Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
File:                     gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json)
Hash identifier:          UUVki1s8cE/Z/6hZGuWpvivIZekvyRoH73Aim1fyCfs=
Subject key identifier:   52:95:DF:E1:1E:24:88:14:49:D6:C5:A6:36:07:67:37:1F:18:72:0E
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       01962F744AEBF922D8D2E052F651C0DE8F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
Manifest number:          154B
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 1-VklZtGfRDIv9KG76liQR83-to4.roa (hash: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=)
                          2: 1-VoUxB16sFUpabKYYCaz09m0veQ.roa (hash: jBzaCnK55nBqjAgFzIbfoxSdnwHfF10JuSwdasZO+DQ=)
                          3: 2o5lxS17-TuelE1Eo35Ac7B5RQI.roa (hash: r0p74cT43WIPOHKiilDFyNpmu7ELpn61XsWmhxelkQE=)
                          4: 4locrxHyX6UeBrTCDBKq3fJjIhU.roa (hash: 57RX/2aGUXBNZq4wqCsxDNWTaoMCixeTd2hAfdAzOz4=)
                          5: BD48RnLKhQNQSxwnTl5Ut3DTaaU.roa (hash: pJeqPcMqpwy5eeOtqwiuelICHhHnGVKN+Sk6N5/HqY4=)
                          6: C36u7KfhCFOa8XdN016Wy-ytnzU.roa (hash: NBROKoh3VnJzs+HifzEAW5oRrothQyJwHy1p6FD7qNw=)
                          7: C7zRH1Jrw7K4qkebKM5gx-PMLHo.roa (hash: V9v5Bwq8jAUyaBzFj3ac3ordtwBsUduLjuOy3ng7dlw=)
                          8: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (hash: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=)
                          9: G7qOVLwRQlkEUG0XGeZBugA-InU.roa (hash: ra5AqUSh6Ku+Y4KrCiBgkUNOkURj3FGVxxn+YcD+2go=)
                          10: HcWreomVamO6igDbYdaHvUovBJE.roa (hash: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=)
                          11: P_H5I901p9uT4TULpcfUWpnfgxc.roa (hash: 5nYschX/VQUuVCl6HMxh2V0MkBgtU9xLQ/f2zZLAuzo=)
                          12: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (hash: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=)
                          13: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (hash: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=)
                          14: cZ1VjXvm2kSaXyfxbG6DWvRG8uk.roa (hash: 5UVRN3VFRKsZKsanW2WSNXa8tl9mzCzer8YNhv2aLws=)
                          15: dUDoTikRrhGqdHuoRq6nJ22ijx4.roa (hash: CZEX4tVYDKiuZFQCXPesSFgD4Ewr620I1xlB1PmSx34=)
                          16: dmn9WWC1cOw8-syFOH8rVvRUYcM.roa (hash: yTiBT+PxdCbTZTX/xwUlIfZpsEgNm89xZp8RsHoNwSE=)
                          17: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: IW97rKDYUUW8qTJ/MSXOjcQIQkaG9WUMBTxwSH8xh6s=)
                          18: kY7v-kZFRWVPM0lT7sYWUtUQwD4.roa (hash: 2dyjjHYflFomwOu3+s5WMQHZPLjaXr3S2KB2kA29nis=)
                          19: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (hash: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=)
                          20: ltR8O9eT6M3oAU_gxp7pcWB8yvg.roa (hash: 5GhoLYlXlz1l2KGazssc6/9eGWn++CM1C2ZU91tWclU=)
                          21: qE_tcfupauq7XdXPqb7KSreupsQ.roa (hash: 3EJWNtY+Qhvm2DJ7H+6VvM2/OxiFGq47XqF2H0oCbzM=)
                          22: rU4-fu2i_puERNzqsZusptLEhxw.roa (hash: oUOtoTz5sCAfhIfBXkRUrvoxsTQJBic3IEPNnf2jOds=)
                          23: sjGNR44IPNB6YOE5kbYUMAmAQ2c.roa (hash: sEDrCkJksXTVWaboHfAfeMVVlrdjOtJNi3rs1KmLVVI=)
                          24: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (hash: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=)
                          25: vQxaXFFye15rTmMFdspwW0lZXXw.roa (hash: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=)
                          26: whutfHrGbrMoUBiwqU4xPdyhmA0.roa (hash: IJxHyhxFaVshf8NMZql5Td0GAvIXYopqx9xBaH+8idI=)
                          27: zCFasBm0EYXOg5wMczyui1g8P7w.roa (hash: vMOSU2/g4EkiB4e8USpsHbmF4Ns22ciWga/oRAR99+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4a:eb:f9:22:d8:d2:e0:52:f6:51:c0:de:8f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=5295dfe11e24881449d6c5a6360767371f18720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:e2:f1:04:72:a1:79:f3:f1:4f:03:44:b0:
                    38:34:26:cb:2a:3d:22:38:b4:6b:5c:d9:38:c2:e6:
                    24:c5:c5:9f:6e:52:49:51:57:96:e1:6d:c4:30:cf:
                    6a:d3:73:3b:48:ff:ef:00:80:47:a2:58:f3:c5:eb:
                    cd:cd:65:b0:92:2e:a9:01:4f:1e:37:99:23:91:e0:
                    0f:25:05:cc:a9:8d:5f:95:d9:0e:20:d0:c7:a1:38:
                    43:2d:79:e4:8e:1f:b1:32:98:2f:72:e6:d8:47:b4:
                    b1:e6:ff:23:96:c5:b9:c1:6a:48:60:cb:70:38:0c:
                    da:46:c2:dc:04:10:dc:60:b3:4a:5d:c0:b4:c0:04:
                    1a:6c:0d:ba:5f:ba:8a:a3:47:3d:2c:8c:60:76:5c:
                    f2:92:5a:51:4a:1f:a1:1a:48:b1:fd:c8:24:42:58:
                    bc:a6:ca:db:49:35:c3:78:f5:75:e4:a0:78:98:11:
                    6e:21:d0:00:d5:b0:73:8d:79:f4:cb:fe:c2:dd:2c:
                    f8:f1:6e:89:df:23:f5:6f:3d:8c:85:00:99:20:23:
                    2a:84:b5:e1:2a:88:89:2c:53:af:1b:4f:cc:94:1a:
                    7a:3f:5d:60:23:78:f8:25:89:ad:e2:ef:0a:8c:80:
                    2e:70:8c:37:65:eb:b9:24:eb:5b:9b:d5:d8:db:48:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:DF:E1:1E:24:88:14:49:D6:C5:A6:36:07:67:37:1F:18:72:0E
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:52:5d:11:0b:ea:17:5f:24:ca:a2:ea:9d:ae:3e:1c:e9:f7:
         61:f6:6c:05:a4:6f:43:7b:03:ec:0f:9b:28:4d:9b:d7:e0:39:
         fe:1c:da:ef:7b:ea:21:1a:23:94:ed:b2:36:09:79:86:4c:8a:
         89:cc:71:e8:c5:71:a2:3b:48:c0:38:05:32:ee:7b:95:27:b7:
         98:e6:22:52:23:18:97:3a:e4:d9:ca:6f:cf:d2:f0:bc:1f:68:
         3e:fc:63:d7:d7:50:31:f3:bb:50:8b:f2:6f:01:28:de:c4:21:
         ac:56:60:93:83:06:40:84:f6:d4:81:ea:09:d0:25:5a:59:64:
         aa:a1:40:73:58:34:91:18:16:c7:e9:3e:73:b4:b5:4b:0b:8b:
         7b:91:1a:c1:85:65:d7:24:4c:b7:9f:74:0b:d3:c1:6e:e4:ba:
         6e:52:4b:f4:75:e9:73:3a:49:ea:b4:f0:a7:06:2b:f0:c4:cf:
         c8:64:52:8e:ba:4c:06:ea:94:d9:81:8c:76:26:11:b4:c0:49:
         7e:12:aa:04:9a:92:ce:a9:30:0e:aa:a0:47:fe:7f:d2:09:24:
         71:48:ac:13:17:db:0a:b1:7d:03:aa:3b:38:7d:64:85:73:96:
         0c:aa:c5:75:b3:85:bf:b8:13:a2:ef:ee:d8:85:ca:ad:af:00:
         ec:02:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----