Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
File:                     d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft (raw, json)
Hash identifier:          gJ+0nAzUsP4RsmUCt4lPIecpNsVXan6AgfoT8ivhnWY=
Subject key identifier:   86:D9:01:D8:94:6D:D9:BC:56:3D:BC:04:0F:03:DC:9B:D8:B9:53:9E
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       01962E2ADDCF1767A4FBF45675861DBD2B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
Manifest number:          156D
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: 6OE9SiBXfj4CrhXl1IhIqgML0B4.roa (hash: I+4fgDm8h6Gl2QM6feCA3XQ/vqIKkpArxBydFon12po=)
                          2: BFOakhPnuL0L7mtZczMTb1C4Te4.roa (hash: IN5v1SH94sVq7W7KBSVjen81W9F0epiDV9txEvMGmR4=)
                          3: DhQS4vOYDF6H_8OWg4SHjhbpiRI.roa (hash: fNK2myED2q9q2doGfvQzo78kwtzYcmHRZJlkYm51Txg=)
                          4: G3n1fmpvxWOzjbB1db8Vj90w1z0.roa (hash: V2uHJgqy+vP8ErQ/TWqwyd3ruJ62gj12CXBlt1NsI04=)
                          5: GbLhCb7LtppG03iqg1JrQPxPGik.roa (hash: Nhpdg3evar8Wgs90fQIra7qhNWc+KSECGcaKhukai1s=)
                          6: H9YsoSVqujSzIl1jC8bNi8oWfWg.roa (hash: 0dy9ycp0QLf3d25OkGOB0YPWnPgDY1tgsWVu7Y1vx58=)
                          7: JEzxWWenT3GfTXkwl9vUyNpy6Ns.roa (hash: qgR7gOl4WgMIXNhv57wtr5r1gDfvvLSYLQY7icBJ4YU=)
                          8: KlkPll-2eT4OEc7JEVeBjKeKFvY.roa (hash: D5i0rk6m1yJPb6vmyolamvrhIx1gvzHDS5KpZlKyc8E=)
                          9: L5WtoV3BFHEh7ee302wn8vi_VdY.roa (hash: aeS2KxRTadI0bQvnm7vgoZxmnQFSj7clIU01Ondzlk0=)
                          10: Qd-7MuUT4GYh0J-MfEHgFFh8b4Q.roa (hash: c/5l1GiDiCB7mLH+5TWxHZaDa+CFb25O/VddyUT+Q4A=)
                          11: RodzSko_vmyzPqCKuCKq3cJkGq0.roa (hash: UPyFlyEqZNcFpcK848BEBEE7TBg3Ypn/rHLne1CII1k=)
                          12: VweKz9j23hz-Ksk5OZcJDAktVRY.roa (hash: ymNCGzRMIuCrkxBZjyiuwPjst5RrxUcCCAVY7LL5IWo=)
                          13: XQuJXpDkA9qYgxcQ38huwth57wA.roa (hash: DXlOkVbY/RHDCgHRhEXU+SDyImy4MVnIFTYuOjrcEzE=)
                          14: Xug-JWqIvU_cGZO2X23AwQGwo1E.roa (hash: yZB0hX1SHdmsQw8VPl7LdiQvKzJkBdYGo5TH1U0pXwc=)
                          15: a4N6uZ3zLxFcWudvf4q59eJt-Kk.roa (hash: A/Eckh4mmsJ3JlwelGysLbD+UYW4yWmGq8d/OLHRzNY=)
                          16: biEUqCkAyoPq-Mnm3P1_OvhDdi8.roa (hash: Gi+zixTezsMvQDObpXCaUkc6hzyFUma3jDwHSH/UkhU=)
                          17: bkuVFSmwR5rEQDdMTdBk_JXXGss.roa (hash: 27OhIF6o+zBfja35/NnhhZLHyv4jDAhBThs7wTkygh8=)
                          18: cmTeW-ofpNY8BjH8cXTtwhADRzA.roa (hash: SuBfMr197wymIhNTs9zfHdUIhpZWN/FfTHb7Y4F5q/Y=)
                          19: d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl (hash: QHk1eHMkLsd1gzmPDMe8x+ugCuf7voXnTpsMvb874ZU=)
                          20: jVD0Cx22C6rtJhjEyMwl_d7ttOM.roa (hash: vrC9crcbkmlgTTSHswR4Ww7gI1l8vbnHNsq1l2jd/ok=)
                          21: kE7edc6RxVB8wHBrlQuyIVRBSOE.roa (hash: VgCrc55fFSMPGAF1+eEmgsiO+WwjxfM4Lli8mq5wNmg=)
                          22: ktYyB7Lo8mei1Js5I-I0yf-MCXU.roa (hash: Wuqa50eBmMkD+O8hs0aB4Jfbv6/LdAF4VRAO0szb7/E=)
                          23: nTYZ-KMsZnRAOylEgWxzRgkqcjE.roa (hash: G6392WelkXUUGAazTyZCXqq/F4O82Q1Be1qAJMLhnCI=)
                          24: o1ISKkD-Tnv8WDLjnHzvZxb8P6c.roa (hash: h+vO7xJkIP0Gi0X6/S1jhxnU4ZRO9Brsr/xSv7WCb00=)
                          25: phj8xSqpRWUthExdTnPQzXh3IiY.roa (hash: r7FDjUSXURVGsc44gHgkOSYVSnZ1xgiM8t2uj7Mcguo=)
                          26: tzNmVvB2-Kb7n7f7uGfrlaT_5N0.roa (hash: /5iZIN6C0RTqyaoEd2UqC7lQwSHOOr0DtjWIfNsZ0ig=)
                          27: y7gAm7kghjHHyhd8lNyuOvqL-gE.roa (hash: WTPaSKHOX9uHT0vFATOWJ6Sa/T+XEBB2nCNbOZzZ6VI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dd:cf:17:67:a4:fb:f4:56:75:86:1d:bd:2b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=86d901d8946dd9bc563dbc040f03dc9bd8b9539e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2a:81:40:44:7b:c7:1e:56:f7:a0:cf:18:e9:
                    1b:e3:8f:dd:88:e6:cd:19:88:35:88:26:89:e3:c9:
                    3c:b8:aa:cb:f8:fc:47:f6:95:0d:1f:17:88:a0:4e:
                    b7:97:7b:02:58:d5:ad:60:2e:38:fc:73:64:7f:fc:
                    40:6a:19:e8:d2:4d:18:64:33:c3:5d:70:44:b1:18:
                    64:6a:c0:e3:6e:ce:a2:47:c3:d3:57:15:d7:5c:84:
                    0b:dc:07:00:9a:17:04:05:6b:a2:97:5b:ee:32:53:
                    a5:f3:64:c8:27:46:a1:57:ac:6f:0d:5b:a6:30:8d:
                    7d:39:71:0b:81:18:15:e8:d9:42:99:80:81:6a:6a:
                    6b:f0:53:6c:7f:0a:d1:34:79:c8:76:f9:d7:17:3d:
                    05:e9:31:30:b1:e9:f1:ad:91:c8:b5:9a:f5:3c:6a:
                    11:0f:c2:4a:43:d3:14:78:75:63:68:7f:9d:17:b4:
                    3f:d4:40:8f:cb:e1:ed:89:9d:5f:68:37:16:56:67:
                    60:82:48:c8:d7:11:60:f7:6b:9b:e8:b0:da:6c:7c:
                    38:36:a2:ff:5f:0c:47:7b:17:cf:49:7c:31:30:a5:
                    87:a3:1e:2d:54:a1:15:4d:af:aa:67:e1:2f:5a:07:
                    cf:fa:26:fc:ac:e1:66:d2:18:9d:f0:3c:0e:13:c9:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D9:01:D8:94:6D:D9:BC:56:3D:BC:04:0F:03:DC:9B:D8:B9:53:9E
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:c0:00:e4:c3:87:fe:3e:95:a4:a9:b0:57:0f:cb:e8:8a:
         45:7d:81:97:ec:10:80:1e:93:4f:bd:58:96:0e:48:c7:bc:a9:
         a3:04:18:58:80:ba:38:4c:3c:f6:71:44:df:64:7e:f4:b2:cb:
         b8:2c:32:1a:0f:51:fb:95:3b:31:ff:fd:1e:5f:7b:6e:03:91:
         99:46:39:af:a1:01:8b:8b:93:c7:e9:ca:f8:2c:fe:7d:f9:78:
         41:7f:94:af:64:1d:0d:7b:ee:b9:5b:46:36:86:20:b9:64:b3:
         22:bc:4c:91:49:0f:b6:54:65:6a:a9:d2:fc:c2:86:79:43:59:
         6c:38:df:ba:8c:60:7a:b9:b3:6e:5a:95:96:54:76:de:0f:26:
         45:c0:e5:5b:71:34:0c:96:17:5c:b1:80:f5:3b:39:3d:67:77:
         76:7d:1e:0e:f2:ef:b8:22:76:e4:2e:63:98:5c:0a:fe:5b:ff:
         5c:57:56:be:3a:ca:c1:33:94:16:80:4f:90:3b:e7:a3:bc:72:
         ac:d7:6b:2c:1f:90:e0:ca:12:5b:26:5a:8d:20:1b:df:b5:92:
         8b:e5:88:d5:55:7f:43:0d:ad:d9:15:21:49:25:7f:1a:2e:f8:
         6d:71:36:5b:4c:9b:b4:66:1a:27:e3:d6:ab:71:60:5a:f8:7c:
         5b:2b:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----