Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
File:                     nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json)
Hash identifier:          dR2tuvPbgTqpHowngKx8E753/eMoG1RLsIQ2pLOd/e0=
Subject key identifier:   1F:F2:A5:C3:93:44:FC:12:C1:BB:35:28:26:2C:03:E3:96:D6:95:6B
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Certificate issuer:       /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial:       01962F07244C82C076CDBF692649DD2D386E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
Manifest number:          0EB7
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=)
                          2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=)
                          3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=)
                          4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=)
                          5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=)
                          6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=)
                          7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=)
                          8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=)
                          9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: cGWmUNTmq/8kf66sK42+tnK9nPLHPUPqu8UbNi2//00=)
                          10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=)
                          11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=)
                          12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:24:4c:82:c0:76:cd:bf:69:26:49:dd:2d:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=1ff2a5c39344fc12c1bb3528262c03e396d6956b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:06:b3:bc:10:8a:0e:93:ac:74:6a:06:c8:
                    43:1e:6d:22:69:70:ee:62:9e:a2:d2:f4:80:cc:66:
                    4d:af:f8:eb:e8:a6:ef:96:28:f8:ef:3f:3d:47:10:
                    ad:2e:78:59:ee:13:46:53:f0:2c:b2:8a:ed:df:50:
                    68:d2:8c:10:0e:68:99:a0:1f:ee:80:15:ac:d7:39:
                    91:cc:a6:47:cb:f8:7a:10:b1:b9:31:80:c4:22:ce:
                    8d:88:7e:74:65:20:b3:0a:2f:2a:80:c9:b7:a5:9e:
                    7c:01:a8:4b:a0:f2:de:bf:25:5d:33:33:c8:7a:77:
                    5d:f9:ac:da:c5:0b:2a:97:2d:28:3e:94:51:eb:cd:
                    0e:5d:69:d9:2e:58:11:17:78:69:72:5a:f6:74:ec:
                    79:3c:f6:08:c6:a3:9f:e3:05:cc:89:ae:fc:e1:58:
                    24:a9:59:75:fd:ca:5b:0b:55:cb:c4:05:82:43:d4:
                    87:7b:c6:7d:4f:5f:f1:c1:70:47:07:31:70:8e:a3:
                    94:72:19:21:2f:47:e3:68:67:55:13:f5:46:59:24:
                    31:e7:a4:0c:31:f3:aa:0c:50:6f:d1:a3:d0:98:f5:
                    3a:7d:cf:dd:62:ee:82:54:32:27:86:71:8a:31:fc:
                    17:06:5f:7b:bf:b3:b2:c7:22:df:5e:bf:a5:f9:79:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F2:A5:C3:93:44:FC:12:C1:BB:35:28:26:2C:03:E3:96:D6:95:6B
            X509v3 Authority Key Identifier:
                keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:0d:f6:4e:cd:53:ba:ea:3e:f9:39:f4:c1:21:39:70:ed:
         3e:70:ac:2b:57:62:b9:3b:58:f3:40:45:25:ff:84:4d:df:c5:
         ac:25:c1:65:30:64:2b:04:9f:54:49:f0:d0:7a:08:0b:98:e6:
         fa:16:dd:a2:7f:24:3d:2d:78:35:1f:a8:05:b9:21:24:a7:3e:
         fb:e8:35:4a:79:c9:e8:87:8b:e3:d6:2a:ae:91:7a:9f:a2:97:
         6b:db:bf:03:1e:75:87:2d:30:aa:c0:cc:7b:d3:ed:48:bd:08:
         ab:33:e5:97:db:d6:41:25:da:e9:42:cc:d3:dd:6a:5c:33:2d:
         6a:d8:55:bd:64:93:37:f8:e7:5b:a5:96:af:e9:db:77:cf:00:
         fd:28:22:f5:99:7c:97:29:1f:48:88:e2:e5:7c:02:37:28:14:
         2c:43:14:ed:31:93:7d:d2:ef:f2:7c:97:d5:f0:25:ad:24:e5:
         79:e1:df:22:e0:35:ae:3b:1b:74:1a:2a:0d:b4:68:9a:a1:07:
         9a:62:ad:a0:b1:85:bd:70:47:78:f5:9f:b3:07:58:02:07:bb:
         56:cb:0f:28:20:f6:82:d7:07:7c:ea:36:d8:14:ef:44:50:c9:
         1e:95:13:50:4f:8a:54:bd:41:50:35:58:b7:a1:78:a4:cd:66:
         e9:88:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----