Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          /ZcuhPIRrUDFPfCV7ljsHzx61z7TVJASH8eCKaeRX/w=
Subject key identifier:   E5:AE:74:E0:1E:CE:E3:8D:EB:C4:2B:8B:6E:10:94:2D:BA:69:B1:DD
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       01962FAB70E13732351FD54F8A5978FCDA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0DDE
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=)
                          2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=)
                          4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=)
                          6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: 8fMSf/29OkoQdmiR4O94Vnzs4JiwXfRVd+o3BAZn/1c=)
                          9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=)
                          18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=)
                          23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:e1:37:32:35:1f:d5:4f:8a:59:78:fc:da:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=e5ae74e01ecee38debc42b8b6e10942dba69b1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:d7:23:8a:79:56:c8:88:91:42:af:b2:78:
                    19:47:24:00:2b:3f:d0:40:3e:91:43:5a:bf:be:99:
                    61:e4:4d:58:e4:44:35:31:52:be:0f:80:58:8a:4e:
                    33:41:56:45:d0:1a:ee:14:c1:4e:31:59:c0:c3:94:
                    8d:77:d0:22:30:57:13:80:83:8b:29:09:ae:72:1d:
                    fb:8f:d1:e3:4e:04:0f:71:9c:36:e2:8b:79:66:9b:
                    e2:5f:b6:1f:22:f1:da:83:00:32:a0:54:36:e9:5f:
                    65:c7:95:0e:00:09:67:13:08:78:2b:71:1b:8d:81:
                    a5:08:36:62:34:aa:e8:18:6a:b3:9e:40:2f:b8:53:
                    37:01:ea:7b:5d:06:11:19:39:a4:7f:81:c2:76:05:
                    13:77:5d:3a:7b:4a:54:5f:c0:18:42:06:2b:d9:a8:
                    69:60:bc:4d:f9:3b:51:1f:f9:a8:ce:7b:60:45:39:
                    be:bb:1f:95:db:a9:69:33:0b:69:69:c2:93:93:52:
                    c2:67:fa:c6:23:f4:ee:6d:41:84:6c:f2:4f:64:6e:
                    5a:de:0e:7f:fa:39:b1:08:f3:16:63:2c:bb:c3:03:
                    7a:32:b8:b0:1d:d2:3c:61:da:bf:7e:99:11:ec:0c:
                    db:be:16:6f:c5:23:bc:bb:d4:b6:1a:2c:b3:f1:85:
                    ea:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AE:74:E0:1E:CE:E3:8D:EB:C4:2B:8B:6E:10:94:2D:BA:69:B1:DD
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:48:47:6b:64:98:3a:aa:b4:d6:ff:d3:e4:39:05:97:6c:53:
         39:17:be:5a:4e:0c:0e:ac:08:7d:b2:5a:a6:5c:19:51:f6:05:
         1f:e6:44:09:bf:84:bc:71:d7:e4:26:08:c2:87:9c:82:55:b8:
         f5:2f:32:3b:13:1c:e1:d2:35:b4:16:69:51:5c:1c:0d:fe:f4:
         16:40:ed:c4:04:fc:c9:37:5c:a5:e5:e7:50:ad:96:c8:44:5e:
         6e:d1:ac:58:24:de:e3:81:fb:4d:a3:b5:7e:f9:8c:52:43:54:
         dc:59:73:94:96:f4:66:ac:c8:ba:d5:5b:eb:cd:5a:5d:e1:fe:
         54:fb:d4:89:db:31:40:c7:ab:6f:d7:4d:33:20:3f:8a:5b:e7:
         89:fd:89:92:a1:6f:42:0b:dc:66:f9:64:28:49:58:a9:40:8a:
         f2:f2:4b:7c:bc:5d:a6:fc:de:e0:dc:cf:2a:45:32:09:b2:4f:
         84:22:ef:23:c9:1c:65:bb:0b:5e:8f:cb:0c:f6:7f:e7:df:d7:
         04:aa:9a:d2:a6:72:f7:74:90:f2:81:21:0b:a4:fc:28:0b:0d:
         06:ac:64:e2:55:1f:5e:75:55:8d:ad:51:a0:6d:3e:f4:16:34:
         3d:cd:4a:bb:f1:34:0d:19:a8:b1:ef:c0:01:8e:cf:60:cc:55:
         69:c3:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----