Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File:                     I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier:          tQxNngDMKt1p3NprhbZGm6idI4cOVvNK0f6HiguDKuk=
Subject key identifier:   F9:D4:3E:6A:85:C5:B4:85:E4:77:83:AF:DD:19:4B:5E:EA:98:B9:5F
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       01962F06F52001E817005E7029B65768A75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number:          12AA
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=)
                          2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=)
                          3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=)
                          4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: 0xA9xt8Yp6WLJEd0P92sJdzxTGHee5SXXmUwSg5uWp8=)
                          5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=)
                          6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=)
                          7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=)
                          8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=)
                          9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=)
                          10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=)
                          11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=)
                          12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=)
                          13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=)
                          14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f5:20:01:e8:17:00:5e:70:29:b6:57:68:a7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=f9d43e6a85c5b485e47783afdd194b5eea98b95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:3d:45:3d:1f:e8:c2:0d:b1:24:fc:85:40:
                    af:68:fb:9c:3a:4e:50:84:4e:a3:07:99:1b:bb:e1:
                    5c:00:8d:3b:69:96:d8:a3:4b:17:e4:f1:cf:59:45:
                    a3:5d:ec:dc:ea:2c:a6:cb:d9:7b:5b:4d:17:0d:c2:
                    f8:78:89:9d:10:6b:8a:0f:cf:46:b8:95:78:96:7d:
                    18:50:5b:a1:15:65:d1:e4:c8:50:db:71:5f:02:86:
                    43:79:85:29:f1:fd:85:a7:13:d3:ed:67:ec:b5:06:
                    d7:b9:e1:4e:9b:d4:f3:57:2a:3c:47:ba:9b:56:d8:
                    6e:a4:01:03:8b:86:4e:a5:e7:2e:56:c9:47:17:6f:
                    03:36:5d:01:ee:a3:1f:90:1e:2a:f3:52:c6:e9:5f:
                    09:94:fa:07:54:e2:2e:a1:7e:24:e4:06:da:af:c2:
                    70:54:7f:0a:7d:2b:04:3a:0c:a0:ab:a9:2f:14:4b:
                    fc:98:5b:13:8b:f4:e6:b5:6a:a1:03:02:01:2f:24:
                    0a:10:80:0c:bb:32:7a:38:61:3f:a2:39:25:f2:7e:
                    c2:48:9d:a2:c2:6c:2e:39:4c:91:01:e8:0c:8c:bf:
                    65:41:61:6d:09:58:51:12:81:5a:5b:55:ed:ff:e9:
                    da:79:09:82:ed:12:60:c4:89:bc:27:0a:05:0d:c5:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D4:3E:6A:85:C5:B4:85:E4:77:83:AF:DD:19:4B:5E:EA:98:B9:5F
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:68:d8:f9:8f:e2:d6:22:35:73:8d:d7:1d:8c:74:6a:b2:
         83:99:0b:59:ee:6a:5e:1c:75:d4:4d:47:22:6b:4f:11:94:40:
         a6:db:22:ec:0a:87:df:af:59:a9:8d:65:c0:2f:04:1a:d4:25:
         1e:30:d9:a4:b0:ef:ff:ae:23:ff:2d:31:27:dc:c7:de:5d:d3:
         9c:97:39:06:60:26:ac:c4:ee:9f:90:4e:1a:97:ae:b1:1f:9e:
         04:f6:4a:11:83:58:05:94:1c:48:f4:85:ad:90:32:68:08:d1:
         90:fb:05:9a:5f:9b:11:d8:43:e1:08:9f:f0:bd:32:0f:76:09:
         dd:a6:f3:26:8d:1b:55:61:fa:75:21:6f:de:7b:ce:f4:00:e4:
         1e:7a:70:5f:0e:89:94:57:e7:63:47:2c:b1:79:70:5d:ef:c4:
         b7:ba:91:ac:1a:fc:a3:80:0a:f1:f7:dc:96:66:e7:0a:d2:90:
         e0:8d:80:a2:4c:45:b4:8f:5c:6f:0b:b1:2f:7c:b0:7c:eb:0b:
         1c:40:6f:fa:20:c3:92:91:62:8e:4e:d4:b4:d8:28:84:b0:ef:
         09:69:d4:16:be:46:d8:0f:95:3d:0c:fc:47:b2:99:0b:e0:99:
         3b:95:7a:25:7e:15:29:52:5a:3a:fa:5d:87:58:2d:c6:c6:91:
         9d:93:16:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----