Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File:                     izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier:          qBPn8sCjWrHu3eFVdje3ET2XsDyr+27npOwXhhp1kAc=
Subject key identifier:   DC:30:1A:E0:37:E7:0A:4A:F0:84:2E:A8:AA:BB:D1:6A:63:B1:D4:51
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       01962DF43B4D2827FE8D76E4E67B6C800412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number:          0185
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=)
                          2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=)
                          3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=)
                          4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=)
                          5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=)
                          6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=)
                          7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=)
                          8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=)
                          9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=)
                          10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=)
                          11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=)
                          12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=)
                          13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=)
                          14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=)
                          15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=)
                          16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=)
                          17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=)
                          18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: WqC1cYxMbTWh3YJIV6NKSr0CIB6lH0Kc0tKfl/vesq4=)
                          19: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=)
                          20: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=)
                          21: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (hash: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=)
                          22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=)
                          23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=)
                          24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3b:4d:28:27:fe:8d:76:e4:e6:7b:6c:80:04:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=dc301ae037e70a4af0842ea8aabbd16a63b1d451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:86:a6:6d:41:9e:29:93:62:60:e2:2c:1e:
                    46:a8:b4:2f:32:68:5a:66:e7:69:1e:79:dc:b2:34:
                    66:7f:fc:d6:90:9a:3c:9c:9b:24:4c:5e:d1:76:51:
                    0a:9f:32:0e:4f:2c:41:8b:55:e0:db:7f:dd:2b:f7:
                    17:02:4d:81:6e:eb:65:24:97:e0:a6:f9:1e:61:c3:
                    f7:75:08:6e:79:96:44:a3:2e:c3:7f:27:c0:43:c2:
                    c9:e6:87:2f:10:9f:26:6a:e3:aa:d9:02:ba:76:cf:
                    86:0a:80:3f:f5:8f:52:8b:16:d2:79:b3:3e:25:2f:
                    a8:3f:05:18:a1:ad:35:9a:5e:c8:d7:09:49:ff:6c:
                    11:40:2b:6c:d3:7d:8f:cc:3d:dc:8b:71:4b:51:35:
                    11:66:97:b4:97:04:95:1c:ba:33:60:38:51:0f:7d:
                    ef:40:7c:a7:8f:fa:9b:a5:21:da:ae:f9:d3:74:19:
                    9e:84:31:6c:7c:5c:52:c2:e9:0e:45:2b:f6:37:03:
                    da:c9:96:42:b2:5d:51:2a:21:e6:81:92:79:5f:7c:
                    6d:43:7a:c2:b9:25:70:90:ee:79:44:29:d3:a7:8c:
                    6a:30:d5:38:fc:b0:ef:b2:78:28:b3:32:7c:7a:54:
                    04:cd:4d:d0:a8:44:38:73:ac:a9:3d:ae:a2:72:f3:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:30:1A:E0:37:E7:0A:4A:F0:84:2E:A8:AA:BB:D1:6A:63:B1:D4:51
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a7:bc:05:a9:d2:f0:c4:cc:6f:a5:a1:b2:33:75:71:6f:26:
         81:3b:37:c4:7b:dd:c7:52:64:bc:80:d4:44:c5:9b:10:dc:6d:
         9c:94:32:33:f1:f5:b4:21:7f:2c:67:db:a6:b0:b0:2f:45:ac:
         ad:03:1e:25:57:4a:23:96:87:6a:e7:58:a4:9f:f5:59:e1:4a:
         d7:7f:26:95:16:4d:b6:2f:d4:ef:09:f4:76:b5:74:77:9f:77:
         8f:94:47:27:a8:2b:b6:c2:11:3e:e0:97:08:f9:37:8a:f3:73:
         fc:45:05:f2:08:18:59:1a:85:3a:d2:24:f9:45:d5:d4:62:46:
         23:03:74:86:a3:a6:ed:e7:8d:ff:da:4f:e8:ac:23:ba:81:70:
         3a:93:ee:2e:3b:29:7a:1f:bc:42:5d:f6:a4:12:8b:a8:40:f9:
         f8:49:08:a7:c8:d6:03:ed:46:4a:ca:37:67:d4:3f:5b:0c:3b:
         36:e9:f5:5f:5a:8d:0b:7f:02:2e:3c:6f:30:c0:7a:ad:f5:01:
         d5:4c:63:20:30:d1:d3:4d:49:97:0b:d0:17:a6:8a:0c:32:a0:
         d4:75:1d:c4:32:1c:eb:d1:f9:72:ea:79:9a:db:06:a1:c4:51:
         06:1b:61:7a:6f:18:09:b6:67:c3:86:90:59:18:60:39:77:22:
         a3:ca:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----