Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File:                     1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier:          XWrwntq9z4efY20yxvXjPlxgLMZg3KQE8X1Sd9IjUsc=
Subject key identifier:   43:C8:0A:5A:0B:D4:19:DD:80:38:51:97:9E:9F:8E:24:20:14:E0:22
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       01962E61A321BE78324563A2B8BC42B1E523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number:          1571
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: 9/YVLqc2rXgYGBoO9U6ZO/WI6nvmqO45QZANbTtQ3Zk=)
                          2: 4SmPOBdpSKZNKtr78EsOFYPAPOE.roa (hash: HzixWgbqoGXlXoQ/Uo+IAJ05tBlvGv7rMPAyb2c7P3o=)
                          3: 97T1FKP4AB1wFygDf_IjY6gh_W0.roa (hash: b+uL1I+CF8JWEeaj5CSinTGLvmB9uwh7dpcntKLQtgU=)
                          4: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
                          5: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
                          6: O4g-iW52UftISVHkW3-yPro5wkE.roa (hash: W/Q5kD3b3VDNOCdF88ASTOOY5t63U9RDRHLUOjnN+6g=)
                          7: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
                          8: hiw9x9M7apKuRetj8qEUAbmQtf0.roa (hash: JkGusM+dPuvy9HsNZt/bKA3hTyV4JBTt3zO2F1piB10=)
                          9: i0EkDiLWxZt-jEsL0cMNpe5XN_g.roa (hash: G7FDEuJ7pS++rTMrLx6g2e+BM36bD3Jhu4w4OIPcRCo=)
                          10: mNJTLNjj6AfeuCVnfV00ORno5GU.roa (hash: NE3MR19bhv1xyo6MpzB3l+rz7Un7WTCoqeufjmUuYPk=)
                          11: pkSBtZa2n54OQ9klkA4JFzfD7qQ.roa (hash: 2zQqYCNz+ENrqctrE57v3LCQOLHRix/k/wGkfpVsZTY=)
                          12: r_oI4FkYT4UMo61-qMxf7RT56as.roa (hash: QHRHaQp7G3TlD/hE646hPxyl+I0vmCCHbjHcyZSCcBU=)
                          13: tjmex91I7dJnD023VIWq1boNPLk.roa (hash: d7b90ryBvfYcu1eHmFplVZMJtAYKyEN3QoPLIOWafyY=)
                          14: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
                          15: vRM-SZQZ9WJ0XQQ278XKE1t0Eew.roa (hash: ox+5CMMHJyI+TwmBaJfMwL8IhAyocB1xWi95CBSAXM0=)
                          16: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
                          17: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
                          18: zh3tYkF9W9B32ZhFXjZlqURTi8w.roa (hash: LuGe5JNnsMIyvni5W1sQYvdwd6Mx268nNPMzIZyt2nI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a3:21:be:78:32:45:63:a2:b8:bc:42:b1:e5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=43c80a5a0bd419dd803851979e9f8e242014e022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:19:f1:07:ca:90:b7:ab:b0:dd:1d:f7:10:
                    6c:78:12:a4:87:0f:a0:77:03:f7:85:ce:fe:99:23:
                    41:6b:9d:13:68:23:af:21:4b:a8:6b:ce:d7:59:9b:
                    f2:f8:d5:56:b6:63:a4:6f:ec:64:a0:5f:57:13:15:
                    81:84:40:1d:b5:2a:46:10:d8:4c:eb:a9:c5:7b:b1:
                    01:30:45:f7:d5:18:fe:fe:08:e8:aa:ef:14:68:0d:
                    03:28:83:fe:9c:ab:86:69:d2:3a:b7:36:9f:53:4a:
                    82:4c:d5:6e:8f:52:a9:40:22:1a:74:5d:a0:9b:8f:
                    45:9b:11:76:2c:b2:d4:7d:8a:06:5d:96:d0:ca:84:
                    48:f4:9f:93:c3:d1:c0:46:cf:6b:17:fd:c8:ee:36:
                    6e:90:83:d6:65:37:68:af:27:9e:1e:77:25:58:db:
                    71:4d:04:71:e9:06:0a:6c:5d:22:b0:2b:61:88:57:
                    fc:06:5c:d6:20:ff:c5:c5:42:4e:1c:23:5a:b0:95:
                    7e:82:0d:50:ee:ab:d5:30:db:5d:e8:7d:c4:7b:aa:
                    fe:d8:90:9b:0f:0a:ca:cf:33:f9:13:db:88:df:c7:
                    51:e5:89:12:58:60:78:fe:85:fd:02:d1:42:14:24:
                    0c:77:0b:8d:7a:0b:46:ac:11:f2:14:03:1b:f5:4b:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C8:0A:5A:0B:D4:19:DD:80:38:51:97:9E:9F:8E:24:20:14:E0:22
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:d0:18:8c:e0:58:81:a4:2e:c3:03:9b:18:5a:d8:21:59:
         7c:6f:bb:3f:36:0e:18:90:ed:8f:ee:b1:2e:80:e9:56:1c:93:
         78:6c:5e:44:36:ab:de:fa:c9:a0:bb:38:77:88:32:12:b6:9d:
         e8:25:b4:da:2a:83:08:8e:71:37:f0:7d:f7:d8:61:ac:9d:18:
         c1:67:af:83:b2:bc:da:4d:f1:e0:07:22:be:22:f6:12:5e:0e:
         c6:41:37:5c:1f:42:53:74:10:4f:a7:6c:30:de:ad:11:76:63:
         90:14:11:69:a0:13:1c:9b:30:6d:78:93:1e:46:67:83:f3:61:
         00:4a:2b:4b:7a:a9:e7:b2:ea:4c:ab:71:0a:10:f9:a6:a3:8a:
         29:46:a5:89:97:6d:8e:a6:d1:93:d1:1e:63:4d:17:a2:6d:05:
         ac:bf:51:3f:8a:f4:d5:c1:ac:c2:b4:ab:9b:5e:30:c0:31:28:
         f3:89:d9:ef:27:27:7a:f9:7e:a5:b2:83:44:fb:e2:96:37:06:
         bb:ba:85:44:34:ab:02:83:a0:3c:0c:8d:49:97:3e:32:d9:10:
         ee:1e:1c:57:5b:0e:bf:30:39:67:85:64:2b:07:07:a9:48:38:
         c9:ae:60:5e:d5:1d:56:37:99:c7:8c:b7:a6:dc:14:a5:08:3f:
         fc:27:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----