Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
File:                     Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json)
Hash identifier:          X+5V7B93EymRetva1jAJNWjSVVQpJtJs3KxFZ2xEFDw=
Subject key identifier:   26:EF:42:11:EC:76:21:BD:2C:C3:15:38:63:8F:15:D8:ED:D2:A8:EF
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Certificate issuer:       /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial:       01962F3D5F5776FC3E565099449C91496F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
Manifest number:          1109
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=)
                          2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=)
                          3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=)
                          4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=)
                          5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=)
                          6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=)
                          7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=)
                          8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=)
                          9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=)
                          10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=)
                          11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=)
                          12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=)
                          13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: 3K72OQ/XAzZERfvf7Z1oMLx///tolnLjOq1UhQpzOOM=)
                          14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=)
                          15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=)
                          16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=)
                          17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=)
                          18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=)
                          19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=)
                          20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=)
                          21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=)
                          22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=)
                          23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=)
                          24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=)
                          25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=)
                          26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5f:57:76:fc:3e:56:50:99:44:9c:91:49:6f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=26ef4211ec7621bd2cc31538638f15d8edd2a8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:35:76:96:4a:00:25:84:99:1f:81:57:10:
                    cc:7d:48:1b:d3:c8:42:59:2e:2b:50:08:27:e6:f3:
                    78:12:48:0a:1e:f4:67:3e:79:d5:b7:2b:c5:98:3e:
                    b3:98:d7:c2:10:33:3d:43:f1:a0:c5:d8:8e:b2:2d:
                    56:de:92:d1:fe:fb:de:5e:c7:93:eb:22:53:10:2e:
                    99:82:6f:da:14:07:31:84:11:80:a4:84:4a:8c:10:
                    b2:7e:9f:99:dc:98:ff:18:d7:f3:82:ae:9a:5b:5c:
                    7a:29:59:24:b1:81:7a:29:4c:6e:c9:ba:40:72:af:
                    94:ea:af:8b:8b:0f:22:54:b5:99:e7:ae:fc:08:0c:
                    b1:79:34:3a:50:9b:9f:f3:31:b7:1d:01:9b:ac:28:
                    a4:0d:86:4f:60:a6:47:f7:dd:e7:be:c1:8e:11:85:
                    74:a6:b8:7c:31:8e:37:41:d9:f2:78:ac:fc:9f:c3:
                    da:ef:84:0d:fb:8d:7a:10:03:45:08:32:89:87:0b:
                    1f:93:f6:f0:31:18:10:9a:d0:29:11:56:c5:33:4e:
                    31:55:f1:ec:0d:df:96:c9:6f:98:8b:c6:b5:44:6d:
                    b4:94:00:fd:b7:40:53:84:5d:a3:a0:d0:6a:b4:f5:
                    65:be:4b:53:b9:39:a0:14:17:32:92:74:69:b2:0b:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EF:42:11:EC:76:21:BD:2C:C3:15:38:63:8F:15:D8:ED:D2:A8:EF
            X509v3 Authority Key Identifier:
                keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:3e:f3:67:c2:9e:0f:d2:b3:2d:62:fd:4f:8a:39:1c:7c:
         34:bb:82:d9:9e:d4:f2:be:4a:39:8d:ea:34:7c:74:5c:5b:03:
         77:31:8d:14:8e:ed:95:cb:07:ee:bd:26:96:39:d5:3b:6a:8d:
         13:bd:2b:90:a8:5f:05:54:fd:ef:5a:09:96:35:52:2a:b5:db:
         99:74:12:4b:79:ad:74:df:e8:eb:94:c2:9a:99:24:65:5a:2a:
         51:b8:02:87:10:20:a4:47:66:63:3b:00:21:bc:ea:23:42:e1:
         bc:b5:0a:0e:31:bd:3b:4a:6a:02:f7:2b:73:4d:19:8f:b5:36:
         2a:5e:22:0a:df:63:45:7f:f4:54:5d:3f:c2:fb:c4:a9:78:90:
         74:eb:5c:3d:98:65:36:53:b4:5a:33:17:d4:41:a7:49:b2:58:
         32:fc:dd:3f:4c:f0:14:df:b1:91:5c:e8:94:30:1d:63:53:48:
         45:f1:42:f4:d7:b1:b0:d8:fe:ff:9c:cd:43:65:40:e5:7e:9f:
         81:c3:c3:34:d2:9b:81:48:d3:ae:aa:55:d5:a0:29:24:ca:4b:
         28:22:51:7f:d4:04:62:e0:12:7a:7e:f2:c4:f9:2b:53:c0:23:
         62:37:cc:c2:ae:b0:f4:26:2c:8b:fb:2d:73:b5:21:fd:0d:d6:
         f1:aa:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----