Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          pnaT5Uq8y8Tf/zzNPyph9skK4y6YkBnwd9aUIvLUL6U=
Subject key identifier:   B2:B9:5A:25:0C:69:7D:95:8A:38:FD:0C:20:D6:E1:15:62:F8:58:ED
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       01962E99315AAC920ED6772AA038F9F6D2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          15C8
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=)
                          2: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: iUPPVnulPVJGtp9BcSYgpLHxxkP8OA7dZxj4GhbS8as=)
                          3: AMAwp6VcPHRw-QKe79lcrFcU19Y.roa (hash: 7tQw2Qq7bBZ1uCaMQ14QDglKar+luUjoIxeh5RB2w1o=)
                          4: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=)
                          5: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=)
                          6: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=)
                          7: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=)
                          8: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=)
                          9: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=)
                          10: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=)
                          11: RRXv77ic8-YnL2L0BrEWnnilces.roa (hash: oObWYvqL50IXeyb91XFkxYV2GVpxyr296NJwG9LKFJk=)
                          12: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=)
                          13: U3eAzBYqlS5ny3loqC6d-X4pjFc.roa (hash: EJBjhB6YSDKCWSO1xn35SUiNwifHM1pCOrpPoOsV3vc=)
                          14: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=)
                          15: XIL4KgKm0A4SvgCDqXS0umj0IHs.roa (hash: dU5jOvpnr6zhMIB71IuVm99Y99FhDfkWY/tGsCNXEh0=)
                          16: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=)
                          17: XYbT6yP37MVQytRjz04BPPzPYOw.roa (hash: WCX0oeshrNGios6moKGDBW4fxHN+erXZ54ZsoxBsG1c=)
                          18: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=)
                          19: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=)
                          20: _DWZCZ1si8aBzqMNIm8Ef7GE9Eo.roa (hash: s4OAbwWH4R0XydqNCXaiEZGXYXtwOtGgb6PW+nNqG2U=)
                          21: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=)
                          22: _QCxwAq-k7LQw-EmdOYTMT_eliA.roa (hash: xW9tEMrch7FL9cOEEkUAJ5gQQWQOkRdx57dNWkZzRGs=)
                          23: arMtKMIP71-vKvUAgp4clBsMWok.roa (hash: tYZYrtz6Qwf6eAJhxSX8JcByWBMLnLzyGmAuVNAgGeU=)
                          24: cmkgGNwAjlwl-nXBDnQsuZkaQjk.roa (hash: GH4mAasSrVefCL06doAPOCgwr9kOuVQg7pmr2jmaWv0=)
                          25: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=)
                          26: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=)
                          27: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=)
                          28: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:31:5a:ac:92:0e:d6:77:2a:a0:38:f9:f6:d2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=b2b95a250c697d958a38fd0c20d6e11562f858ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:1f:7c:00:54:b9:2e:dc:d2:0b:f2:55:7e:
                    e9:30:9b:96:51:2a:4b:2a:d6:a0:ff:f4:e6:38:38:
                    47:78:ed:22:c5:6e:30:d5:b9:80:ae:98:b0:8e:2f:
                    52:4c:f5:2a:80:78:7f:02:3a:a5:50:f5:d3:68:67:
                    3c:24:8b:ba:f3:1a:60:dd:98:cc:d4:ef:b7:fb:f4:
                    39:2d:b9:28:97:83:06:31:29:0f:ed:da:e6:da:6d:
                    1d:f3:3f:93:b4:da:a4:ca:e8:3e:d4:f9:96:20:2a:
                    19:f7:84:60:e3:5d:fe:45:dd:8a:62:23:36:00:af:
                    1d:af:86:b5:35:4f:46:5e:92:63:6c:86:7c:73:02:
                    e9:5a:6d:07:26:aa:ac:bc:3a:60:9e:7a:bc:96:3c:
                    33:f9:52:a3:7c:41:3e:0f:fc:cb:dd:06:76:33:be:
                    2a:98:d6:b8:b7:9c:1b:ec:30:19:f7:48:78:9b:85:
                    ea:4e:39:e1:6e:6d:e3:39:bd:8c:1f:1d:b1:b5:73:
                    4f:05:78:73:36:06:cd:b3:36:90:ec:bd:b8:80:de:
                    b1:a9:50:14:0a:9d:5b:3b:28:31:e1:c2:43:07:aa:
                    8f:85:ff:54:8a:a0:58:5d:a7:a6:85:c9:26:04:d9:
                    4a:4f:8e:42:90:a6:7d:96:2c:cc:bb:2c:ae:bc:55:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:5A:25:0C:69:7D:95:8A:38:FD:0C:20:D6:E1:15:62:F8:58:ED
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:c3:d7:a1:3d:a1:74:58:a4:68:51:2e:f0:5c:77:c6:42:
         e5:f1:97:a3:5b:74:c8:85:9a:cf:e0:e7:68:77:c6:64:94:e7:
         b2:02:e4:c5:c3:e7:24:be:29:63:3f:04:58:5c:79:e6:4e:b5:
         13:b2:40:9f:d0:3d:38:dd:b1:d9:d4:57:8c:72:a3:35:9e:8c:
         0d:a5:91:f0:46:73:10:5b:ae:9d:43:9e:06:8e:a9:30:dd:d6:
         fa:7a:b9:7a:6d:10:d8:31:8c:53:9e:20:f3:31:17:6e:82:3b:
         b9:24:b7:b7:b7:33:c6:63:61:87:a7:aa:d2:7a:b4:61:c2:31:
         f7:e4:08:2f:75:09:0e:92:38:42:e3:62:eb:46:16:24:72:b6:
         42:b8:e6:86:63:e2:36:33:af:0e:b3:e3:2f:c7:9d:95:f3:74:
         28:39:cd:19:99:5b:e6:9c:16:e0:d0:b4:57:a9:1e:fe:36:3f:
         0c:cd:26:aa:6d:9a:af:a6:c7:b3:d2:3f:e5:02:af:8f:f6:f8:
         32:a9:b2:0e:1d:25:35:2a:f4:bb:a4:e3:84:c6:9c:1f:17:f4:
         3d:40:78:40:fe:81:9a:98:4f:e6:5a:74:81:1c:2e:2d:3d:4a:
         14:78:5e:e3:92:9c:27:ce:7a:ad:f0:75:20:a4:6c:30:b1:a6:
         57:70:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----