Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File:                     b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier:          lMIoWlYcewJ/f9fnw13jY1hQ4oYQGE4l9ylDwPu5cfY=
Subject key identifier:   76:33:34:40:0C:EE:1A:2E:AE:B6:54:B8:12:A5:D8:AB:95:94:F0:74
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer:       /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial:       01962E2B2C1A7858AC64F543B007BC43C2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number:          0C3B
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 3XFnSij2L9OGuVRefNb6KmPjgW8.roa (hash: XS79DVDeSJhJGymz1jxhgpqTjVxRS0XusIdGj5EpPIA=)
                          2: MDrD-uKFZ_Yb4ZIC2Po8frR_H34.roa (hash: 6i+1tLOBfwQZsWiohYfI3Z5fvAQitp1iTyZYTIX5ZZ4=)
                          3: MxnFRwJmFw3H9pKkZeWdK5EluaA.roa (hash: /4BdfcwDrvCIqi4T11GSU+QWVrhInkiIc6kfChEW8jY=)
                          4: NEEzqFo3JsV_n4MFb0Yxmf808p8.roa (hash: 0mWJ5uApbngYHfePL8mt8/ZYQaGNsS3QaqUfE/nt3Es=)
                          5: OdRcxP9kQBDBq_t4K6LMCbZ4LYA.roa (hash: VSz03cKjLczZsD5Qc7ZNyHo2cNC5AOTGzQJ7nuICCg4=)
                          6: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=)
                          7: QkU-qCinUlPe53Hs6eMsPbVPlhY.roa (hash: TQmZyr7cdHGM7HbGWxIOIfm9Itbcnth0LgTPHbUWc60=)
                          8: TORlgt1u7648Spjd4ILCDKgsUno.roa (hash: QW0T8pY94OKXHnQ5xfDyn/tCVhCBjDeJm94bgSBXBGU=)
                          9: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=)
                          10: UXX6b0zCq_NNw1CChIsDpoAIw90.roa (hash: 8GfCVg61ZSQDqh9MCwsNlUYH11Tm5+lA4Y8M7MMHqUk=)
                          11: XAVwLaEqk7pGEMqEwFel4ja5q6M.roa (hash: TdnTu8VWh2j/830N5bWvG7hdw0Fc6gzXbIEjdE0N4Dk=)
                          12: YeHjVSxfypMIGOtDW6nNeVZr_ww.roa (hash: R/pQ2eK3Bo8DDro+GOg1T0HP+11JDGwObWF4i7OlrR0=)
                          13: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: DgSpmJ4bCann14jb4P+gyI5r4fS/V23RrhvBJxALFWY=)
                          14: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=)
                          15: g9XEZkD0Q3jLRwKSbI_pFqiildQ.roa (hash: K+Io5c+LqCZiqiY89USPUlrpi0wbO9VHJp+F8gWeGOA=)
                          16: j7rN0i69iy569SdmgQ6fHRhdj-Y.roa (hash: K7VAwuyyIlSMwaAaUFWVEIX4LGyYKVWWBqDQ4rYQ0T8=)
                          17: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=)
                          18: q89QJtHHmXnhAigcqtbzFtx6C1M.roa (hash: loY0HF8avLCwfiugLfjQZRVIrjtQul45fabi0RCTt2g=)
                          19: rQW2dw98Fh-iwHUnu837pVRjuWc.roa (hash: Pa1aj93uAUOOLzOu+jsDUQFa2MsGoVi8bIM+YOqFcyo=)
                          20: rRZ2Xyij6X8E6MFzhCwYOAs3dBM.roa (hash: Hs5pG3tw8w47GrpTXd10gqpkqrh/KETZcZRUATXq3J8=)
                          21: rvL1x1q3Kw8HVwE0wYz67prBCjM.roa (hash: xKsPUtdxwZbXXjuTE9smvx5gzGdvh7hHWO8VVJWBSZ0=)
                          22: upfWsGWz6cO0DG0ZS5qlPE1NgzM.roa (hash: +kITxmsrmYeCYIJ8aUWP3p7RTcxowNAt02p6wEwIq7w=)
                          23: v0yoJhIn6i0syRSR2K6F3YmA_0g.roa (hash: BsFC2HoYM+sqLtBMnoPNTZ97aEzJ9EbDR+6K5Pp2qyo=)
                          24: wBUaEujjiJU10DDc9JYGSWIt93o.roa (hash: B3M8iQNU94Bn/dF8xVKqKeDoEZzI5dmCH5rPfFhkSzc=)
                          25: wUIfpC982TJe9LEoT5KiHIBTzE0.roa (hash: mKOmsceJTmagxAo1ahsYNgNzHVzNic1bNHliaS0QOGk=)
                          26: woG8jTtTLYfsotzY-F5Jym2G88Y.roa (hash: THSTKLzrLTlOC6V/LkFYjUrIriXANSVWZWzDtd8xsTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2c:1a:78:58:ac:64:f5:43:b0:07:bc:43:c2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=763334400cee1a2eaeb654b812a5d8ab9594f074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:ca:3d:4d:14:d2:7b:3e:5c:6c:ea:80:0b:
                    86:f9:af:98:32:b0:38:2b:c8:57:33:f8:5b:0a:db:
                    5c:90:ff:bd:09:09:04:b0:8e:13:51:5c:0b:7d:8a:
                    3a:3e:49:95:e4:35:1b:db:b4:be:34:07:9a:31:c4:
                    ee:05:aa:47:f6:22:6a:1d:d7:19:eb:89:c8:72:6a:
                    02:f7:e8:05:49:b9:a5:26:da:c1:1b:f2:aa:6e:14:
                    6a:28:b7:17:3a:de:6a:46:42:b6:59:08:58:2d:dc:
                    5b:d5:95:d8:0a:2d:a8:59:34:44:f9:92:11:83:7b:
                    98:c3:c7:2e:c2:14:55:89:4d:02:0b:5b:3d:3e:ad:
                    99:4b:a8:0b:3a:b7:89:d5:93:24:cb:13:ac:b7:53:
                    d1:a4:35:88:27:8e:30:24:f8:de:e7:f1:b3:3f:25:
                    b3:65:f5:20:80:fd:38:1e:bd:ab:ef:4e:5b:2f:45:
                    fa:8d:23:e7:44:de:b4:78:81:98:69:7f:f7:03:a3:
                    8a:d2:dd:94:22:5f:74:39:06:4b:20:c5:fe:55:f8:
                    a2:9d:06:86:be:cd:34:de:05:56:45:c2:67:b4:a9:
                    6c:bb:a7:bc:b9:02:36:0e:3c:01:3d:3c:c3:50:53:
                    8e:3c:77:de:e1:30:45:36:cd:72:93:ee:91:89:63:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:34:40:0C:EE:1A:2E:AE:B6:54:B8:12:A5:D8:AB:95:94:F0:74
            X509v3 Authority Key Identifier:
                keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:26:22:43:46:fa:aa:3a:02:64:2d:01:b4:3a:5f:7b:ae:
         89:5f:e1:8f:35:64:b8:31:86:1d:c3:dd:f7:f2:60:8b:76:8b:
         33:21:27:d2:2f:5a:3e:76:68:c5:9f:40:2f:f6:63:9f:b6:d1:
         a6:a0:67:33:c7:d4:d4:8c:4e:43:46:51:eb:59:16:e6:34:0b:
         e9:38:f4:ce:30:22:81:03:8a:cb:71:15:4e:35:1a:71:fc:8c:
         81:df:a3:05:b9:7a:a4:39:47:cd:c0:ce:31:c1:d0:5b:c0:68:
         2c:45:f7:33:e8:b2:1c:5f:ca:c6:c6:df:2c:e0:ba:5d:0e:d9:
         4a:d1:8f:1f:c0:dd:68:41:27:0b:59:e9:71:dd:76:11:41:90:
         91:85:bd:1a:19:17:e6:db:bf:ed:12:4e:75:4e:29:d8:0f:70:
         f4:97:38:eb:6c:fd:29:35:45:2e:25:23:82:08:5c:b0:ed:14:
         3f:af:30:18:27:50:27:d4:b6:84:0c:4e:e4:da:7c:ca:f9:a2:
         4a:af:37:6c:80:9c:ff:93:c1:6e:71:b6:1b:e6:ee:48:69:ad:
         5c:fd:09:9e:2b:97:c7:84:ce:d3:17:69:7e:91:62:e5:e4:a8:
         08:f9:6e:3f:ce:27:ea:8a:17:ec:8b:13:bf:c9:80:d4:56:b6:
         04:e8:df:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKywaeFisZPVDsAe8Q8KpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjUwNDEzMDgwMTQzWhcNMjUwNDE0MDgwMTQzWjAzMTEwLwYDVQQD
Eyg3NjMzMzQ0MDBjZWUxYTJlYWViNjU0YjgxMmE1ZDhhYjk1OTRmMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifnKPU0U0ns+XGzqgAuG+a+YMrA4
K8hXM/hbCttckP+9CQkEsI4TUVwLfYo6PkmV5DUb27S+NAeaMcTuBapH9iJqHdcZ
64nIcmoC9+gFSbmlJtrBG/KqbhRqKLcXOt5qRkK2WQhYLdxb1ZXYCi2oWTRE+ZIR
g3uYw8cuwhRViU0CC1s9Pq2ZS6gLOreJ1ZMkyxOst1PRpDWIJ44wJPje5/GzPyWz
ZfUggP04Hr2r705bL0X6jSPnRN60eIGYaX/3A6OK0t2UIl90OQZLIMX+VfiinQaG
vs003gVWRcJntKlsu6e8uQI2DjwBPTzDUFOOPHfe4TBFNs1yk+6RiWPUxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYzNEAM7hourrZUuBKl2KuVlPB0MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba0mIkNG
+qo6AmQtAbQ6X3uuiV/hjzVkuDGGHcPd9/Jgi3aLMyEn0i9aPnZoxZ9AL/Zjn7bR
pqBnM8fU1IxOQ0ZR61kW5jQL6Tj0zjAigQOKy3EVTjUacfyMgd+jBbl6pDlHzcDO
McHQW8BoLEX3M+iyHF/KxsbfLOC6XQ7ZStGPH8DdaEEnC1npcd12EUGQkYW9GhkX
5tu/7RJOdU4p2A9w9Jc462z9KTVFLiUjgghcsO0UP68wGCdQJ9S2hAxO5Np8yvmi
Sq83bICc/5PBbnG2G+buSGmtXP0JniuXx4TO0xdpfpFi5eSoCPluP84n6ooX7IsT
v8mA1Fa2BOjfjw==
-----END CERTIFICATE-----