Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File:                     ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier:          9iukpVGxczmxmUDUBBpo45yzAzEogvHW6yuklZRlPKU=
Subject key identifier:   DE:B2:AE:4C:DF:A0:97:57:12:3C:56:1E:9F:84:4D:2F:EF:4E:BD:54
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       01962E2AD24E3F8339A680A831789B640E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number:          15DC
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=)
                          2: 1-6N5hPx0xq2c7q29UWdbn6yCLaw.roa (hash: 8u7Yg4bXQe+cUd86jQFUFDSWmRwndqREwz4S8+zhCLg=)
                          3: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=)
                          4: 4ukJa7HMkT7DBb2bYcfynHYUCtI.roa (hash: 50MwC4CJiyXyLJrN7qbX2kdlux7tIAVe2IdkMEIjYog=)
                          5: 56ynW-tMrHzaNsG7sH1wdFERI2s.roa (hash: IKfB0xjiL+k3DgvsHtHSeQu4uN+X+KGo7/petrFvOV0=)
                          6: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=)
                          7: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (hash: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=)
                          8: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=)
                          9: BBKqIumEvQjL8b0aHvJsG7_dv_w.roa (hash: sS+JRPTTyxHDwSasc/B/8kRhyr0hzWqPDr1h36aZ+vc=)
                          10: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: rjjWwPGbMwHOyl7BCZdXI5dYHiCgx3OZfE5DRqhvcL8=)
                          11: Gp66wYREOc1h9eDQ4Jl1zol0dGY.roa (hash: cbxRjqYTk6aDdWomh1V0dsmExBRlWyKb4b8IjMaBUTM=)
                          12: J5roBlA5puw3qKKb1FvCi0jVSzo.roa (hash: kfWG0LXc7ZWCpz1fFslOhZB1KDuyEVdFS239GndkOhM=)
                          13: LTyECeNCqqjLKolS1FQDHB0szi0.roa (hash: NMqquUf8k9Vi9iSmBBgAYLF5elpajsX2duO3ac5f7EA=)
                          14: NKKNKwKeM7BlTiZnda9Yz8Cz51k.roa (hash: eOYKSrPX4eKXl8WLWzwJl6t743IA9dMacABMn1dWxLc=)
                          15: Ojlwg9x75cm9yCRg1uRbtV9JzOQ.roa (hash: ogbfSoUm1OyL1fGJJ+4TLmGx+iphSaqafx5096ZmO90=)
                          16: QImgIZuTwnHz4p6WX58eUANoWgI.roa (hash: 55/FqeMl8dIDIdqqMZITlgQVVN1ShC0rREfu3bBTeKU=)
                          17: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=)
                          18: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=)
                          19: SJHvhaCpGVpEu19gR74F4_s00OM.roa (hash: QYvmEj267N2mBcF32kZnO8aAG/fQkwII3VAx268JC6k=)
                          20: TOO1C7Nfoo8I9jGT7tEPWovt-Dk.roa (hash: yJoNXkc40BQiMjXHd4+xV9gjbcua6Ni6TVwfda9wbCE=)
                          21: VQNQwkBf4DKiAyptu1NuzZNk1DE.roa (hash: KvtJJO5ZGQ49qNKAGMorGsOIb3EaRZS5YhJcNfPGvO4=)
                          22: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=)
                          23: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=)
                          24: X0jlPh6e-kZkAllO0YRLXGSgDns.roa (hash: fOzjwl+fWwzss4YSzsRBfE9rTuqVHxBRysYK0qEx+RE=)
                          25: aMxsTucl9VgkelJcFxmjN0EGtJk.roa (hash: n33/iGcQp4P5VDOzq7NYuQn+t7c02zgYYh2ozCCcIYs=)
                          26: f8HNGqYZ56HDzKMkA97HvxLpDaY.roa (hash: UaI0iT5qEh6DsVjN4hoPGEtmvVSAkZnS69Ts1ZSzz7Y=)
                          27: g35tTn32QbT-bAwoUi98fNimhp8.roa (hash: 1Z+8GgnLMcbNoyJqOCvdplvh0vT0gEGnRnHP4B7CkZ0=)
                          28: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=)
                          29: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=)
                          30: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=)
                          31: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=)
                          32: s0Lr7YuNvhvXYPcKrrFVoUy-LO8.roa (hash: a5e7ib7Q/DgMeBDM9u9FOonj1h8M13aRP36qAw7iBFY=)
                          33: tjYwqQeBxSVgFYzX84lkDNu9j30.roa (hash: gJ1kbe8SJbUDjR4HicbmD9bqr8NrbADsMiLRzf2DJUs=)
                          34: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=)
                          35: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (hash: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=)
                          36: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:4e:3f:83:39:a6:80:a8:31:78:9b:64:0e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=deb2ae4cdfa09757123c561e9f844d2fef4ebd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:16:9e:21:d9:bc:00:96:ce:26:49:ad:e0:
                    3e:94:bb:54:75:b9:da:85:d5:71:0a:56:dd:53:4b:
                    51:63:03:24:d2:09:0d:e5:51:0a:df:50:17:7b:59:
                    4d:c2:93:b9:02:c2:8a:1c:ba:cd:e1:c5:2b:df:86:
                    69:3c:c9:bf:79:0d:7c:9e:61:1e:e7:1f:00:1e:e5:
                    f4:66:7b:16:22:71:3d:df:5e:76:b3:00:e5:58:79:
                    4a:83:07:82:84:45:f9:af:a1:6e:b4:bd:82:5d:7e:
                    a0:e0:d3:f9:27:1b:3f:a2:39:8c:2d:71:74:a2:8f:
                    9f:69:43:42:0a:d0:e6:c0:e2:2e:01:3c:ea:d2:c5:
                    5d:17:1c:eb:1a:c1:83:92:93:61:2e:3a:5b:06:47:
                    6a:ab:54:db:a5:10:aa:ce:46:f2:c7:f7:85:3f:3f:
                    e9:b3:e7:87:59:f2:e1:5a:75:d4:53:32:76:da:eb:
                    7a:5c:78:35:ee:73:56:9c:4a:64:d7:b0:d7:1d:c2:
                    be:59:ff:04:b3:fa:06:8f:7f:30:b6:92:77:ed:f3:
                    eb:d8:b4:2e:07:3c:b0:29:9f:81:e5:e1:5d:16:12:
                    b7:c6:ac:8f:11:23:13:1f:98:9e:41:7b:13:01:5a:
                    97:89:82:d2:90:f5:ed:ba:db:96:57:46:72:b5:42:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B2:AE:4C:DF:A0:97:57:12:3C:56:1E:9F:84:4D:2F:EF:4E:BD:54
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d4:cc:a9:76:14:d1:70:ef:ac:37:62:31:36:a5:72:2c:82:
         11:8f:0e:a3:9b:57:39:10:3c:1c:2c:cf:bf:c7:48:c9:c1:d4:
         f7:aa:a1:9b:2d:cf:52:eb:c0:45:69:d2:09:fa:aa:2c:1d:aa:
         af:0e:3e:21:95:93:05:8e:10:af:5b:99:94:dd:0a:09:04:c5:
         95:fb:11:7b:f5:9d:b6:b8:61:92:3b:be:f6:2b:86:bf:d9:82:
         de:2d:6d:8b:e1:7c:4e:78:f5:52:57:40:37:8c:c1:e2:37:6d:
         69:b8:b1:59:d0:40:eb:ea:b3:ed:f6:69:9d:81:ce:17:74:fa:
         22:16:b5:42:55:c9:30:48:50:7b:56:e7:8a:fc:0e:da:e7:cb:
         c8:23:3a:a7:c5:6c:79:dd:3f:11:b9:d9:a3:44:09:05:36:b6:
         cc:56:6d:0b:4f:3c:6e:fc:a0:a6:02:d5:17:08:e1:c9:24:5d:
         a5:23:5f:c5:a0:02:c7:f3:7e:05:4f:40:5f:6a:55:9c:03:5c:
         73:05:fc:97:24:c5:35:d2:96:18:5b:89:fc:39:2e:fa:38:c7:
         b0:51:3a:7c:6a:b8:31:df:58:e4:38:de:5b:63:41:54:a9:37:
         ab:e4:ec:ba:22:33:7a:a0:16:3e:80:10:34:87:37:6a:e2:c8:
         d3:86:87:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----