Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          idak16nIMZL2n3TRHDK3+p6BNS1Up7/i5S0kFRpL17Q=
Subject key identifier:   63:D1:EB:7E:8F:B7:EA:CC:99:98:42:68:A5:12:25:3B:62:86:2F:9B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       01962E99A894F31EFB0DEF10800172A95201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          0D37
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=)
                          2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=)
                          3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=)
                          4: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=)
                          5: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=)
                          6: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=)
                          7: Bu5OSyuwBUvGyz_EW5xEisOkNPE.roa (hash: floFuiP5W+ix524d77mDjkmOxeUI0BamBhf6MRMbiKo=)
                          8: ERVdycpY4bKVWQxSzavqyLO77UA.roa (hash: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=)
                          9: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=)
                          10: IPukP71PC08yP8GmcEEZAQV-N6c.roa (hash: NHeDXoBvplz6YvYpP3kHSplZzqsFWxBjrIGtxetVnNA=)
                          11: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=)
                          12: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=)
                          13: KNg_TScubKiJ2WSk1PndDHXafcs.roa (hash: OLVAzv3WRT7v8ayDj8gM91zwzw+fJVhu8S1Dv4NJlCY=)
                          14: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (hash: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=)
                          15: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=)
                          16: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=)
                          17: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=)
                          18: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=)
                          19: WcNfc2ebH1nabssdIAaljgMAMvI.roa (hash: gIeR1+oo2boP6Zw5hratvRw93AbF/Ul3dA94pgz+zkM=)
                          20: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=)
                          21: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=)
                          22: YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa (hash: i72ku+f2KHytCtL8AK60yC0CuhLhud/m7lirtjbMIIQ=)
                          23: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=)
                          24: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: u9iDZU2psfw4QGvZzr/36Juz4lIW7HLqgDIKNPCDbxA=)
                          25: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=)
                          26: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=)
                          27: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=)
                          28: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=)
                          29: riibS-9jCOUuRel1tsYcRpIOKLU.roa (hash: EeskdcNck3dqR0K/qsMzHAoOdtdVX+0gjJ2l/1tSnr4=)
                          30: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=)
                          31: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=)
                          32: xbB2W_NjgLWlbeNMcYSxlHjDmXE.roa (hash: BDb3t8owAR6ftClX/O++Jozk/RAQpNrFQeIkw/Bo4Vg=)
                          33: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=)
                          34: y-q4QvIjOXXAb6phQmiwxEr2T44.roa (hash: Fy91hg1vS4tIXtpEC6wT1knLe6VIcGMT2+6MAUeo8ig=)
                          35: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:94:f3:1e:fb:0d:ef:10:80:01:72:a9:52:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=63d1eb7e8fb7eacc99984268a512253b62862f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:e6:a7:c3:cc:88:c8:74:5e:0f:1e:83:5b:
                    91:d9:47:c7:85:0a:35:d6:21:42:71:ad:11:f5:71:
                    07:33:72:fe:73:4c:5b:54:25:d3:1f:3b:df:87:63:
                    f9:e8:b1:6f:5d:52:96:f5:df:c8:33:8b:d6:44:6e:
                    4f:05:a6:4c:11:f4:d8:a5:57:51:2f:ef:c6:60:37:
                    27:f1:4c:4e:3f:30:5a:95:77:aa:3c:26:ad:95:2d:
                    41:da:09:a3:a9:7d:47:f8:f1:5e:28:bf:e7:c8:d8:
                    1a:7f:ec:c2:8a:68:b4:4b:a0:23:9b:f2:56:26:15:
                    82:f1:d8:cf:ee:4e:0a:16:cd:be:e5:84:2f:cc:54:
                    47:aa:b4:bf:58:63:fc:16:b7:6f:3f:fb:24:3b:d2:
                    5a:59:57:46:24:bb:78:02:b2:90:fe:0a:aa:89:6b:
                    dc:0e:22:db:b3:b2:ce:09:09:f4:c5:00:fa:23:f9:
                    25:76:07:dd:e9:1d:e7:a6:d8:c5:24:d6:4b:b5:97:
                    22:8a:ec:be:5a:dd:e4:cf:a7:ea:44:05:5f:47:dd:
                    7a:53:74:0e:80:1a:eb:26:a2:a5:e0:1d:11:00:e9:
                    43:2a:e0:61:ce:92:e6:8f:eb:db:8b:ef:36:41:24:
                    e1:ee:e4:1f:1f:52:8f:00:0e:66:4c:f3:c8:61:26:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D1:EB:7E:8F:B7:EA:CC:99:98:42:68:A5:12:25:3B:62:86:2F:9B
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c8:d2:6c:55:01:6c:b4:84:7a:0c:bc:3f:e3:4e:3e:d9:1d:
         f8:0f:48:2c:d7:5d:af:ff:db:65:0f:d3:d5:de:44:8e:3f:53:
         76:5d:92:49:59:07:2c:af:c5:b2:ce:18:54:3b:48:1c:2d:bd:
         17:93:24:72:bc:d5:d3:98:01:5f:08:e6:3b:a4:76:30:60:43:
         50:fa:6f:8d:d2:74:6e:f3:d4:48:a7:69:91:c8:85:1d:42:29:
         8a:61:58:dd:38:48:23:f4:df:eb:d0:75:ff:6a:6e:59:cf:ea:
         52:a0:06:96:e6:ff:cd:6d:96:90:c5:78:52:8a:f2:4d:2c:eb:
         55:b6:69:c9:08:4f:0e:17:a7:91:61:e2:e2:ea:cc:7f:8c:47:
         53:8d:03:bf:67:ea:aa:a3:b1:5a:7b:35:79:1e:6b:3c:3e:d5:
         c1:34:ef:11:9f:d7:12:ef:1d:12:ab:c7:1a:29:32:1b:7a:4e:
         41:96:ff:3a:08:ed:87:6b:45:99:c4:82:8e:19:8d:a4:d0:44:
         fe:42:b3:f1:c9:00:86:1b:4f:37:61:40:cb:e8:d7:c5:2d:76:
         fc:89:f4:08:8a:90:0a:af:4c:30:68:01:50:8a:ae:fa:59:2b:
         3d:b1:ad:68:44:1d:19:61:22:bf:63:6e:e0:ff:85:d1:74:36:
         8a:ea:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----