Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File:                     1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier:          24a9xe0Jh/Vjw5dMaI/k0H3G9Q8FqWHkr1nIgJf1vo4=
Subject key identifier:   44:FF:BA:CF:F1:3A:07:A9:0E:11:0B:08:C6:7D:1A:5C:C8:05:08:A2
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       01962E9901074126891BC9AE8F935CA8F027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=)
                          2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=)
                          3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=)
                          4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: PfvrGTIC1sQj5DWYl7q4HkKlyd1bFEy0BtgU9PbvOtg=)
                          5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=)
                          6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=)
                          7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=)
                          8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=)
                          9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=)
                          10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=)
                          11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=)
                          12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=)
                          13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=)
                          14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=)
                          15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=)
                          16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=)
                          17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=)
                          18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=)
                          19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=)
                          20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=)
                          21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=)
                          22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:07:41:26:89:1b:c9:ae:8f:93:5c:a8:f0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=44ffbacff13a07a90e110b08c67d1a5cc80508a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:f5:3b:8d:20:cd:9c:2a:dd:71:97:2d:3a:
                    bc:ec:02:f3:d7:7e:22:1c:53:72:8f:32:40:a3:7a:
                    f2:d1:54:a1:5b:b2:5a:42:80:d9:0a:9f:78:21:d0:
                    b4:88:e9:31:4b:84:55:89:5c:83:d0:30:69:f3:6f:
                    a8:5a:96:27:39:46:e5:40:53:05:b7:80:c4:1d:60:
                    04:fd:a5:63:77:61:b6:c3:64:b2:10:49:16:cd:9b:
                    30:ef:33:d7:6c:61:91:22:c5:83:82:53:db:ca:4d:
                    f4:95:05:4c:bd:69:55:f8:5f:a2:d6:ac:61:3b:47:
                    1b:bc:df:77:8e:3b:e0:34:c4:bf:9f:a7:05:69:0d:
                    dd:f6:3b:96:0c:e5:79:d5:fe:84:09:48:a8:21:9a:
                    3c:58:b6:3a:15:64:c9:29:78:64:e5:0f:15:81:c4:
                    f0:af:17:8d:30:7c:8b:ec:10:eb:2a:06:97:b1:7a:
                    6d:ed:d0:d7:f1:ad:aa:e5:90:e9:ae:72:a6:6b:71:
                    5b:39:05:9e:82:74:0a:a8:da:9e:dc:e2:0c:50:73:
                    6d:e7:9c:3a:4e:90:07:d8:92:e6:16:a8:84:28:83:
                    98:81:8a:15:d4:31:ce:ee:91:1e:63:53:b4:ae:b3:
                    67:41:96:28:da:aa:b0:b9:85:b1:30:af:41:2c:05:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FF:BA:CF:F1:3A:07:A9:0E:11:0B:08:C6:7D:1A:5C:C8:05:08:A2
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:07:ff:cc:a1:d3:59:07:ce:6b:4e:94:f2:08:b2:1a:60:a3:
         06:39:13:f8:92:05:5f:eb:3d:fd:98:7d:39:69:77:be:60:18:
         2f:00:0e:04:9b:69:aa:e8:cb:86:d4:e8:44:9d:24:94:2a:2f:
         01:b0:31:db:18:6e:81:6b:e0:52:fc:96:c4:57:5f:19:f9:91:
         ac:bd:69:9a:91:02:4a:b4:46:a0:b1:92:66:df:50:2a:6a:6a:
         da:01:e2:52:a2:31:ae:79:6c:07:ec:a7:01:e6:0c:96:38:fd:
         7e:77:a3:52:a3:30:6c:19:f8:55:b3:19:b4:47:f1:dd:ef:58:
         09:5d:52:3d:cf:b4:ff:5a:ff:d8:d8:fb:b0:89:5f:23:50:01:
         4b:62:53:b3:56:01:5c:e4:69:2b:23:77:42:a5:fe:55:0f:c3:
         e9:4d:78:9a:51:e0:c4:22:18:c1:ea:69:4b:9b:0a:b1:bb:47:
         70:e5:f7:fd:d8:5a:27:65:05:85:86:37:65:a6:ee:b8:4e:d6:
         68:02:2c:dc:60:66:7a:51:65:96:50:7d:5b:d8:4b:70:b1:6c:
         7e:5c:04:b5:a5:b9:f4:1a:9e:3d:33:fc:0f:bb:33:90:1e:2c:
         06:90:fa:a3:80:25:12:da:92:2d:a1:45:f5:05:d2:92:30:0e:
         c8:88:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----