Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          sCIZgaZnXcYYy6d0Ml6oO3OdUHWJhqwUbHiFejeae74=
Subject key identifier:   7E:DD:07:4B:AD:EA:24:16:D4:F5:8B:A1:07:F7:61:C9:DC:A4:8A:41
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01962ECF4EFADED37B04291ED7CFE89A01A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1573
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 190LxKM5s1ZchW-1QFPWBCXJIzw.roa (hash: i2UBTnCRLZfI59Lc+8ptifYqjvgfC+5cvDv+xCq8UE4=)
                          2: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          3: 38tGSJTH2yH52258Ye6YFzIMdgI.roa (hash: GABMb3Q8l+ABw8g0O4cQUivmVnqkwd4lJQ0kvagm4eM=)
                          4: 3LguPMqZSd4yhX8NUjzWdmBRih8.roa (hash: Eb00HvIk2TUv6r6+WiaEYLXtmilnavu3rDsG2CRMnkY=)
                          5: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          6: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          7: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          8: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          9: CBGdvmHeO_3COX6cplZCZhwngZs.roa (hash: O3OMFYB/8GvLwR3QPrNtR+z+RH+vF2NDnwWyjo3F710=)
                          10: DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa (hash: o+UtBmeKh8l5SKFt9b0HSR3AMNSQx+XcOJc2HrXv0/c=)
                          11: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          12: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          13: KwLSqwTIEXPWFbmRertloWb5w60.roa (hash: CbQ3FQr6Qv4yLQFYodnTBQfbOpk5H8Dsjmwdc3msqD0=)
                          14: NNhxTIfw-_5xFw2filMVpRX4ZXs.roa (hash: TbI9d8hLHsOc72eiDSZTew8iceUtSuEpvhPlyEVgPDA=)
                          15: Q8YAap5JaMtgGC9lgf6LQHDq2Ok.roa (hash: HuBCPUPNI4BFPOetznQYeD5cw+9ALmDFX0RulPMRYrs=)
                          16: Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa (hash: FMoM8vmAiJoQiCyS9ONch1ThZ7gMc02jSpD8vyuSSiM=)
                          17: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          18: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          19: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          20: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          21: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          22: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          23: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          24: cC9A2bHre93z2HHoiKaD3gbhMp8.roa (hash: upiubXGT+kD9pNkA2Lcjupud/SpGpaMLCWgqSaDAuSI=)
                          25: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          26: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          27: kNkBfxrt0pmtSeFr2oOLONJYfS0.roa (hash: jnJsm8YaIpBY44TtEsJkOqCETWmngUcHASBmTLiSycg=)
                          28: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          29: ls3R7on7JIepLbiaekfxdJdXd2U.roa (hash: Vn4/dA8gyRgDccPfceYEXiQgzMk0CB1sI1OXw6sj8Tw=)
                          30: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          31: maPCADcTD0j72xKETkOFhfCf_VM.roa (hash: 9uY37uZRkjCzq9ikmQn0wEUh2D8+w+AywsiqaUxRG64=)
                          32: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          33: nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa (hash: e4T081508o/3i9gpQHharO/sMRJPndiZMSpliNkCiZ4=)
                          34: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          35: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          36: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          37: qxB3G-DAT2TOHgf8cs1YnCiCmR8.roa (hash: ZFrfwVtd1AtEvQCLNybyNQRnl8i0goc5HC9uTWDb3Lk=)
                          38: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          39: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          40: vRKV9S2Nnzt5vOi86g2IyLbxJJg.roa (hash: FxxOKVYObUs5qx7plW8uqGq5eRqe/n59+oRNtsoCp/k=)
                          41: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          42: wOsf5_YOiqUMROpVbJEf3o7jfA4.roa (hash: QdADhbZNLmHZbqqBBd4uzw23qbhlhRtnteRcHUSgzTQ=)
                          43: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          44: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: NWSke0l04QmU/qRk/6kUlCrjtJkHHjIz+7zAPuciLtY=)
                          45: z_vs-Pv50nyEYa20YdXyyny1jOQ.roa (hash: oyF5qZcw0v3lMBGZguWpAR05PeU1Oq34z6Y0XwFNaHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4e:fa:de:d3:7b:04:29:1e:d7:cf:e8:9a:01:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=7edd074badea2416d4f58ba107f761c9dca48a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:e3:5f:3d:4a:48:7f:8b:63:a4:a0:22:a4:
                    2d:4c:a1:bb:83:e1:38:1c:11:ac:1d:40:8f:be:9c:
                    7d:58:8a:d0:cc:a3:9e:c5:ca:a5:cb:08:5b:c7:f9:
                    a4:1b:b9:85:5f:3b:d0:37:01:d0:83:ec:91:ed:f9:
                    da:dc:b6:d0:e5:74:b8:a8:0b:e4:8d:c0:fe:15:a9:
                    34:ac:36:43:d7:0f:85:37:6d:ae:ba:e4:b6:84:69:
                    bf:e5:86:92:79:8c:bf:bd:82:aa:89:49:d5:73:74:
                    43:d5:91:a9:7c:c4:9c:57:91:ce:31:c7:70:27:1b:
                    89:26:54:78:d7:7a:8a:b4:3c:d3:b7:c2:4f:40:b0:
                    fb:15:5a:03:f3:64:b0:03:97:4a:9c:62:2b:30:62:
                    21:03:38:dc:41:29:f7:2e:a1:2a:0a:b9:9b:19:58:
                    54:f2:fa:a9:c1:9c:ef:e5:0f:cf:4e:82:14:9b:70:
                    f3:85:ba:43:b5:27:6d:2a:b7:90:bc:1d:fb:a6:9d:
                    81:5e:32:70:6e:48:a6:0a:af:5a:7b:e0:5b:5c:f0:
                    aa:29:26:36:83:25:cb:c3:3a:90:e7:82:76:ae:a0:
                    94:f9:af:74:f9:1c:8e:e9:48:c2:79:e4:ba:83:30:
                    8f:59:df:2e:78:e8:7c:e7:80:e4:9d:3b:a6:09:a0:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DD:07:4B:AD:EA:24:16:D4:F5:8B:A1:07:F7:61:C9:DC:A4:8A:41
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:66:ba:8f:85:69:35:65:a7:fd:f0:03:28:a1:c9:e6:90:2f:
         d0:44:34:22:c7:78:55:dc:8a:ef:c7:6a:c0:b1:44:e0:31:4c:
         a4:e9:39:87:95:1a:30:e8:35:3b:de:74:53:e3:21:2c:cf:cb:
         2b:f9:d2:8b:27:c6:83:73:c8:4a:ee:5b:a2:52:4c:e3:07:e5:
         37:c3:5e:d4:eb:f7:e4:fe:26:5a:c9:d5:75:3c:ac:e7:93:dd:
         0f:3d:2d:39:d5:0b:e1:3b:04:79:3a:89:8c:a0:62:60:b5:9e:
         fe:5d:b2:f9:ca:9b:f5:c7:d4:8c:7d:3f:06:c6:6b:33:40:0f:
         d6:a2:4f:65:d0:60:47:74:8f:8a:5f:79:8c:cd:95:94:7d:40:
         13:04:19:e1:0d:6e:34:3f:f2:8e:41:84:e3:b4:86:31:b3:0f:
         43:c0:0d:ea:9d:c0:db:eb:47:60:cc:73:18:f1:75:eb:a9:3d:
         b3:1d:e8:df:73:ec:8f:69:70:34:0c:9a:21:0a:71:de:18:22:
         70:3c:e6:de:88:8b:48:e2:29:e7:b7:37:63:c0:f0:63:d5:cb:
         0c:47:de:49:b5:35:0f:0e:8a:c0:81:b5:fc:bf:a1:b0:fc:3e:
         1e:07:f6:69:dd:d9:41:32:c2:e9:5f:13:6b:25:7d:a2:a4:c3:
         3c:d7:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----