Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
File:                     um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json)
Hash identifier:          7wrbUJvn0b3Ojd2aPfa7qWi0tBeXpqdmRyvO7+njyCM=
Subject key identifier:   9B:70:5F:20:CE:B7:11:03:F4:9D:0B:B2:98:4F:16:BB:89:CE:66:85
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Certificate issuer:       /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial:       01962F06FA948F0E868D06472D84BA41A75A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
Manifest number:          1521
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=)
                          2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=)
                          3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=)
                          4: 4f_2xWjzr5fFrbiUmyj7b2GAR2c.roa (hash: 40fajzcms2HhTqbHykP7HgDBjZNVjd1JCZs/OBDeB3w=)
                          5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=)
                          6: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=)
                          7: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=)
                          8: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=)
                          9: ChAwhBWdFbK8H8OgjXlyx4EvkcA.roa (hash: S4V5zsfBw8Krxjs2yY7Dwj9hG1haukhzyaUt11satjo=)
                          10: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=)
                          11: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=)
                          12: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=)
                          13: GgWpcVuQcB3Rqpu4xIatLiANk7w.roa (hash: J4tkkEw9G4tBLPpuFam4guXUEl+6lIMfeuNV12F6G2g=)
                          14: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=)
                          15: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=)
                          16: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=)
                          17: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=)
                          18: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=)
                          19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=)
                          20: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=)
                          21: SyFn9gXv-LiQEpx623FW7zp76Vs.roa (hash: TJf87iNCfO1Ewq8QElsjey5+veJYI8oBKv+M65Z4Cco=)
                          22: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=)
                          23: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=)
                          24: _B1wZHtnKd18HaoeOE7IMpvthTE.roa (hash: GM2wXplOCIgkJTK+wMIqO8JhJE765YS5HF23fM9LJNM=)
                          25: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=)
                          26: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=)
                          27: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=)
                          28: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=)
                          29: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=)
                          30: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=)
                          31: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=)
                          32: lMNVACJ-h1nsjjrfMh03NkCllrM.roa (hash: ivpqbHCSo3OaWnV7LbXMClcyXI+IHXLVT6OjKDwZgak=)
                          33: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=)
                          34: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=)
                          35: oTPGJVYlb7GDuOecchScOtyVmK4.roa (hash: HxM+IsllX/8+gKO8ZDG7/ou6XQ0BBMHZq9SzkhezbL8=)
                          36: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=)
                          37: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: KjIk8VyCi7XMWlfKENEUNVfKQxG4zeAMh9IeAOxxDWg=)
                          38: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=)
                          39: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=)
                          40: zGfC91qQV1Kiw9lJXOxhhLdA8YM.roa (hash: Dw2IdvFg4+SBQDwswZOmKdsoBW8A8qVDYpgf92qGA+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:94:8f:0e:86:8d:06:47:2d:84:ba:41:a7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=9b705f20ceb71103f49d0bb2984f16bb89ce6685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:27:6a:ce:a3:46:0e:71:f2:fc:8c:f6:f6:
                    77:3c:d3:38:0d:99:0f:4c:25:c4:7e:e5:5e:9e:44:
                    67:25:f0:16:3f:6d:c8:52:61:4f:cd:b6:93:0a:3c:
                    43:f6:1c:13:0c:e5:1c:29:64:4f:f4:49:50:d5:ea:
                    2c:c9:3f:41:de:b8:51:b0:85:22:45:b9:2f:63:7f:
                    ef:f2:2c:3d:0f:71:91:1a:48:98:a7:b9:56:fb:91:
                    9f:0d:76:7d:58:87:f5:52:43:8d:c9:84:e1:be:1c:
                    3c:65:4a:2a:20:55:8b:73:c3:e0:0b:0e:ed:66:8d:
                    50:79:9a:35:81:c4:45:9b:c9:fe:0a:a9:f8:4c:0d:
                    58:92:7b:f5:b6:e8:6d:75:9f:3a:39:3b:f2:cb:ce:
                    0f:2b:0b:04:09:1d:c2:d8:7a:aa:81:34:ba:b0:ca:
                    f5:bc:06:59:2a:bf:9b:27:df:68:f1:09:6d:cd:9d:
                    43:1d:7f:f3:1b:37:05:40:24:2c:ff:95:03:2e:e5:
                    c0:83:f1:54:7a:6a:47:53:71:5e:18:80:b1:56:8a:
                    a1:47:98:d9:9b:96:03:cc:f5:7a:33:6e:94:d7:9f:
                    99:25:57:9e:e4:68:5f:0a:09:21:78:d2:60:b9:90:
                    2b:87:2e:f6:f7:8d:88:6f:2d:fa:bb:47:b3:52:9a:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:5F:20:CE:B7:11:03:F4:9D:0B:B2:98:4F:16:BB:89:CE:66:85
            X509v3 Authority Key Identifier:
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:69:be:d1:80:8b:ca:82:c5:da:b2:3b:8f:ea:d3:17:22:
         29:64:0f:0a:d0:e7:2e:eb:ac:e7:8d:86:e9:d6:2a:5b:8c:b9:
         d0:8a:f3:5d:18:3a:9b:dc:4c:2d:a7:b9:77:e2:b4:90:72:c0:
         24:53:c0:fb:76:ae:b5:60:81:a3:99:4c:8f:b9:b0:10:18:50:
         e8:8f:53:d0:8c:81:7f:6b:b4:5d:9c:83:ff:e6:c7:58:9e:0a:
         dd:5f:db:75:ec:e9:ce:f1:64:a9:26:57:f0:90:46:d5:2c:35:
         80:2e:2b:59:0a:2a:4e:c3:c6:13:7b:77:73:b8:6b:45:3f:81:
         f5:3d:05:f4:86:80:bb:b4:2a:dd:22:6a:b7:31:50:4a:84:70:
         22:e3:5d:e3:7b:04:27:4b:a7:40:44:4f:7b:b7:a0:d1:80:ea:
         c3:e0:6f:87:61:1b:39:a0:cb:ea:24:c5:26:60:97:1e:ec:de:
         16:de:39:dd:d6:65:16:40:49:79:c8:85:c3:5f:b4:89:eb:27:
         84:3f:25:64:9e:74:29:53:6b:1a:9a:4f:00:66:d4:49:43:69:
         67:79:51:d7:ad:07:d0:15:2e:cb:04:fa:76:d1:96:ae:a5:f1:
         ba:bb:36:28:88:cd:11:70:99:c2:80:79:1d:80:02:5a:47:5a:
         0a:35:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----