Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File:                     r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier:          GXw40VrsD2KKgUXb/EomDd0d4S9WKe7Z83/jNd8sQAg=
Subject key identifier:   6C:1B:47:CC:35:CE:FD:CB:28:CD:7B:B1:B9:3D:5E:45:DB:70:8B:97
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       01962E99584F669F3161DF6EA329F534BB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number:          117A
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=)
                          2: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=)
                          3: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=)
                          4: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=)
                          5: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=)
                          6: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=)
                          7: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=)
                          8: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=)
                          9: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=)
                          10: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=)
                          11: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=)
                          12: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=)
                          13: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: 5T+bnwvSLWRG2GPB6LPj5TWPZfhvoqu8y6s8OKD72a4=)
                          14: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=)
                          15: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=)
                          16: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:58:4f:66:9f:31:61:df:6e:a3:29:f5:34:bb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=6c1b47cc35cefdcb28cd7bb1b93d5e45db708b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:9f:08:74:c5:56:50:7f:58:47:ba:5b:ba:
                    78:cc:e1:13:ba:91:e6:88:d9:b7:c3:d0:fe:0d:ab:
                    64:e5:36:03:08:a4:4f:a6:fc:86:66:60:bf:a6:0c:
                    ff:e9:5b:3c:33:89:95:20:f0:b4:f5:c1:23:23:fd:
                    7e:f5:27:27:1c:ae:60:fe:4e:8d:11:f1:cd:d1:2c:
                    3a:b2:5d:9a:de:24:de:33:e7:f1:2b:74:bf:bc:e0:
                    b8:3a:89:2d:7e:7b:2d:ae:13:43:31:d9:b8:f0:ad:
                    e1:4d:49:fb:41:b2:b0:83:e8:e3:c4:ac:d3:2c:eb:
                    56:6c:aa:76:96:bc:07:4c:3e:6d:7a:28:40:95:54:
                    63:08:e0:ed:98:0e:ab:31:78:ac:af:0a:f7:25:6c:
                    4b:fe:af:12:38:43:e3:2b:87:4f:71:c7:86:21:ab:
                    74:50:fa:6b:4d:20:9d:c1:75:fc:8c:01:67:3d:ab:
                    8a:cf:dd:97:aa:e4:b4:33:cf:4e:48:fd:ed:04:01:
                    dd:23:31:fc:51:da:68:b0:01:fd:fa:99:a1:74:6c:
                    db:4a:69:a2:dd:38:b6:6a:02:81:23:ce:89:6e:3e:
                    b2:a9:bc:53:85:6b:95:a3:b4:e4:b4:02:45:cb:4d:
                    12:28:bf:a7:95:47:76:ae:49:b7:e5:90:6e:2f:19:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1B:47:CC:35:CE:FD:CB:28:CD:7B:B1:B9:3D:5E:45:DB:70:8B:97
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:cd:4e:cd:27:61:8f:97:92:71:57:74:cd:2f:7d:10:e7:17:
         48:57:e1:95:83:8b:eb:f2:54:a2:03:7f:4e:f0:ff:1c:da:78:
         5c:77:bd:bc:04:26:a7:19:b0:71:26:57:c5:67:ac:32:c8:b0:
         95:98:13:ce:6a:b4:c8:f1:a3:b1:df:78:b3:61:a5:55:13:cd:
         b8:c4:7d:b6:f0:fa:04:f0:ba:67:2b:ae:10:0c:5b:9c:c6:fe:
         1e:7a:d4:8e:32:09:f3:c9:36:d3:9b:e9:44:e7:e1:8e:51:17:
         7e:5c:f3:51:83:4b:5d:9a:b7:2b:c2:a7:90:62:68:4b:15:39:
         c0:05:29:28:f2:44:09:e3:fd:ea:e4:e8:23:8d:de:fe:4c:1e:
         1c:64:87:d7:99:58:5a:b7:87:ee:ba:33:f9:19:cc:8e:51:44:
         f0:6f:5e:84:02:0e:59:84:95:82:76:53:63:b8:30:74:7f:fe:
         39:72:3e:27:cc:81:cd:00:57:ae:56:09:11:2b:e3:33:2a:50:
         06:b4:b1:6e:5b:f7:49:f1:35:81:fa:30:0c:42:cb:09:ef:7e:
         4a:1c:73:58:96:b4:5b:63:61:98:94:1a:dc:df:71:89:8b:b2:
         db:fd:65:78:4c:7b:23:46:09:8b:1c:13:39:8a:08:93:2d:d5:
         79:35:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----