Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
File:                     8EpYBH83u8BXlEu_jK2HQoeVkto.mft (raw, json)
Hash identifier:          MAxky7fYG1aG2Rly2GgG6PDn+y9X/nRWoPjpf7vbTf0=
Subject key identifier:   0C:79:3C:AA:6E:4B:68:8C:3E:5A:7F:82:7B:60:2E:16:1C:94:53:BB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       01962ECF82556680DB6558E41288F0C6DAC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
Manifest number:          03D3
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 1-aQ0GnxVrEVlGjWCi3NaYsPkesg.roa (hash: +3mk2sWVkE+uaFZ5ZJrtNPPCIQ4hekmcEYuQDX27zMs=)
                          2: 1-hiM7eNJrrB4KxTl5odRANWPNSM.roa (hash: JZintPfYJlodCt3O40zYeOK96s2SUQ7yU+YQLIM3K3U=)
                          3: 3LVaNB3KvQ965s6UullJWswPfp0.roa (hash: NBkjOrmtXqy4cOSfRjbCEsV2ppZ0hs9sC51ZL54sXAY=)
                          4: 7M4uvN9sxhoPn3aqlvD3scYtJGk.roa (hash: OmufU6JcmL9dKo1LMsfdtAf23qPN90eSFInQhtTCwb0=)
                          5: 8EpYBH83u8BXlEu_jK2HQoeVkto.crl (hash: tI/ZHZ0FGLzFM5Rdwe1s7xVLQPYe8zqNwstlWlRJ3Wg=)
                          6: 8fZjBEylQQ7G4Nfq9kl8eMsKPWc.roa (hash: ePHu4BkekyMRgboF78REdrHsv7fK/ffAGw8dzHK32Xs=)
                          7: BPnLchZ5eaff_Txl2HsyiCoZeD8.roa (hash: ea2YSPSOGF9z6JHafxJIW9lVHsadoP3mGOg/OZ8Dh7U=)
                          8: DyA1tFdYex1CDIuoIphpHH3D-NA.roa (hash: /CBkdq6Cl/6kWa0GXz6XPerkjcFWEwnxwHHFN4+nkf0=)
                          9: Elw5UXhx2UaEnLV2EuqtJ32OHnk.roa (hash: ja7+j+sQT6nOers6AAdzRunO2qy0Vf7hB6OxEdfVESI=)
                          10: Exmz-bkpR5hUSWGHLwLIMLc2Yq8.roa (hash: jcbl+HMqw20dWPkAT19tZYwQ/gZKFFWGJc2Eptz2PWk=)
                          11: FJa2Te4IdXZzDvWXox20MrY4wdU.roa (hash: gGBM5iRrWO+bwKCOQfVZA40SaoM6PTWRNW2N8HN/6as=)
                          12: G0UVoOQ8yVB9V1s57eJhr5aDEH4.roa (hash: qzVMfko1qrcYhU4koqEeXTwaQuZOFCHnfY01TTxgRAU=)
                          13: IBcrQV3Tt8YSA-XQBHFBDTdB5eY.roa (hash: Xm8OwW8fqybxpg0qV+RfRWFgdtf/8+NPsHoKgHyUgjg=)
                          14: IfUSZ47cuzQulgLsruCHYRsa130.roa (hash: EUnu8q7eVqfHutdwfxzXbgFkgleKe14//20XLpaCuak=)
                          15: Jc387TmtDV_DzUPYNeoIg9E33A0.roa (hash: s24NtE5UXDc2WukE00Cp3sVkp7j43WWazSrbu1sWBwQ=)
                          16: LYMZh-8zmmJQALRoTJSiAy1xVXQ.roa (hash: G06Sl16Ng8eeY3gv7tMq+fX/m50tj1xA9Uh5PHKbHb8=)
                          17: M17OGFxMCHXGm0t10p_mE7wR6Tc.roa (hash: X4vr1PuBZ/dvhmklnpBOkIGPC5MMC2CVZZ3r2SgR0KA=)
                          18: MMY7e9orpXneAd1jpUcoqhrPNGs.roa (hash: xlAsoBQdjoIMWnYsFAQRaRtmSO+WE//QF5drnQ0y98I=)
                          19: MrjD41CFIa3pQVcvEZ0zP5tdIp8.roa (hash: nGc6QRpJKxqfHRDsxiaOLKdRV0muiqTZYXwUKg+Zrcg=)
                          20: N9lGBNANMfTIMRn8Jiq8tTAP9AU.roa (hash: /syDE6BHpSq20HIZj+8xFI8NVgoDC4MSqcrWeHN4emo=)
                          21: NxznN7EEkFFVkFtFHeOmJ1ken5k.roa (hash: ZvFpJ5XKjvP9AtZTF45VSfMaQiT6rARf7LLoFCJH+Rw=)
                          22: OHPK5224ms-GF1aJCPsDsb357QY.roa (hash: Zr3j7tjk6Qy3/rJEuO/M9v8x8pQYbNlF5/AmsRT9r0o=)
                          23: PXEdZVvSMb6Ea_s8w3c0j9-yyNE.roa (hash: YW1UjO31lL0Fn0BsRdsu06vc+hRyUlv9S9fdp5M6KFQ=)
                          24: RdK3FxnAhkYPX98yWfjo7DAeI08.roa (hash: rbc9T8wFnuY1eGGhGKpqFEjZU7Ty+f9Qb/UTCRgvkZM=)
                          25: RnHYZETtZEovf9Beb8Zw2Kq1VgU.roa (hash: MP+saCc08R902hMq8aAV6CgytaJDTwftQ8Pzfdx+aqM=)
                          26: URcS44h5p_ee9dsnwhclak6T8jU.roa (hash: PloYM4VGnKlDlq+Kl1UcDwczYmFtR6608rE1ZX7nGRk=)
                          27: UUkaqr9snPAYCuLUqRpebrsPS3w.roa (hash: GjZsudpn1zZ5LGPOhxlqRuUgcQfu+Do5rPRjHtQebAA=)
                          28: VSoOrgsYwTu2KVdExU_bFQ0ANdo.roa (hash: TsGqTcbtxgB13NRyB2ElzmSgNOVuipo7gDboWaoxZH0=)
                          29: WnTdhYImrAblkURqwr0fOZCZkGY.roa (hash: fU08TnIoVMIfXoWGqkKUCjFy0riK446KfwVJ3HP2NHM=)
                          30: ao5kHB6uQR7dTkWrMfH1pOh3vT8.roa (hash: K6xsq9gjDkswE1JX6e2BmIRfZg9kSk6bV3B5UrlUmoE=)
                          31: baBxVxKYocLMp3OrjCBJnfA7nkw.roa (hash: aJ1ck3Zmvmz1tHfRZp4Iok52+Ye4C+na83RusZJqnq4=)
                          32: cRs9np0-Hb2Pp7Gy4xvjqlSG_08.roa (hash: 8YhJCGrKf2Y8cr/A27+l5ullMea9kiCVBRr6JpUlM+4=)
                          33: cpTY6qX2f47hxdeXGQo0SY-yxBw.roa (hash: be8pg/PeBaIU1DwD7XMfsPAPC9zrZ+0COMwYwae3S/8=)
                          34: dYiyMxBIxfsl6RVPznRWAdlaoqE.roa (hash: eLJsFKH9UdrJpV5I8lq1iv0Quc7VQlKQcS4onl0LwUw=)
                          35: dnI4qgcDjYpTj_JP6l78yLmJaS0.roa (hash: Tp69kzkTS+SZyymArhQ4utuzl0yT2YEEPPHPgNj3fK4=)
                          36: fLbQB6B27HpUALd41M7mwbhRKt0.roa (hash: ezTCMXSZaI4r9mL4Cuel+B5CuJvdzymWM1WlLbgkKyM=)
                          37: lMajzcJDPzB_F-VCGZzdwhSfpg0.roa (hash: buzJFfwDBVqbVE8oCgmcIkz9LpTiGy+dRrAKG1LrA7k=)
                          38: oMzwmstp6zrD3At3avSoaBK3hAo.roa (hash: 8PnyI0kL8i6bYnpsnoYp4rBhTUwwbbvugRAvfcmzU5M=)
                          39: qQQgXgiPVbdWdT3mcmGp6Ku17nU.roa (hash: Yvi4m8LkE60ecW6yAqutacNNTGm3HVOt5K1ydh+dvtg=)
                          40: qmB76vyZqCg7p7QAzyJ2yMLxMCo.roa (hash: SUyqBROF7gyZH9RGeUTqKMx2Kc5Io2yfZMqSxecVy4c=)
                          41: r33t74LHVhVq1lcSkEpqonYkqrI.roa (hash: G3GCGgoCerWnPasu458PvTj/ddkHouF2fJkjHUCvISE=)
                          42: rzSYXMd4cZBCRD3TTumHD44RWxI.roa (hash: epTeUZEF9BYSY3NHSPNkCp4tHAAekmILWGBWAt+JPsA=)
                          43: wkRQLb3GIywGTBHgS-3jW6Vf-4M.roa (hash: g4wY9UsqS4lC+ooP/XiCVTIA8ZFynFyWVIR/Srx2dK0=)
                          44: xlz5cxlOP8wU1rRS7vQDBbyZbAI.roa (hash: TMgufs18Jyzo1gVxoROmRG+tYJ3b8XSa3gyzmDIKCUs=)
                          45: yeBEMK0WOgYdMFICJ8vZ_cWOme0.roa (hash: qiOINY/cn8YEDAmuQTaGlkCP5P8Lvc8wEzD+/y83uA4=)
                          46: zTeR0g5KBHiT06WLJWwrQn0fKP4.roa (hash: qD/Oro7lLiXcXWbUZHSIDXyhNOVhdsxWgG4/W0eZ46c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:55:66:80:db:65:58:e4:12:88:f0:c6:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=0c793caa6e4b688c3e5a7f827b602e161c9453bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:18:b9:66:94:91:f0:8d:3a:5d:25:3c:85:
                    8e:0f:6c:46:99:e7:27:2b:20:e6:cc:5d:79:c2:02:
                    e8:dc:31:c7:c8:ab:3d:e4:90:3f:f4:1b:80:98:01:
                    41:e4:85:1d:92:06:e1:62:74:51:a8:49:e3:6d:f5:
                    b5:90:9e:66:c9:55:1f:3f:c8:d9:b4:a2:05:c3:f6:
                    a5:14:2a:65:c5:48:26:44:22:39:3b:15:df:52:5d:
                    e1:0c:9a:01:ab:a4:f0:c5:cf:c4:52:72:fa:3d:89:
                    68:34:0a:0b:c5:ec:ab:b2:17:f6:8e:67:13:50:00:
                    15:b5:66:a5:01:03:92:ad:b1:0f:7a:b0:aa:bd:23:
                    ff:0e:d2:13:2f:d6:d2:be:e4:99:5d:6e:b4:ee:5d:
                    6c:ca:95:ee:f8:b8:a1:cd:71:79:a7:be:fc:54:29:
                    bd:da:b8:60:01:a3:0c:0c:4d:1a:09:7c:0e:40:53:
                    5f:07:8c:94:0a:b6:b4:00:77:6c:d6:77:7e:32:5e:
                    8e:4e:98:28:1a:8b:7c:59:c7:8f:04:c1:1a:34:67:
                    d2:cc:02:61:0f:dd:60:c6:de:32:af:4e:52:5d:c8:
                    3c:b0:d7:d2:e7:35:a5:e6:60:d5:2c:6a:18:6e:12:
                    3c:c7:5f:8c:d6:c7:dc:e1:f3:1e:41:a7:b2:13:9f:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:3C:AA:6E:4B:68:8C:3E:5A:7F:82:7B:60:2E:16:1C:94:53:BB
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:cb:2f:52:b1:eb:17:75:a1:94:81:17:91:0f:70:80:4a:
         ab:51:cb:33:4b:33:c9:47:29:eb:bb:4a:0f:1a:e5:20:4e:9a:
         a1:e7:80:44:cf:31:29:e0:b9:e8:9b:71:2f:94:d5:94:4c:15:
         e7:54:5c:c6:81:df:63:75:c0:33:4d:d8:7b:06:c6:cc:60:34:
         ec:a6:85:8c:73:2b:a8:2c:cd:58:41:0b:2f:2e:90:39:3c:da:
         63:69:94:3b:b6:35:be:36:66:b6:21:9b:58:7d:04:f0:a1:e7:
         0a:de:b7:f7:4c:b9:e6:2d:65:3c:f3:be:4e:33:03:33:92:5a:
         05:a2:e5:64:a8:01:0d:91:c4:4f:b6:1b:dd:08:2b:d6:23:6f:
         5f:e3:71:cc:1d:b2:63:a1:8e:68:cb:ed:b9:6a:d4:a9:16:ee:
         b6:e6:b1:a3:d9:e9:a6:ec:f3:3d:b6:e0:b5:c9:ee:eb:aa:9a:
         e0:be:42:d0:54:1c:4a:72:f7:ce:02:3e:33:ed:c5:92:93:7a:
         57:5c:91:d6:b1:eb:49:ca:4b:12:8c:f3:06:b0:12:54:12:36:
         ba:be:95:74:0e:67:ed:5a:37:36:e0:3e:d9:d1:66:9f:52:07:
         98:ff:90:b3:4b:98:70:b7:cd:dc:59:52:25:e5:59:ab:58:86:
         10:ad:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----