Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File:                     up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier:          2CNEMuCN+CN3RZok0nPcx98E7YPfhe8m236m3SotIg8=
Subject key identifier:   4A:FC:78:C0:BA:62:0D:CD:A0:8A:CD:E7:49:F4:38:85:49:71:1F:FA
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       01962FAB56448B895D1D8383D9B81F2D0ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=)
                          2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=)
                          3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=)
                          4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=)
                          5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=)
                          6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=)
                          7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=)
                          8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=)
                          9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=)
                          10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=)
                          11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=)
                          12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=)
                          13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=)
                          14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=)
                          15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=)
                          16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=)
                          17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=)
                          18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=)
                          19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=)
                          20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=)
                          21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=)
                          22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=)
                          23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=)
                          24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: OjcyzhV34fp/L5+XQaUxGM/xjpwW9+bHnd2IUxxWL9M=)
                          25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=)
                          26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:56:44:8b:89:5d:1d:83:83:d9:b8:1f:2d:0a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=4afc78c0ba620dcda08acde749f4388549711ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:ca:9f:8a:87:6e:3f:7a:6e:22:18:8b:89:
                    bf:6d:78:e5:db:05:5f:86:9e:f8:35:00:e6:ac:28:
                    d5:56:f7:2f:35:73:ee:5f:e7:b3:63:30:ca:78:a6:
                    82:b7:17:af:c1:57:74:4d:69:2c:1a:c8:fe:cd:fe:
                    fa:90:7f:a6:6e:95:e2:73:a9:ce:4c:89:82:68:7a:
                    13:12:86:cb:7f:73:a1:f2:cb:c5:45:12:18:fa:8f:
                    37:4c:f3:b8:52:ed:15:ca:46:b4:5d:5e:49:29:66:
                    6e:97:f1:46:e4:be:88:73:64:d5:ec:f5:72:58:c5:
                    a1:8f:b2:57:26:d1:8e:7d:a7:65:06:0b:f3:9a:33:
                    3d:ec:4a:34:b8:29:20:71:37:53:6e:d0:10:ae:49:
                    38:55:dd:87:ab:b4:7b:59:31:eb:60:de:47:32:42:
                    fb:28:0f:77:db:4f:ad:b5:05:44:6b:99:8b:ce:28:
                    b5:8f:b8:d7:ca:22:23:a7:db:f8:64:01:97:c0:e2:
                    e3:e4:1b:a8:f4:26:93:1a:14:76:84:bd:13:f3:88:
                    7a:4c:1a:3f:8d:09:28:aa:ce:e0:54:85:8c:d4:a2:
                    37:1a:4e:19:74:83:08:93:ce:a1:00:73:77:1e:0f:
                    88:2c:a0:7f:a8:d2:da:77:d9:77:50:e3:a3:fa:be:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FC:78:C0:BA:62:0D:CD:A0:8A:CD:E7:49:F4:38:85:49:71:1F:FA
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:88:bb:de:36:f9:e2:8e:b7:d3:74:f1:20:34:31:a5:1f:
         86:d6:2b:4e:21:bd:74:f9:ec:35:dc:36:f5:bc:c8:e4:97:3a:
         98:2b:c9:a6:f1:eb:17:13:48:d6:6d:2c:0c:85:45:63:fb:c8:
         ae:60:f8:7b:46:8f:4f:7e:0f:4c:16:c6:2b:f4:97:73:c6:4c:
         b1:81:79:bc:3b:04:a5:dd:ea:c2:88:a2:46:4c:7a:68:c3:fb:
         0d:b2:d6:49:c1:d7:71:a3:71:1e:7d:cc:0f:e1:0b:dd:6b:c5:
         25:60:18:b0:a8:66:1a:b0:64:eb:f1:70:5b:53:bc:bc:f5:98:
         45:a6:4f:02:93:01:62:64:43:e5:cd:5c:a6:aa:6a:1b:6b:b6:
         2b:58:e3:24:c8:04:55:22:92:09:67:2d:b3:1d:e4:7b:b5:fd:
         be:ad:60:11:00:c6:99:bd:50:b9:51:0f:05:ef:64:05:e9:09:
         34:5b:97:88:0d:9d:dc:50:83:1f:0b:1c:4b:9d:8a:d6:9a:60:
         62:b8:35:72:15:ec:25:d0:9d:46:4d:e4:ff:83:0a:53:2a:77:
         30:f0:43:e3:11:7e:1c:8a:bb:59:08:b7:ef:ba:5c:8c:6a:2a:
         b8:6e:dc:f3:85:15:ba:af:9f:ca:ce:c1:3f:4d:8b:2f:92:21:
         3f:ed:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----