Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          HSWfBhu95Gf+3sDH3VtqjU1UTX/wGpMsQrjgMgXJaFw=
Subject key identifier:   58:5F:89:04:C3:37:1E:29:18:07:D8:9D:3F:3E:46:F0:77:E6:52:E7
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       01962EA8DA6154DD69A65B9873984D8AEFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          1593
Signing time:             Sun 13 Apr 2025 10:18:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:18:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:18:59 +0000
Files and hashes:         1: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          2: 1nt7KKZ_kaA4th0sEgXg_btvGGw.roa (hash: P3hRQakGX2DJeRwO8m5JnZZQAfAIlClGhi09lkYemow=)
                          3: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          4: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          5: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          6: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          7: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          8: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: k/RDBgyuyaVRNS1ETqCdUrGslAm0Oh6Kz+gqp3coEcw=)
                          9: AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa (hash: l484VXhb55rIiF/y4SkOcQOfu2WyfAjYkWmS1k5CH1c=)
                          10: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          11: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          12: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          13: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          14: FXYvz9E0JYqF8RzOei7ox1lSgbE.roa (hash: oUsJ92odAeW0Rii1JU/A8TMIgyDgz0YKa9dc9QUQIOI=)
                          15: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          16: GlJLYgf16agSfqwntlZ-9s0ycuE.roa (hash: H/pf+nizH//gW/qa/JKNB79H5K4HjIq/Ki214ycp+sk=)
                          17: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          18: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          19: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          20: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          21: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          22: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          23: NEfw7uDro6RqhjU8Fywg8cuqvzk.roa (hash: vdW+pYdyNoqoBJe2vsedZizZQj8kJ9GbuQcTyC/bcow=)
                          24: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          25: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          26: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          27: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          28: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          29: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          30: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          31: fgXOYlOn8katcS6MMyCw4pAx-po.roa (hash: AB1i+66TTW5eKzQUMm/K95jLLcwZ4U/B834LTt2ayNo=)
                          32: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          33: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          34: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          35: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          36: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          37: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          38: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          39: yZgl1zyLJKgQpTHOd8kSTVljdNM.roa (hash: f2YDZTloIVUPbF+TnGafTEX+6riOCFoEhWnQt6Ptf2I=)
                          40: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
                          41: zpoKfpByhTXsEsiuyInACuPcOfg.roa (hash: 0FvCKrjX0iWxoVFTXATz6myqQtbOGfjhdIhKL1qGpes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:a8:da:61:54:dd:69:a6:5b:98:73:98:4d:8a:ef:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Apr 13 10:18:59 2025 GMT
            Not After : Apr 14 10:18:59 2025 GMT
        Subject: CN=585f8904c3371e291807d89d3f3e46f077e652e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:cd:ce:62:85:5b:cd:75:6b:80:06:08:8d:
                    4e:8c:35:da:42:fb:4e:23:5a:ab:7d:2a:56:d4:7b:
                    a4:2c:98:2b:c9:05:17:4b:34:3b:5f:09:30:34:00:
                    12:1f:62:66:88:ff:27:09:25:d5:32:d3:38:1e:c7:
                    9f:d8:1e:0f:e4:88:d4:fc:9c:9d:01:d1:ec:a2:47:
                    cd:1f:77:08:13:ec:cb:ee:b9:44:a0:d4:62:9e:e3:
                    a0:c6:93:59:24:d1:82:1f:79:88:84:32:d0:cb:54:
                    fe:26:b6:4d:07:29:45:2e:e8:9b:06:d8:44:f4:80:
                    06:90:da:b9:eb:c5:33:56:53:73:b4:32:6d:5b:da:
                    d2:2b:a4:6c:04:87:af:4d:d2:61:e6:99:3f:30:d0:
                    1b:9c:5d:f0:9b:2e:6e:71:50:c5:6f:e3:54:67:20:
                    94:f3:b6:77:c0:df:e2:0f:88:d2:33:c0:34:db:01:
                    f2:c3:48:65:07:09:7d:2e:18:df:86:6c:69:5a:23:
                    7d:c0:7b:0c:60:cf:2d:0c:35:5c:f0:28:f6:50:71:
                    a6:1e:b5:fe:b3:fe:90:8e:00:77:da:fc:68:0c:61:
                    c1:92:a7:d2:6c:86:b5:82:e4:54:46:eb:4c:f8:f4:
                    ef:5a:bc:34:50:af:74:f0:06:6f:84:3b:2a:b8:20:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5F:89:04:C3:37:1E:29:18:07:D8:9D:3F:3E:46:F0:77:E6:52:E7
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7d:11:e3:73:29:9c:8b:0b:a0:7e:1e:da:95:1b:1d:7f:99:
         94:eb:de:43:1a:66:8a:41:e2:60:b1:bd:39:6b:3d:99:9b:68:
         64:da:ee:a5:5e:d2:5f:cd:08:b3:ff:60:75:73:bd:5c:13:f0:
         37:a9:30:20:f6:c2:5c:94:04:fc:5b:cf:e7:43:2a:06:44:52:
         62:cf:23:78:d8:91:e0:1f:86:ab:89:f5:33:23:ec:09:51:07:
         71:ff:25:9c:5d:0b:ba:72:46:dc:37:3f:78:8e:cb:22:7f:32:
         f9:84:fa:7f:62:25:c3:95:76:88:8e:d3:f0:47:23:72:17:b0:
         d2:5a:f2:1e:be:9c:e5:fc:d2:8b:d9:76:bf:49:bf:d3:11:76:
         0c:3d:75:5d:22:39:02:24:7e:9b:2c:d9:9a:cd:94:16:99:d8:
         c6:7f:b5:15:24:4e:93:34:51:17:b6:52:e8:0e:82:f8:6f:8d:
         ec:c9:d2:fb:13:e1:b2:e6:56:95:c2:4c:87:6b:8e:8c:44:8e:
         40:0d:ab:34:61:38:41:a1:40:5c:77:9f:e7:bb:38:68:f2:e0:
         5c:d5:b2:7c:48:6a:95:6a:0d:b5:d2:6f:5d:ea:18:12:63:e3:
         6d:53:45:aa:fb:f7:7e:2a:08:8e:bd:4c:4a:55:69:cc:84:b8:
         f6:20:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----