Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          dR9RY+a9d+HT/LJHH70rcdJRBbqiuWELS7cbN4gnv4Y=
Subject key identifier:   B1:53:A1:7E:B4:78:A4:AC:90:A5:D0:0D:4B:AC:73:17:EB:A3:7F:97
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       01962DF41DCD8848E39E6C76C32B22A4B26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          0D6C
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 9B5GuEaT2ID8BKYCxvuIAGnSqgGdbhmKei2r7PBIsmk=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:cd:88:48:e3:9e:6c:76:c3:2b:22:a4:b2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=b153a17eb478a4ac90a5d00d4bac7317eba37f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:30:7f:c2:d0:be:20:26:8f:3a:21:74:57:57:
                    69:a1:5f:e6:92:14:41:10:28:3d:b1:08:81:aa:f8:
                    06:ab:8d:fe:24:7c:fb:6b:cc:c1:0b:05:f8:98:d4:
                    06:88:40:8b:4d:63:96:6c:e6:68:41:b0:42:13:3d:
                    a2:69:cd:66:46:ac:d6:0d:24:f2:b3:b6:23:7f:74:
                    be:75:14:da:5c:37:8a:5c:51:08:09:00:62:0e:47:
                    65:0f:ed:c9:24:19:73:cc:83:65:36:d7:6f:75:62:
                    44:2c:c4:68:04:af:35:d7:7c:96:ed:a9:59:c2:1f:
                    2f:df:ad:b5:28:5c:20:da:f3:96:90:ed:4b:e9:74:
                    1a:05:ee:27:f9:0e:74:cf:f3:be:aa:3d:63:f3:81:
                    4a:61:c0:20:c0:92:19:11:83:f9:4f:38:8f:34:3d:
                    81:6a:5d:00:3d:05:ec:8c:e3:81:d9:ce:9b:47:e7:
                    0d:4e:8e:bd:b2:82:88:dd:03:44:b5:fd:1a:b1:1a:
                    20:21:e5:eb:f5:c5:e4:18:40:d4:24:09:6e:30:31:
                    32:ed:e5:f8:5c:b8:70:0d:79:0a:ab:d6:d5:7a:33:
                    22:92:2d:41:f8:0e:e4:23:5e:d3:76:0c:08:2d:af:
                    9d:d0:ce:68:45:16:96:54:9c:86:48:64:f1:ab:a6:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:53:A1:7E:B4:78:A4:AC:90:A5:D0:0D:4B:AC:73:17:EB:A3:7F:97
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:a6:78:a3:93:95:24:47:c3:19:2c:d3:2b:dd:4f:33:b2:
         28:d3:96:49:9d:6b:5d:e1:1a:e3:75:72:65:39:32:ba:d7:e7:
         b8:e5:b2:53:b2:45:f8:e7:39:9d:e5:48:f8:1b:d1:53:90:ad:
         8b:84:e4:8a:fe:31:24:10:e1:f4:4f:20:ed:08:23:87:55:3d:
         58:f4:cd:38:80:29:0b:8d:78:64:a8:2a:76:ae:87:e2:2f:f5:
         c3:03:fc:bb:a4:3e:a7:ed:b3:ff:a8:11:5c:f2:b8:56:92:ec:
         73:f4:6e:03:97:8f:ef:d7:d3:04:0b:9b:4d:1d:d3:e4:b9:e5:
         a1:4d:37:a0:ca:f5:02:99:f4:80:d5:61:77:05:ed:0b:8f:f9:
         78:a2:1d:20:17:91:01:10:88:fb:e0:49:ea:62:66:04:44:f8:
         b6:18:77:ac:94:4b:f7:b1:50:e7:dd:8d:5f:e5:86:bb:0d:7b:
         0b:8c:19:ba:ad:1f:2a:20:6f:6c:0b:f8:1b:ca:4c:f8:7d:68:
         1d:20:99:b9:57:eb:c3:f6:b0:e5:ee:cd:5b:22:d2:a6:5c:99:
         4d:bd:f3:fb:b0:72:3d:5c:3a:8d:f7:a6:45:74:77:44:b7:4b:
         1d:83:c6:21:b7:f4:b2:c0:6a:2f:e6:a4:2e:5c:d1:e4:ed:93:
         bc:40:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----