Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          SUdbOmXtXg4CwrvXVCIzampfUXrvF2VM8MCrRjHoVfE=
Subject key identifier:   7E:2E:38:6E:DB:7F:C4:25:3C:51:E9:EE:D2:8D:2B:3D:4D:87:0A:14
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       01962F74B9FB3DA8AF44119F9E002D4D6D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          150E
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=)
                          2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=)
                          3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=)
                          4: 3gAODMlvyL23CXc8fDABXWT54Y8.roa (hash: FyheZIKgOp9LBINHY7TMh2ZFu2QhWqvqY3wR6C4l8Xw=)
                          5: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=)
                          6: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=)
                          7: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=)
                          8: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=)
                          9: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=)
                          10: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=)
                          11: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=)
                          12: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=)
                          13: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: lFlUoDdLeU5k0PlxiVYjNPTJgzDoM6flD7fDb36MOc4=)
                          14: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=)
                          15: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=)
                          16: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=)
                          17: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=)
                          18: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=)
                          19: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=)
                          20: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=)
                          21: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=)
                          22: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=)
                          23: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=)
                          24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=)
                          25: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=)
                          26: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=)
                          27: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=)
                          28: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=)
                          29: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:fb:3d:a8:af:44:11:9f:9e:00:2d:4d:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=7e2e386edb7fc4253c51e9eed28d2b3d4d870a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:ae:08:7c:2c:06:4a:73:f7:a8:9f:2c:b3:
                    da:71:d1:73:46:68:e7:3c:46:5d:5f:88:5a:c8:e5:
                    8c:52:b3:e0:e1:69:bc:0f:53:54:ff:35:a9:18:66:
                    30:a3:82:72:57:d0:a9:ad:0e:51:49:c8:d7:18:a2:
                    47:77:43:e3:41:6a:33:2a:69:a9:ce:32:d9:85:53:
                    7f:cb:ab:6c:22:5a:e0:cb:ac:d1:3f:90:cf:47:33:
                    91:50:80:3f:da:ec:17:18:c6:57:7c:73:07:6a:65:
                    a8:1f:23:dd:30:07:1c:0c:22:44:f9:0a:8f:29:61:
                    65:d5:a0:99:52:32:c3:52:3a:3e:43:8b:f9:10:d0:
                    f1:75:f6:10:61:56:39:39:08:ea:80:fa:a8:41:30:
                    ce:0a:12:ec:22:90:b8:72:4f:bb:50:88:5e:cb:9e:
                    07:49:91:14:b9:a7:3e:b2:71:e4:01:d9:20:28:64:
                    74:46:9c:1c:ac:f7:62:5a:cf:c3:46:3a:86:f3:0a:
                    00:14:18:96:cb:24:30:0f:fd:80:a5:23:a0:f7:6f:
                    2a:66:b4:35:09:30:38:0e:e0:cd:53:8d:7d:db:08:
                    68:73:35:a5:c7:c6:27:ee:20:07:3d:dd:c7:c5:b7:
                    23:43:53:4b:06:57:8a:ec:16:d9:a8:28:e9:e5:08:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2E:38:6E:DB:7F:C4:25:3C:51:E9:EE:D2:8D:2B:3D:4D:87:0A:14
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d4:80:41:3e:a1:be:bb:e8:ca:c8:e2:8e:e1:08:fc:8b:63:
         9e:f8:1c:5d:43:4f:93:b3:7c:20:7b:d8:9e:a1:ab:be:26:a6:
         4b:ca:8c:2d:90:b1:70:51:7d:32:83:da:53:98:35:3a:e7:c0:
         ef:a1:9a:5d:40:85:0d:38:4b:83:35:d9:a4:7d:f2:b2:cf:35:
         ae:77:8a:3b:33:dd:33:75:bb:41:3d:bf:f6:d8:7f:e2:57:ff:
         c7:7b:c8:12:7a:e6:71:f7:aa:cf:c4:94:67:c3:81:0a:49:61:
         32:0a:30:9d:78:9c:90:fa:8c:8a:0b:5c:87:d3:0e:b7:db:85:
         ee:28:e2:dd:6a:5f:20:03:c5:b3:a1:3c:10:4c:41:4b:90:f0:
         30:a7:8a:4d:ab:82:91:57:18:97:a3:f4:ba:df:b1:24:47:29:
         b0:68:4b:9d:e4:b7:76:8d:d5:98:46:85:b5:b7:8e:d6:a2:68:
         6b:25:49:5e:bc:7e:1d:8e:37:45:e9:e0:20:dd:ac:42:76:2d:
         8e:1c:48:55:97:5a:10:a4:3e:a1:0e:9b:aa:67:a4:d0:fc:0a:
         73:be:96:f0:73:c9:08:aa:a9:94:39:bc:72:eb:10:21:c9:7c:
         9c:83:d3:32:63:ff:fd:c7:2f:12:8b:51:f7:59:64:6f:96:13:
         76:d7:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----