uAEwHa8r5dk7EAX70=)
                          21: iPBzS_uwUzrjrIw4HXWeXeuGKQk.roa (hash: YuRhgQ6UmgVdtdBtX9QYtthLyJmtsPqkTXpg5SmzCCs=)
                          22: itabYXi3irEL53byV06jkZ3aC48.roa (hash: QjaQucmPtw8duEVnsbQImiTK3kNOasMc0swqbwK8Lu8=)
                          23: v7T9_oyFYAPN_vUJUuEgZ_WQNJI.roa (hash: XchZv6OupInQB4mmV3EszoeFc599qe/XG+jbFEKYskA=)
                          24: zZcPwXd3-9CVbOi6b88i7sOrBco.roa (hash: 2GF7Rjb8NN/bKnG12nbz2lxITDWGz7Whf8AG3sw8XcQ=)
                          25: zhUAhL2EdvfFS-YlGh5Iqcos6Ww.roa (hash: gyYfNwxUTJ6w/PF/66IV9SQklQuOl14GHolxHTxn8Mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3f:a3:b2:8f:d5:f7:5b:5e:2f:21:09:e1:82:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=3b3fcf98779930ad400615dc71e9bcdc0c8c20d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:d8:07:4c:48:a4:89:96:b9:d6:fe:c2:1b:
                    ca:18:e2:ed:1a:96:d9:ed:a5:06:17:bb:b0:87:2c:
                    9e:fb:6d:d2:74:45:49:b7:5b:bc:df:e1:50:db:ae:
                    8e:88:59:46:6c:80:4d:60:5b:29:e8:09:b2:db:db:
                    1a:f5:e2:5e:d6:7b:88:85:18:42:e0:8c:f0:bf:e2:
                    b5:e5:7a:bf:46:a7:8a:de:f0:93:8c:63:c9:c5:44:
                    16:0f:03:29:9f:0c:b7:ca:b0:0d:1f:14:ec:15:fe:
                    11:94:6c:44:09:58:51:ef:77:60:9d:dd:d7:a0:41:
                    d4:af:12:bc:e7:39:8e:70:34:e7:a8:f6:1e:87:4f:
                    8b:0d:a7:34:06:46:e0:30:ba:1c:8d:ef:b6:53:98:
                    ae:01:55:1a:2c:d7:dd:6b:44:35:25:3b:32:77:ea:
                    8a:da:56:92:f8:f9:9c:8e:fe:83:94:6d:04:8e:44:
                    c5:5a:5a:7b:a2:52:6c:57:8b:b5:b2:f2:f7:7c:c5:
                    dd:d8:dc:73:b9:1e:3c:99:f8:da:ed:ed:31:7e:68:
                    2a:37:7c:32:2b:6b:db:07:e0:90:15:67:32:9c:91:
                    5a:43:3e:79:a8:15:cc:de:76:0d:8e:2a:06:07:a9:
                    59:2d:a8:5f:8b:b0:1e:9d:07:45:d1:c8:8c:a8:c2:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3F:CF:98:77:99:30:AD:40:06:15:DC:71:E9:BC:DC:0C:8C:20:D7
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:32:d7:e2:4d:5c:16:ba:2d:5b:f6:65:f1:33:ed:80:9e:
         ef:f1:f5:09:14:4a:f8:1a:e2:73:60:a3:e4:e0:46:3c:a4:77:
         0e:67:66:f5:c5:ba:3e:93:be:1c:15:f1:48:43:18:54:64:e1:
         65:a7:02:fb:ca:07:6e:9a:94:83:bf:21:8a:e4:25:f9:8d:ff:
         f3:41:34:3a:db:1e:9d:91:e4:c1:25:e5:e0:29:93:df:54:94:
         b3:1c:c1:ee:22:37:f5:c9:45:60:ba:67:5c:2b:cc:57:d6:bb:
         1c:17:c1:65:a7:a6:72:39:e7:71:3a:d8:8a:3a:ad:6c:ad:45:
         20:04:d6:7f:41:a3:09:78:72:9f:6d:2d:9f:0f:e5:48:1f:4f:
         8e:81:8a:9b:5c:7b:b7:3c:e9:76:17:93:d7:2f:65:0b:6f:47:
         57:43:ec:5c:35:16:68:26:ba:62:a2:5e:0f:9b:4e:e1:e7:f9:
         87:d0:97:e5:7d:24:6b:6e:07:21:4d:ae:26:8b:f1:38:c3:ec:
         3a:9b:f8:fa:e4:0a:aa:aa:63:97:5d:0f:30:37:a8:ce:73:c1:
         da:26:02:84:2a:39:11:5f:80:fb:aa:bd:9e:4d:4f:c6:93:da:
         19:3f:36:19:88:e4:41:31:da:48:21:2f:44:48:2f:1f:7d:2e:
         3a:95:45:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBz+jso/V91teLyEJ4YJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjUwNDEzMTIwMjA2WhcNMjUwNDE0MTIwMjA2WjAzMTEwLwYDVQQD
EygzYjNmY2Y5ODc3OTkzMGFkNDAwNjE1ZGM3MWU5YmNkYzBjOGMyMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00/YB0xIpImWudb+whvKGOLtGpbZ
7aUGF7uwhyye+23SdEVJt1u83+FQ266OiFlGbIBNYFsp6Amy29sa9eJe1nuIhRhC
4Izwv+K15Xq/RqeK3vCTjGPJxUQWDwMpnwy3yrANHxTsFf4RlGxECVhR73dgnd3X
oEHUrxK85zmOcDTnqPYeh0+LDac0BkbgMLocje+2U5iuAVUaLNfda0Q1JTsyd+qK
2laS+Pmcjv6DlG0EjkTFWlp7olJsV4u1svL3fMXd2NxzuR48mfja7e0xfmgqN3wy
K2vbB+CQFWcynJFaQz55qBXM3nYNjioGB6lZLahfi7AenQdF0ciMqMIMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs/z5h3mTCtQAYV3HHpvNwMjCDXMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfky1+JN
XBa6LVv2ZfEz7YCe7/H1CRRK+Bric2Cj5OBGPKR3Dmdm9cW6PpO+HBXxSEMYVGTh
ZacC+8oHbpqUg78hiuQl+Y3/80E0OtsenZHkwSXl4CmT31SUsxzB7iI39clFYLpn
XCvMV9a7HBfBZaemcjnncTrYijqtbK1FIATWf0GjCXhyn20tnw/lSB9PjoGKm1x7
tzzpdheT1y9lC29HV0PsXDUWaCa6YqJeD5tO4ef5h9CX5X0ka24HIU2uJovxOMPs
Opv4+uQKqqpjl10PMDeoznPB2iYChCo5EV+A+6q9nk1PxpPaGT82GYjkQTHaSCEv
REgvH30uOpVF9A==
-----END CERTIFICATE-----