Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
File:                     rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json)
Hash identifier:          oUnZXTjtjp6iKtYdzpTnI6RptcFr4XS4Uy+cBIMel2k=
Subject key identifier:   9F:1B:C4:10:84:58:AE:98:59:4F:C3:3F:E1:A4:0D:C6:64:32:5D:FB
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       01962F071697FD347FA9B6AEAD6FB67BDB15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
Manifest number:          16C8
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: NejRzLuHWpUHw3jw0tO9M5isrSE.roa (hash: Oc1iGWCAqIdRaZzFmBQVAvAax6q7v7xxYdN6dkLzwYU=)
                          2: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=)
                          3: TOEtygW-JFsbCGpcVCPKCUmvT8Y.roa (hash: JOt+ILdNMnAl8qaOPRPYlPMnVx4wLH49n9I8LiobkQA=)
                          4: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (hash: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=)
                          5: Wjj8gOzg1da1b1CmP06pBBENHBA.roa (hash: mWgkt+RIVXwEI8cF3WBZj7dRaqJifhXyEEqYZIkj2Qs=)
                          6: aMCpVj1Fefbqz5te0ANwzU5pAtU.roa (hash: /TZGThQW9xF+8qGqInkXk4qaM698Wah4degkQvBR09w=)
                          7: b3yZ5SfLfOiwWfajvWChYntwWXg.roa (hash: 5R7JEPLPsW6y5gS1BoIIf37tpHddWXNbf0WnumaWWuU=)
                          8: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=)
                          9: q9gmiu5dkfmaIXx90tfcomnbItI.roa (hash: Ws4BYHgfYQqnktG8+fqVGAhDOf16vZm+cpF1UNdcM14=)
                          10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: YJUDZ2ZYJQewZb9WX7SZfQ5aNtWp3cjW0EERS/pW+NA=)
                          11: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=)
                          12: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=)
                          13: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:16:97:fd:34:7f:a9:b6:ae:ad:6f:b6:7b:db:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=9f1bc4108458ae98594fc33fe1a40dc664325dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:2f:50:33:4a:ca:01:67:79:26:ea:98:1e:
                    d4:87:ac:d6:3e:01:cd:9f:fb:b5:a7:64:ab:2b:90:
                    60:b8:24:f8:7e:92:25:6b:ef:5f:71:38:6d:58:a6:
                    74:cb:2b:4f:b1:75:d7:7d:aa:74:f4:00:ce:1a:35:
                    3b:0d:50:20:1d:5d:29:a4:9c:52:2d:0e:0c:80:8e:
                    04:aa:3f:8f:a4:22:17:ab:6a:e2:9f:05:99:2f:24:
                    80:7c:d0:db:5f:14:16:48:c1:72:bf:82:75:c8:d3:
                    d4:a5:2d:c1:9c:b5:23:d9:e6:22:30:dc:8e:f2:68:
                    ac:c9:73:0e:f0:4e:57:87:2b:ea:22:42:91:bb:09:
                    71:16:e3:de:7d:9f:fb:9e:13:c8:8e:93:a8:4d:1b:
                    cd:66:30:bb:c2:8e:f1:54:50:ad:8a:d0:8d:d1:b2:
                    a1:0a:64:37:67:1b:63:80:2f:24:50:8d:eb:c1:e4:
                    77:b9:ac:0c:ec:f5:39:a2:c4:ed:9e:76:7d:97:ff:
                    09:d1:5a:d7:43:d6:87:f6:e8:ec:7e:02:9b:58:d1:
                    2c:03:e2:86:40:02:bb:03:fc:df:e5:67:05:2f:20:
                    72:18:83:8d:ff:04:d1:35:e5:0c:07:cd:3a:12:ab:
                    ae:c6:9c:38:b4:6f:bb:5a:14:23:d5:26:96:2b:1a:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1B:C4:10:84:58:AE:98:59:4F:C3:3F:E1:A4:0D:C6:64:32:5D:FB
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d0:3a:7d:c5:75:d5:5d:b2:d5:8e:85:ca:1f:bf:1b:a9:b7:
         8c:19:d3:6f:e1:cb:90:72:c0:c3:bf:dd:8a:af:ad:86:df:cd:
         2b:f2:80:39:e3:2c:c7:61:79:a5:c7:cc:a8:1d:9f:11:21:4d:
         0f:e8:d7:b8:06:8c:95:3e:34:19:6f:75:10:83:7b:39:84:8d:
         44:e7:55:e5:1d:f3:1c:62:cd:d5:e2:7d:de:99:ca:a3:f7:ea:
         55:2b:fa:de:34:50:4f:7b:e3:71:ca:d4:d1:46:f3:b2:8a:5f:
         27:11:a8:db:f2:87:ba:82:a0:54:89:43:a0:1b:b5:c1:6c:6f:
         ed:d8:35:45:19:35:3c:b2:31:79:c4:ff:59:0f:a1:fe:a3:58:
         7d:fe:8d:42:63:49:e1:0a:24:fd:5d:b5:08:eb:f4:88:85:f0:
         d6:4b:89:e7:94:6c:7e:40:4f:c8:ab:d6:75:a5:ba:99:7c:26:
         d2:7f:10:27:eb:cc:5f:70:dd:ee:1f:ba:dd:19:7b:68:48:32:
         00:ce:34:4c:75:ab:f4:19:6e:f9:21:e2:5e:19:57:ba:72:bd:
         75:76:f5:ae:9e:90:9a:b2:86:c4:10:d0:2a:1e:c2:cd:7e:ab:
         3b:a5:00:ab:83:50:54:29:0e:31:74:58:d4:7d:00:9e:a8:d8:
         da:50:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----