Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          E7BO4/nOwPq0drubuT/oBGrExnNa+8Uz9hQbwhnoh9M=
Subject key identifier:   7D:9B:0C:2A:DC:D6:1A:31:3B:1C:50:5B:EC:DD:ED:59:3F:C2:B8:11
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       01962F066683A5D47D6DBCBE73FCB73F5D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          1019
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
                          2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
                          3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
                          4: CDi8vSg_fdYRotnSbMRPDSasq6c.roa (hash: 7OEMcqwogdkJNcoA2dzyUv5/KIyWaJVisinKvEvTiik=)
                          5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
                          6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
                          7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
                          8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
                          9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
                          10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
                          11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
                          12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
                          13: fyZQsu5bzOst03Al5FJRpvSLsoo.roa (hash: MRRTMhVAXN/buVo3idrb+5O9n9y8Lo0sdRtwg3OeKfA=)
                          14: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
                          15: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=)
                          16: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
                          17: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
                          18: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
                          19: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=)
                          20: t8HA_uc7gb7j7V6zDu16rLSfmbY.roa (hash: 65eTp9NXdbJh5u5INSJT1dWSnT06TM3hY9aEgJ3l7Ew=)
                          21: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
                          22: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: CsU5lVVeXr8wwZoGhYXu3fu722m0OHtCqurYPittHM4=)
                          23: zvVbccPOezRcenUxgZYT6IshvbM.roa (hash: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:83:a5:d4:7d:6d:bc:be:73:fc:b7:3f:5d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=7d9b0c2adcd61a313b1c505becdded593fc2b811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:a8:0a:9e:bf:9b:68:ca:d3:7f:92:a7:a4:
                    b6:00:c0:d9:2d:56:61:31:a9:11:68:d6:f7:6e:79:
                    4d:35:52:23:81:76:ce:5b:3b:e5:1e:7f:a2:b7:63:
                    83:f5:ea:46:e3:57:aa:82:b9:4c:d4:89:6c:37:3f:
                    c0:29:82:43:f1:48:ce:26:37:65:d8:c4:a0:d8:78:
                    b6:28:b1:c3:28:b8:64:8b:9a:c0:49:42:ff:d2:fa:
                    50:cf:54:50:e6:39:e1:83:2a:3e:4c:02:e0:96:6e:
                    52:75:ac:c5:86:10:2b:9a:32:cb:70:c5:04:56:70:
                    8f:f4:16:eb:b4:3e:7b:5b:35:93:a5:53:dc:39:31:
                    eb:f1:0f:aa:5a:f2:f1:b1:c8:7b:a2:9e:6c:6d:6c:
                    9f:8d:06:17:8f:84:00:cd:70:a4:cf:62:50:bf:6b:
                    20:cc:cf:7d:ee:7c:2f:69:1c:d1:63:ec:a7:4f:ae:
                    74:86:70:94:97:4a:53:8b:45:ff:39:73:41:39:5b:
                    f8:f5:79:d4:c9:ee:50:0b:6e:76:5e:f9:05:59:a3:
                    0f:36:37:f7:24:46:b7:4e:f6:bc:fc:c4:0e:ee:15:
                    17:a3:48:22:22:aa:72:fa:24:53:30:cb:bf:66:4e:
                    26:f1:65:6b:94:14:ab:fb:39:5f:1b:11:cb:64:92:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:0C:2A:DC:D6:1A:31:3B:1C:50:5B:EC:DD:ED:59:3F:C2:B8:11
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:46:15:e6:2d:f6:cc:15:25:53:65:76:6e:78:a5:e9:e5:46:
         a0:f5:30:c0:4f:09:b1:e9:f5:78:1b:04:69:8c:66:36:e1:2a:
         e0:e8:bb:cc:08:a2:2f:7a:38:9f:6e:70:18:34:c5:fb:ec:72:
         0f:7b:62:d1:94:aa:67:78:82:5d:28:e1:86:1c:8f:ee:17:c7:
         c6:3d:08:24:11:b7:3a:7f:64:3d:43:d4:cd:bc:de:1c:94:49:
         77:43:f6:70:5f:c8:4a:9d:67:dd:cb:47:72:85:21:1b:4d:b2:
         ed:b9:a9:b8:be:05:64:58:0a:bf:e6:f3:a3:ba:6e:7d:bd:57:
         3b:48:92:59:bb:f7:4e:6c:27:77:d1:33:04:bc:a0:30:01:4f:
         c8:9a:72:f3:b6:02:e7:ba:e5:52:32:ba:57:c5:13:5d:32:2b:
         09:5b:8b:f1:bd:26:5b:79:08:6f:a9:0d:14:bb:23:17:9b:85:
         f9:ae:41:8b:68:fa:24:c9:d8:a4:25:c3:51:c0:39:f0:ee:8f:
         f7:25:1b:58:cc:be:0b:c0:f0:a3:34:5a:57:ab:32:62:df:77:
         45:fb:c5:5a:88:76:0a:45:00:51:95:12:d5:0f:f4:55:0e:ae:
         24:c8:57:f4:9d:d5:8b:ac:72:dc:bc:57:c7:21:55:b3:c2:22:
         71:56:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----