Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          6rcuNVzoOvKC+XflWxNN8XmnCFyfawybnnIBp6bXXpM=
Subject key identifier:   C2:6E:9B:F6:F4:95:CD:40:7D:3A:5D:0F:36:29:8F:FD:2D:2A:C7:76
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       01962F7499FF41CD1F49B0A5A612B7F87BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=)
                          2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=)
                          3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=)
                          4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=)
                          5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=)
                          6: FUSDgc58t7U4fuucmEPuEjO5Yhg.roa (hash: aS1RV6Hjz0mszrBpJALZA+zpAxzsSz5luvIAMzBTdPk=)
                          7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=)
                          8: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=)
                          9: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=)
                          10: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=)
                          11: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=)
                          12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=)
                          13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=)
                          14: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=)
                          15: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: eT3BaC8eY9ntog1g5GaSw0PzBS6ox6zDFOWf7+TWau4=)
                          16: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=)
                          17: rTie_7PEv6-re-3-oCL-n4T2Vz8.roa (hash: k418fDoA6+KZQZvl5i4/4Kf1761FasBs1TWPOk46NN0=)
                          18: r_i4vXEqCp88npQLo5wupbGQvCU.roa (hash: 681bIL2hvemk9KcZlvxDEY+6W4gGDzfccxK3H8tBwKk=)
                          19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=)
                          20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=)
                          21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=)
                          22: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=)
                          23: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=)
                          24: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=)
                          25: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:ff:41:cd:1f:49:b0:a5:a6:12:b7:f8:7b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=c26e9bf6f495cd407d3a5d0f36298ffd2d2ac776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:13:10:27:69:bb:a2:bf:67:72:dd:f3:d8:
                    4c:5f:01:f7:7c:f1:ab:d0:df:cb:7b:12:64:6d:7c:
                    11:e9:06:d7:bb:6e:58:76:19:61:00:1b:8a:d6:81:
                    3e:13:f0:19:49:af:81:7e:00:2f:82:07:43:41:e3:
                    62:63:b0:32:d0:4d:71:29:39:f9:6b:62:3a:0c:73:
                    b6:b0:8d:f5:9f:ff:69:c2:66:b9:df:7a:1a:d7:63:
                    4d:5d:bd:87:56:a8:e7:5b:18:a3:71:11:70:d4:90:
                    04:c4:e1:70:5a:8a:46:d8:af:85:b8:e3:f4:bb:47:
                    15:88:d3:17:21:fe:06:8f:29:85:ec:25:81:89:53:
                    32:c5:99:e9:df:4d:fb:e3:d2:82:74:cf:81:a5:4e:
                    de:db:93:ae:5e:09:7d:77:a6:39:96:a4:8f:cd:3b:
                    c7:28:64:3c:fa:36:bc:e2:a3:42:93:06:3b:07:e2:
                    24:69:08:b0:f0:90:1a:36:b1:9b:34:ea:7b:19:77:
                    94:d2:53:f8:ff:28:25:96:2e:f8:ca:d4:60:a8:9e:
                    32:32:d2:e5:64:58:40:3f:be:1c:c6:31:cc:e2:16:
                    0e:e4:94:c8:32:ef:d6:c6:61:68:fa:82:d6:51:e1:
                    17:b9:03:4a:83:d2:bf:92:6e:0e:4b:df:53:eb:57:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6E:9B:F6:F4:95:CD:40:7D:3A:5D:0F:36:29:8F:FD:2D:2A:C7:76
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:ac:d9:c1:ec:32:84:35:fb:ff:a4:24:9d:8c:3c:8f:ac:
         44:2e:4a:11:99:53:f2:dc:ee:dd:75:aa:e3:8b:8b:16:4d:c9:
         26:ad:ac:9b:b3:fc:d1:2d:a8:c0:00:6e:52:27:ed:46:03:6c:
         21:b5:ce:fc:14:09:e7:d2:c1:c9:5c:42:0e:97:78:16:e0:f3:
         c1:1e:7e:77:72:9e:bb:fb:9d:fd:6e:5a:c6:09:e0:95:af:51:
         06:02:ee:4d:a6:72:d9:d4:39:71:38:af:3b:67:80:34:f3:4a:
         04:a0:6f:57:fa:de:9b:f8:8c:93:fc:61:77:92:0b:20:96:ab:
         0d:9f:61:30:2f:4a:7b:3d:a7:0b:63:ea:51:6d:57:da:7a:0a:
         4d:ba:37:79:98:86:95:39:ed:7d:b4:d7:4f:fc:00:93:44:1b:
         7b:35:7b:e6:d8:71:3a:33:36:40:cb:43:f6:65:97:0c:af:7b:
         cc:d5:8f:c5:b1:d0:bc:ce:7e:2c:3f:79:19:78:42:94:c8:31:
         ab:16:3c:ca:4a:23:28:88:ae:1d:c8:fe:78:db:eb:04:3e:45:
         46:c5:79:e0:f3:c4:0f:fa:8e:41:17:0f:b7:95:48:d5:6f:da:
         45:4c:a5:94:25:9d:91:c6:e6:04:1a:a8:1a:5a:42:69:e3:49:
         d4:7c:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----