Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
File:                     DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json)
Hash identifier:          5Cc//MyaRwoMt6JrwaodcnPcGUpfo5EzmtdYgVlgeF8=
Subject key identifier:   A1:E6:4A:87:8A:48:14:AD:69:D2:07:61:12:EE:00:21:AA:0E:1B:19
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Certificate issuer:       /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial:       01962F3D80DBA65F938DC21D623706AC572C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
Manifest number:          0EB6
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=)
                          2: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=)
                          3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: c52uBsy3AjdzcNKnbruahAtGMMfyNwElSg5I+C4OOdk=)
                          4: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=)
                          5: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=)
                          6: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=)
                          7: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=)
                          8: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=)
                          9: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=)
                          10: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=)
                          11: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=)
                          12: rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa (hash: +s5/7hhcPvTnv+J/E+7TIW4jm9Ttlavmle1UeAYMmYQ=)
                          13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=)
                          14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=)
                          15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=)
                          16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:80:db:a6:5f:93:8d:c2:1d:62:37:06:ac:57:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=a1e64a878a4814ad69d2076112ee0021aa0e1b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:e1:95:d4:e2:c4:6d:17:3b:7f:6e:59:4a:
                    36:4c:d6:13:b6:21:96:b1:16:43:0b:c4:21:df:b4:
                    9b:dc:d6:54:e6:b5:60:02:47:e4:5a:31:52:0d:ce:
                    ac:c1:ce:5d:e5:65:8e:59:9b:00:97:53:b6:1e:07:
                    bf:9b:99:3b:e5:22:a2:b1:44:80:a6:3a:b4:20:96:
                    de:a6:28:6d:41:a2:4c:79:86:9f:a3:98:17:bc:f8:
                    76:20:36:57:e4:e8:f6:78:12:41:92:11:cf:1a:93:
                    d1:74:3f:be:9e:c4:16:23:48:85:2e:6c:e8:53:24:
                    72:52:cc:74:67:46:a3:cd:2b:3b:d7:38:a4:ff:ed:
                    00:db:04:ba:cf:df:17:58:32:e5:03:40:f5:27:ce:
                    d9:c8:03:c1:ed:58:30:03:de:0a:8e:81:34:48:32:
                    12:d5:29:49:bf:0d:6b:4a:b9:16:55:85:ae:28:43:
                    fe:5f:67:b0:8d:9a:7b:48:97:06:f3:97:01:93:cc:
                    bc:98:4c:15:50:e8:c2:73:6e:d0:c6:12:21:8c:2e:
                    fe:4b:3c:17:24:4b:e5:cf:91:04:50:6e:74:7d:67:
                    22:61:b7:38:d4:de:d2:23:16:bf:10:0c:70:9e:f3:
                    85:92:dd:45:64:8c:74:64:ed:f1:eb:ed:18:29:fc:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:4A:87:8A:48:14:AD:69:D2:07:61:12:EE:00:21:AA:0E:1B:19
            X509v3 Authority Key Identifier:
                keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:75:3a:15:48:3f:45:66:8c:7c:5e:e7:46:15:51:0d:9c:b3:
         f7:2a:07:7e:d9:fb:80:88:fa:4f:b2:86:b5:42:f9:d2:a9:0d:
         4c:28:69:a6:b6:19:aa:2d:63:ee:a3:3d:6e:af:a5:0d:79:a7:
         4d:2e:9f:0f:94:1c:df:ac:13:cb:08:c7:dd:7e:52:2f:58:a4:
         0a:ab:19:fb:7e:95:f3:11:03:f9:65:58:66:16:28:25:4f:64:
         10:98:97:00:87:3d:73:76:a5:eb:8f:d4:48:5b:fe:43:01:6c:
         f5:29:27:57:50:9d:1c:2d:19:31:c5:06:b2:6a:06:f8:7d:d4:
         87:1f:92:6c:e3:1b:5f:84:1d:9d:81:37:6d:1f:72:c7:fa:72:
         32:16:14:17:ff:0d:d0:16:d6:ba:06:c2:fc:c2:60:0b:41:0c:
         ca:05:aa:4b:43:6c:52:34:ba:90:83:75:2d:fe:93:31:46:71:
         aa:0b:9b:2a:3f:f2:31:55:65:a4:30:07:e5:5b:87:cd:6f:76:
         98:5e:5d:b8:2d:20:e9:51:31:a2:eb:01:57:29:a3:e5:3a:9b:
         72:3d:fd:b5:5a:a3:99:0c:3a:31:66:00:f8:86:b4:4d:d2:73:
         02:6f:1d:d2:51:0d:e2:3c:00:49:c9:9d:0e:24:3c:71:c3:cb:
         0d:06:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----