Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File:                     BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier:          NBBTBsBn1EwFAksrGFTAb+6UcP+fAEmW+6fQtpRMKuE=
Subject key identifier:   24:FD:9A:F4:7C:2F:90:8A:F7:94:CE:90:1E:A4:5E:75:15:A0:F8:B6
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       01962FAB34C4BEF617B6BC1E2A3712EB61FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number:          1333
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 1-9kyTG57lW5pauShjAbSgqx7ELA.roa (hash: yqYBQ/TJzQNk1+uZ7N56AeKifi1WJfBnexFUg+0LLyM=)
                          2: 2yA59QtsMWk9pMkqZsRhCUNRv5s.roa (hash: 3lhj+8t7WakD0taOb/n8+n5eS8DbEqnleZ93py5eK2o=)
                          3: 3g3144t54HGRa28h02Xw83J7Clc.roa (hash: XX+LOOOsUzF/wHBB2Iscv3ZSGgGpMaFj5N2D9xm/JPo=)
                          4: 5Mam-Pg9a629tSWFczaVxFg4D58.roa (hash: uI87FyR3KvBIESOCI6aSMEI2WoHQnyL7wu0aXhj5lC4=)
                          5: 5QprB05ll1uYCquytR4n1W116WM.roa (hash: kOFqQKS/OdPIqYk3rxYLUDVI5uzIqTlMZr9WxgzKLwM=)
                          6: 6sSkl7UX1wQmJbbfGMATKxJXY54.roa (hash: IeSF56cYT3VKQor9+nTqChrxam+t4/ky7I5rJ/pHZBg=)
                          7: B0TfHkEyVnbd2N0e6k2tgOD6_wI.roa (hash: Urqkg7JIHNdsGel84r9NTaWTAKTT4SDTb2BONLXGY8w=)
                          8: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: Pewvpo7SurpBTmWhKeoAoOIkslRRJCI26abSVeG4vEM=)
                          9: DbZqiucLKtXg_tnHgCLsTj7slY8.roa (hash: Y3nl2lYy9DUM+ulrcRJHTjNNQpfHThzYB54J4kpUdvc=)
                          10: HWormeP5NTMFg9cNiU120qWb8MM.roa (hash: 3Vx0k4vPLIVcmX2N61XugSe2WGxKb/dBPzzUHtK6wl4=)
                          11: KV367d6Zsc-zqT-odrHl0DYDJsM.roa (hash: FKc2KZrRBCocDmqxqhbBguDKolkUjxKD7WOeyPk9toM=)
                          12: MG8qxofm6sprGoo3pg2W2uS6nP0.roa (hash: 3jnaDmSAZ0hSDFvLhpqI+24V0FGhfiyi2bRTiEuSPjo=)
                          13: OvLWFjuaplvFw74T90MVoTJyQPI.roa (hash: xOJfcV9Hwg2qFldj+To5nN+byTUn4DfMWX3s515MpgU=)
                          14: VrEU9PE5EfCqbrb7nZMyqxga0y4.roa (hash: pCI3583YgOq3CB+JSxU25k69djgvqQV7uPOrhj4rCz8=)
                          15: Wc305TLcG6ipi4YG3pmtocQiH2Q.roa (hash: bIpc1gyDbj8Co03okk2diagetshwMOgbtSapVHm51GU=)
                          16: aTytGUXYEIGxtGOF3WUFFC8JcwQ.roa (hash: Vs+sK7xqct09FIQXh0SoHFV8Yu6CjDQxZx7xtJlTgNE=)
                          17: ek3EtDyVxedBXi4kaK3trrMaJmg.roa (hash: /bg27e+bXjbGnL2ey015MY0hFpRmcorpPjjRaoCBolE=)
                          18: exNBWzsJdV3aicSdEIBpUGacx74.roa (hash: 6hKpyXwmjMPvF2uI11MjVhC+6m0ZJvy5FnDNsSRaDUA=)
                          19: fNC7ZXZ-1ULFrWkO8J5UybYfGTI.roa (hash: JakG1+wEwBj7MRAmGKQKU//mA0wgIrSo6KrQr/NJN9Q=)
                          20: fuKyxGw_5UKeL4AWKKV3APO-jXs.roa (hash: 1i6kDmcAC1XA98X8VCsAJMMtYyeOaBwcuGwbyAjYXgY=)
                          21: j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa (hash: lE8VSDD6OngPZMSO0N6X5XYw09YDfgl2syZ7P/y5Ujc=)
                          22: lnMedtsWp-bgx_qGux0u4Jemg6Y.roa (hash: fvofVrcDHJL/VFOzoV5reTZHNKsWHRjL9AAzUyIF6RA=)
                          23: lnfSRPIjJ_rnv2rA9LFnWqyasxU.roa (hash: 6y5/RH+pWSVtrPaN0CjFr8pkFmjDA1Ymsw/HEzVgX0w=)
                          24: lydOFdT2ZB4VXyRnspFs-1TL_6A.roa (hash: 8itP19agssSYawEYfpGuFEww3nKwbJHsZKc1MH8kG3s=)
                          25: nsOvbjb1TNSx2u7BUmQra8F8iNU.roa (hash: y2lXY8swYsJj5FkjF0M5Xak7JQxiOHB7809PchjSzjM=)
                          26: q9EzhRak9A-maSvUjMGlPsmVdWk.roa (hash: fhhhD7VzymISsohMui+Cyx0H2ETVK9ly9iR82236g+Q=)
                          27: qLO5cj38BRyYdeH-rfctS6n9M7U.roa (hash: aMShn4FXdnTufUpyHOP7ThkTMbndZL+QIAZz0lq4l0Y=)
                          28: vMuPv15czUN3TyQjsF6vfToUN84.roa (hash: z4fYQjlVjkuFyievVhhGkwXvN23Mi1wn1+WiCtl5UkU=)
                          29: xJs9bo-w5TvWpljc1sQfqueBbtQ.roa (hash: TAtPCmil9M2Rr0khwcHfGhF81jVdFJvO7+4kHsp/Iv8=)
                          30: yikB75qCLmOR70Lyl75i3suSq54.roa (hash: 6RAQHbYTc4wjn8qsz3QMR9klg79Q+jkBfTxmlxzlVAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:34:c4:be:f6:17:b6:bc:1e:2a:37:12:eb:61:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=24fd9af47c2f908af794ce901ea45e7515a0f8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6c:02:7e:bb:b3:32:48:42:57:c4:4d:f5:98:
                    20:bd:b1:41:d1:4f:af:a7:eb:11:0c:1e:a7:03:8d:
                    67:d8:cc:04:55:fd:5f:d1:d9:fd:91:02:d4:66:3d:
                    f4:4b:be:27:f2:64:b9:71:5a:21:73:b9:07:b4:40:
                    43:82:d9:f5:41:8a:db:12:1d:3c:38:59:f0:33:cb:
                    5d:0b:b6:c8:b1:23:fa:67:3f:cd:e1:49:be:ae:74:
                    6c:ac:b4:b0:40:87:40:7d:27:98:b8:cc:20:6b:76:
                    ce:0a:f3:40:d9:07:d2:d7:ee:27:5d:95:17:02:ec:
                    14:91:17:1f:e7:75:80:aa:d6:71:75:ca:9a:2a:e3:
                    74:ca:ed:1a:12:eb:fb:ff:a5:64:dc:15:53:34:cb:
                    4a:21:71:94:13:48:7d:df:96:76:0e:de:a1:66:7c:
                    8f:56:be:3e:65:12:45:42:1b:1c:b1:3a:b4:04:53:
                    66:e0:25:38:53:88:3d:ec:42:19:37:85:36:51:6d:
                    b7:07:dd:eb:de:18:3a:8b:5e:c1:fe:47:5c:d4:46:
                    cb:4b:8a:10:db:70:2c:05:ce:45:59:d4:99:96:93:
                    e5:99:d5:7a:57:c9:c2:44:0b:7e:d2:a7:ce:8f:44:
                    de:06:4d:7c:b5:c0:d2:2b:95:2d:b7:ea:12:59:c5:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:9A:F4:7C:2F:90:8A:F7:94:CE:90:1E:A4:5E:75:15:A0:F8:B6
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:54:d6:ff:bf:76:d3:0b:b2:5a:d5:76:60:1b:b9:52:c9:56:
         7a:79:2b:aa:68:40:d5:61:71:e1:d7:ba:4f:0f:9b:c3:67:25:
         8f:ea:96:0d:06:b4:5d:94:0f:2d:d7:81:e4:3d:52:5d:6c:f4:
         fc:48:3a:ed:04:7a:b0:99:73:70:79:f3:1d:73:c6:48:e1:4c:
         ba:61:4b:a0:5b:8c:c0:55:93:31:9f:43:a6:89:37:44:36:20:
         be:4f:f6:c5:c9:94:79:25:4b:6e:8b:36:36:db:cb:9f:51:88:
         bc:4f:2e:70:d3:2b:9a:62:10:78:88:3c:ad:1c:a4:fe:cf:fc:
         0a:22:68:34:f8:8b:42:fa:83:00:66:82:4b:2d:7b:ad:59:f6:
         74:b6:87:10:bb:41:ec:6c:d3:80:2b:55:e6:61:0c:81:8a:27:
         bc:0f:25:e4:3d:1c:0a:00:2a:04:37:7d:c6:ab:bb:4a:ae:07:
         63:a7:1f:b7:77:f2:73:69:1d:dc:06:39:c1:7d:18:6a:ed:60:
         4e:bf:0c:44:1a:e5:15:f7:d3:ef:b1:b9:ad:07:b0:be:dc:05:
         4e:c2:69:1b:f1:f3:b2:54:59:34:1e:4e:f3:66:58:ca:37:f7:
         f7:71:d6:9b:1d:9c:09:b9:e5:b1:f8:4a:e6:bb:c2:62:37:fc:
         dc:3d:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----