Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          RSfScsv+ehvm3nJL9DUWzFHkWXH/Ap9kur5nTXPPEjA=
Subject key identifier:   30:26:20:56:62:AD:19:B8:12:DA:9A:B4:CF:06:E2:72:C7:0D:04:A2
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       01962DF3C8FDE4F5E79F03A20D82626B7C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          152A
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=)
                          2: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=)
                          3: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=)
                          4: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=)
                          5: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=)
                          6: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=)
                          7: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=)
                          8: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=)
                          9: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=)
                          10: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=)
                          11: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=)
                          12: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=)
                          13: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=)
                          14: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: nOdHs2mxietwSVj8d9ynnkrhBv+Wn6zXTRg4lYwhSbY=)
                          15: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=)
                          16: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=)
                          17: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=)
                          18: fLQjwPFcSiNzGnABv3wcIsBu4Zc.roa (hash: fne6Mo/RPgJpx4rqAp26rw7ey3jXHPvd71VT3Sh+OPE=)
                          19: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=)
                          20: mphDesgjK6Onr5y6IZPMTWlrP-U.roa (hash: ilbmBxOIagqo/tPLQF0wDgYFEpCdkEK/5ye43lns6Ks=)
                          21: o5FfsyY8uPlw7vxZiArINnpfYQ4.roa (hash: 8fYUUuL1jUUHxudyw5FjfTDD1VxmkrgHLHMkAP13QCE=)
                          22: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=)
                          23: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=)
                          24: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=)
                          25: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=)
                          26: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c8:fd:e4:f5:e7:9f:03:a2:0d:82:62:6b:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=3026205662ad19b812da9ab4cf06e272c70d04a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:42:9f:2a:99:a1:2d:f4:a2:dd:39:97:93:
                    71:c3:b6:fb:75:f5:35:6b:e2:f5:84:19:2b:ff:bf:
                    e0:46:62:8b:01:06:f4:9a:2c:86:7f:23:06:95:2c:
                    85:9b:03:d0:72:9d:2e:e4:fa:9d:3b:bb:ad:ea:23:
                    eb:90:08:73:63:b7:b8:51:93:6b:6a:21:8b:49:32:
                    cf:fb:2e:47:c2:30:5c:d2:ec:7d:a3:bc:8f:70:25:
                    39:14:18:03:bb:75:1b:fa:95:a3:c1:d5:b4:1b:67:
                    59:11:1a:12:13:d0:93:ee:81:15:2f:c9:43:17:3a:
                    80:53:6a:b8:87:bd:2a:52:5d:b3:f6:15:34:cd:c5:
                    36:59:36:15:82:83:c5:d7:70:c4:db:38:74:a0:d6:
                    41:db:00:0e:5f:91:f9:e3:ca:23:98:5a:e5:be:89:
                    8d:6b:87:ab:92:88:4d:7a:87:ee:5c:c5:09:28:81:
                    37:3c:d5:92:03:e7:ab:2d:8d:7b:fa:ce:a3:e7:72:
                    2e:54:a2:f7:9c:1f:78:31:d6:82:eb:97:62:3b:cc:
                    64:22:8d:ca:f5:90:1e:9d:38:11:fb:dd:f4:d2:fb:
                    a1:d6:b3:4c:ba:2f:f8:0d:88:9a:1e:5f:a4:25:99:
                    28:c6:4f:2c:85:13:e0:49:39:d0:ba:12:be:ad:0e:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:20:56:62:AD:19:B8:12:DA:9A:B4:CF:06:E2:72:C7:0D:04:A2
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d9:e1:7b:95:a1:ba:6d:75:0b:c6:45:e9:45:3d:06:e2:33:
         93:d5:86:7d:30:67:3e:34:bb:8e:d5:bc:58:89:c3:b9:a8:0a:
         e5:e4:5b:7e:10:a3:69:e7:56:d1:d4:57:b9:45:0e:5c:b5:b2:
         75:5e:e7:aa:ac:e5:5c:82:0b:2f:10:9d:d2:6a:f5:7c:2a:0b:
         46:47:89:d2:f3:47:6d:c3:ec:ab:cf:94:34:72:09:ea:06:d4:
         66:57:5f:4b:ce:df:dd:b4:99:3d:7b:e5:07:44:eb:e2:43:39:
         7f:2a:33:77:33:05:43:46:2e:09:d8:39:bb:8a:09:3e:1d:c3:
         84:75:80:71:e9:93:ce:04:90:b5:af:d0:54:4d:82:2b:11:28:
         f2:7a:3c:dc:17:34:b8:33:41:a7:63:5c:8b:eb:ed:26:84:96:
         2d:de:33:1b:0a:a6:57:3b:fa:35:c0:f0:69:1f:14:ab:5f:e6:
         42:4f:ed:5c:2f:ee:0d:54:e0:85:61:87:da:4f:1a:e3:96:9b:
         3e:25:c0:c3:c4:f5:52:99:23:92:13:22:69:90:27:65:90:a2:
         cc:a0:66:97:3f:2e:df:12:c1:d5:55:68:13:5c:b6:87:63:a1:
         f9:a0:b0:59:de:84:32:b1:ab:4e:68:3c:57:6d:f9:cf:9c:47:
         17:c1:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----