Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File:                     DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier:          amBkbXQyPL1UeQhgW5lSwpZUajiGHoej/Q8S/vzc+mE=
Subject key identifier:   93:60:CF:82:75:20:2B:CE:31:4C:72:C5:9F:4D:58:21:3A:87:B9:7E
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer:       /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial:       01962E618AAD1B3F497665DF2950DAA64F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number:          0B4E
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=)
                          2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=)
                          3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=)
                          4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=)
                          5: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (hash: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=)
                          6: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: TSRi9soMRKtbgVvf2STjxlt/Lso926M/Eb3peD1lhz4=)
                          7: DqIwBz09GVkZK_gZ5I10qjJf_ys.roa (hash: c0iRzQrUBzV64ZvugD7r5Tge4OFGYDIQjIm+fC8puK4=)
                          8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=)
                          9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=)
                          10: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=)
                          11: RLoPgVTrYdRU3oWDO0s6AgXZM9A.roa (hash: hnBHuH0Hj4nCZyNmxdve4qf+oTm6NeCY5N7ucYLxCQ8=)
                          12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=)
                          13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=)
                          14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=)
                          15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=)
                          16: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=)
                          17: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=)
                          18: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=)
                          19: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=)
                          20: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=)
                          21: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=)
                          22: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=)
                          23: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=)
                          24: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=)
                          25: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=)
                          26: yA8PAjI9ucZPl6gGi8mMeEVflp0.roa (hash: PYdCih3PZqBlyQGGa4OY8MxdNWJfhJ0B6C8JG/xq17Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8a:ad:1b:3f:49:76:65:df:29:50:da:a6:4f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=9360cf8275202bce314c72c59f4d58213a87b97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:0d:77:13:03:b9:3d:fe:52:ba:6c:37:9c:
                    73:6a:13:9c:66:f8:9d:64:b1:b5:67:66:2d:5a:e4:
                    f1:26:67:79:7c:bd:01:cc:16:c5:f0:3a:67:cd:7e:
                    44:55:e6:34:39:71:16:73:62:6f:ea:cc:29:c6:2e:
                    68:43:8c:3a:98:9e:05:0b:14:de:9c:9c:83:af:ab:
                    7c:e6:6a:81:51:d6:de:0a:07:be:a5:21:c5:6b:0c:
                    9d:38:b1:a9:b7:db:b4:20:6a:2b:5b:19:5f:32:3c:
                    34:19:66:49:b1:b8:56:03:2b:ea:39:a2:ed:0e:c3:
                    40:8f:1e:50:cb:f5:2b:c1:ca:db:f6:f7:46:a6:51:
                    f3:a6:f0:97:6c:0b:fd:ff:f5:ad:e9:c8:73:59:86:
                    ff:42:e4:b0:1a:4b:64:8c:51:46:26:4a:83:d3:f9:
                    42:22:6d:e2:e7:8b:38:3d:64:f4:a3:02:0f:3c:3b:
                    a7:42:86:04:99:2f:ea:26:2a:0c:0d:d2:d3:ea:ad:
                    8d:ad:cc:bf:a4:b0:5e:0b:5b:86:ed:f7:a9:49:85:
                    c2:17:8d:66:34:1e:05:57:6b:52:90:8c:03:6d:0e:
                    f3:89:5b:2a:8e:e6:15:21:48:6c:21:2a:86:28:50:
                    d2:a9:13:d8:4d:82:e7:ae:67:07:3e:31:db:0d:46:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:CF:82:75:20:2B:CE:31:4C:72:C5:9F:4D:58:21:3A:87:B9:7E
            X509v3 Authority Key Identifier:
                keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:39:f9:bf:3e:38:2c:ca:3d:59:53:59:60:14:a3:b8:f1:53:
         1b:b1:ea:7d:4c:d4:b5:3e:05:f8:27:4e:04:0c:10:e2:66:e6:
         aa:68:b6:dd:01:ff:b7:e6:36:4e:3d:d2:4c:49:37:0a:ef:be:
         54:d4:c6:cf:00:31:95:40:4f:7b:4b:9a:b0:7d:be:16:74:2c:
         f2:2a:a6:fb:8f:0b:53:90:22:6e:6d:ff:dd:47:d3:90:ba:f1:
         f1:67:10:b2:50:d4:26:6b:1e:40:10:23:4b:c0:4e:26:a9:86:
         b1:34:e2:4d:ea:0a:e0:9f:31:95:ab:5a:5b:8d:05:9b:47:24:
         e5:78:e9:2b:f1:d4:f9:9c:d5:fb:6b:0d:88:bd:c0:2b:2a:39:
         29:55:9c:ad:ff:ac:62:db:3f:79:75:68:19:40:e2:62:c8:89:
         dc:ea:27:5d:58:98:3e:26:d0:6a:7c:09:e2:b7:2c:b7:98:34:
         31:b9:39:36:0e:ea:7e:6d:74:d1:82:60:54:52:79:d2:64:84:
         c9:de:82:6b:c2:e3:ed:0d:23:d5:79:68:ed:7d:22:c4:d1:20:
         2e:25:60:e2:58:fa:25:81:0d:7d:8d:00:6c:22:1b:21:f5:5a:
         48:66:38:d6:28:aa:f9:c6:1c:f3:37:4d:e4:60:35:48:fb:4c:
         a8:c9:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----