Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          7QYllKlz66g8NFM42Ee7BxC4y4ISoeimpIZwO6NGTLQ=
Subject key identifier:   A9:81:6C:1B:96:BE:90:EE:23:FF:AB:28:B3:F6:FF:85:23:EA:72:FC
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       01962DF444E3D20C8F716B3CE76ECF715FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0530
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: KYo3zW8HoaFgXbdgJ9dlSWV6T+3lZ8Pl1l073A7H2eA=)
                          5: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          6: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          7: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          8: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          9: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          10: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          11: _4-ItSG7lzRWqaVeFLJ47MKTBAg.roa (hash: numi1Mm92iPYflurCL97ngTmRb514cYINRaa5RuvK2s=)
                          12: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          13: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          14: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          15: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          16: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          17: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          18: nmIlkSXw6C8WkWVj6hI0bVg-2gI.roa (hash: nUHXIqF73O7wBBY96SxdeauHwHyuVlB3NyPq0pYeTaU=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: xfVr9fISlXEqAQiEKv6HOjoj5r0.roa (hash: E/Me9Hr6n61NIohLAXFLD6LM7KKjtEyjxNrmC/bwtgE=)
                          22: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:44:e3:d2:0c:8f:71:6b:3c:e7:6e:cf:71:5f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=a9816c1b96be90ee23ffab28b3f6ff8523ea72fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:1c:83:a1:ac:ff:14:a6:e5:51:24:54:53:
                    b0:7e:06:46:d0:ed:7a:ad:f2:94:dc:d9:4a:8b:e6:
                    fc:c0:df:a9:f9:a8:ea:a1:7d:7b:4f:17:4a:13:8c:
                    6e:c2:eb:a8:e9:2d:a6:1c:83:cf:b4:12:cf:07:b4:
                    21:c0:7e:63:94:bd:47:74:a5:d6:d8:5d:f6:64:10:
                    b4:52:71:b1:99:4f:82:f6:99:46:5c:75:70:73:70:
                    d6:f1:cc:74:6c:75:22:52:da:00:b8:ac:10:d1:eb:
                    47:ee:50:87:eb:ee:3a:59:04:09:4a:be:a4:9a:71:
                    db:a8:e9:68:be:ca:7c:b7:96:cd:58:18:17:86:72:
                    b6:f6:4f:c2:84:85:57:fd:ee:b6:f9:aa:8a:c0:7c:
                    88:e6:2d:3e:e7:fd:56:67:f8:68:7e:c1:bc:5b:82:
                    e1:ad:d4:10:c8:0e:11:59:b8:92:86:e7:56:64:82:
                    e1:13:c2:54:58:e6:58:59:75:ae:77:d9:39:b8:18:
                    27:32:bf:41:15:55:04:61:b5:28:71:77:ce:0e:7f:
                    33:ff:f6:b4:f5:19:4b:d0:57:90:93:37:27:69:95:
                    1c:3e:06:6a:3e:8f:17:9b:cf:17:ac:bf:4d:9f:48:
                    fd:7a:8c:f7:31:cb:8d:ee:a7:cf:05:09:6d:d5:68:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:81:6C:1B:96:BE:90:EE:23:FF:AB:28:B3:F6:FF:85:23:EA:72:FC
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:65:16:e1:d8:05:a2:17:97:fa:8a:13:22:be:88:b5:43:1d:
         3e:b1:56:57:4e:28:a5:ad:9d:b4:78:59:af:1d:92:e7:c4:bf:
         a9:e5:7f:80:a0:21:eb:fb:ae:ea:03:f2:ea:83:03:22:db:40:
         c4:74:8d:b0:77:53:5f:77:c8:a0:5f:64:fb:02:de:38:21:b5:
         79:77:02:66:4b:7b:8a:44:b6:d1:e1:f1:ca:b8:6c:a6:76:40:
         51:74:dc:e3:3f:3a:2f:68:a4:c7:1b:39:7f:35:2d:60:ea:17:
         56:7d:f0:27:db:93:96:89:7a:cd:0c:03:f0:36:da:82:63:24:
         c7:e0:7b:f4:c3:df:0a:e9:d7:86:91:0e:05:69:85:c0:61:cd:
         04:08:41:01:de:d3:a5:7b:9b:77:65:fe:dd:e7:b0:82:19:4e:
         23:bf:29:4f:b6:a3:57:22:88:78:80:62:2a:17:8e:37:44:77:
         8d:b4:4a:2f:c5:04:0f:50:07:55:f4:d0:d0:22:e5:06:46:e4:
         54:99:69:5f:91:4d:57:4a:78:16:25:ca:cd:22:2a:65:9d:e7:
         0e:fd:9c:1a:6d:3d:2a:85:c8:f7:d5:07:6d:c9:fa:44:59:c4:
         50:4c:7d:82:5c:64:c8:11:b1:81:14:8a:13:06:e8:7c:b3:2e:
         79:02:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----