Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File:                     0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier:          OI20r8nDKHemJbDV9LMebcck0JfrJBeyzqoWuj3NVpw=
Subject key identifier:   F1:7C:FE:D5:FB:FD:04:19:81:EC:B7:78:CD:AB:42:55:91:99:AC:FD
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer:       /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial:       01962E2B4189EC4CD9873D05869025775A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number:          123A
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=)
                          2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: IlEVgAb+rOxp0xFrixhHBWvkPfuTMRlVeHuMs+qeZ70=)
                          3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=)
                          4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=)
                          5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=)
                          6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=)
                          7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=)
                          8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=)
                          9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=)
                          10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=)
                          11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=)
                          12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=)
                          13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=)
                          14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=)
                          15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=)
                          16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=)
                          17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=)
                          18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=)
                          19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=)
                          20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=)
                          21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=)
                          22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=)
                          23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=)
                          24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=)
                          25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:89:ec:4c:d9:87:3d:05:86:90:25:77:5a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=f17cfed5fbfd041981ecb778cdab42559199acfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:9a:11:86:64:8d:46:f3:65:21:45:9e:5f:
                    b4:1f:be:78:3a:6f:f1:cf:1a:47:b4:db:01:81:2d:
                    9c:4e:ad:18:68:ea:35:8d:a3:de:43:1d:4d:cb:cd:
                    72:36:7a:c1:d3:e3:09:6e:58:9f:c4:0d:32:af:96:
                    ee:77:a8:ff:a0:77:b8:92:d7:ee:99:d3:2b:7c:5f:
                    9d:8d:b4:3f:57:7d:a3:f4:cb:8d:7d:b9:5b:0e:aa:
                    13:7a:ac:3b:25:27:80:05:4e:d9:23:71:1f:59:d1:
                    3f:e2:54:46:f3:af:dd:aa:8f:eb:da:fd:dc:6d:b8:
                    d0:ce:d6:ca:93:8d:d2:19:0e:d2:09:86:79:19:a6:
                    b3:26:27:dd:f5:fd:35:ee:60:32:21:31:90:b9:80:
                    f6:c8:68:f1:de:46:6e:f1:d3:33:8d:af:8f:83:b2:
                    ff:44:46:04:49:2b:e6:5f:c8:35:59:56:e8:a7:ab:
                    69:0a:3b:f5:fc:90:56:b0:43:a5:18:57:d8:6b:cd:
                    ca:7c:f3:ba:d6:10:cf:73:91:47:00:67:d6:f5:19:
                    87:7a:41:69:f0:57:fd:d5:26:c5:b6:bb:0b:24:9e:
                    17:89:d8:bb:82:83:6a:d4:e1:1d:63:ff:79:0f:f7:
                    5c:4d:a5:a8:ad:20:9d:19:2b:b6:a9:cc:9e:6d:db:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7C:FE:D5:FB:FD:04:19:81:EC:B7:78:CD:AB:42:55:91:99:AC:FD
            X509v3 Authority Key Identifier:
                keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:a9:de:a5:40:a9:05:f8:82:81:f6:01:14:19:99:9b:c4:
         24:0e:e7:1b:17:57:24:f3:05:6e:8a:a9:21:68:a8:ea:c6:6e:
         2a:bb:55:c9:9c:a4:da:f8:0a:6f:b5:37:78:53:f8:04:4f:18:
         68:9e:eb:e9:28:65:c8:53:06:fe:28:d2:ff:01:c2:5f:1e:8b:
         90:b5:b4:54:6a:7e:51:43:ed:74:bc:66:12:b4:b1:5c:16:ff:
         b1:25:3e:81:36:59:49:c3:20:64:8b:fe:a2:7a:69:e3:69:fc:
         61:45:08:d7:e6:41:05:65:3d:af:69:a1:ba:b5:67:23:69:de:
         a2:82:58:f2:fd:5f:cb:8d:b5:8e:74:68:d6:55:b6:b8:2d:78:
         8c:58:fc:1a:a5:94:3d:05:b9:07:4e:de:8c:ca:8e:96:51:5c:
         1b:6f:de:3c:27:0a:4f:b7:df:60:8f:52:78:ae:ec:2e:b7:93:
         53:fe:8b:e7:e5:cb:e7:ae:de:50:08:be:03:92:11:9a:68:1b:
         df:db:d6:9e:e4:0b:fe:34:02:56:5c:6e:31:4c:62:2c:49:db:
         51:49:ed:04:30:33:cf:7e:09:e8:5c:75:de:d2:3d:04:f8:8c:
         65:e5:44:0d:57:a0:fc:52:12:5c:bb:bd:d0:51:72:87:d1:fa:
         14:ee:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----