Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
File:                     437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json)
Hash identifier:          MRpKvjQqsRCdX/qAYPqxI5wnrFCu4U59NW8hdzxgUWY=
Subject key identifier:   2F:8F:DC:63:6F:19:A0:55:7C:82:4D:FB:49:5D:03:56:1A:3B:CF:AC
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Certificate issuer:       /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial:       01962F3D2C05666E7C6DB8989CC825E8BD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
Manifest number:          1512
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=)
                          2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: 8QqrJxcKlvIviuKHAgs+jRHhU2c9uXg2LOEEaXj9qpI=)
                          3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=)
                          4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=)
                          5: HCRZ7kidZrpHRM8SX0jXI98_QOg.roa (hash: HUPg13X8WTvtMO+SgQO0HEMJKkRMS4NI1byIhfG01j4=)
                          6: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=)
                          7: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=)
                          8: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=)
                          9: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=)
                          10: _z7lUoI1zB7ijV7HBhNzAOg7hvI.roa (hash: /vONE0L2m45mBqfcuw95QHCPgC/SgADGzcrX8+7SrZY=)
                          11: btFiCRe6ijn7iG7FxViTiaat_Ss.roa (hash: LM2pD9aQd87JsY0EO+NGidT06PsoOqy+c+K8ZJnFpLQ=)
                          12: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=)
                          13: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=)
                          14: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=)
                          15: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2c:05:66:6e:7c:6d:b8:98:9c:c8:25:e8:bd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=2f8fdc636f19a0557c824dfb495d03561a3bcfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:3e:f0:96:01:5b:84:3a:14:5b:4f:b5:a7:
                    47:0b:be:32:a3:7a:87:cb:f3:79:6d:64:00:7e:01:
                    0a:f0:f3:a2:ed:43:88:57:69:fe:67:56:8b:22:f5:
                    48:7c:f7:6c:6c:fb:75:75:7c:5e:b7:b3:6a:5c:da:
                    ac:05:6c:13:2a:b5:fd:2f:89:8e:82:06:02:40:2e:
                    c9:d4:af:1a:81:36:f3:30:e2:14:ed:19:80:2f:0d:
                    2e:83:be:13:75:9b:e4:ae:19:7b:25:9f:26:34:50:
                    49:22:1a:91:d3:56:ee:3c:96:e9:cc:f4:83:3d:82:
                    1a:33:85:fd:6f:7f:56:7e:be:81:d6:4e:37:d6:7c:
                    31:fe:9f:0a:ce:b3:3b:d6:d1:fa:b3:ec:67:84:ab:
                    fb:9b:4d:26:21:96:6d:f9:eb:a9:38:2c:c9:01:fe:
                    a8:c2:13:29:fd:e5:1c:cc:d0:4e:61:e6:44:48:76:
                    a6:eb:6a:31:6f:18:a6:ac:3b:03:d7:9e:05:15:4a:
                    ee:49:65:3f:48:ed:f8:66:a4:7a:82:df:ae:90:5a:
                    14:78:5b:12:22:87:b7:32:81:70:06:3c:30:1b:db:
                    ba:75:ea:ec:90:97:77:51:59:72:70:2f:b6:a7:d2:
                    36:d4:6b:ca:26:ca:37:ab:28:d1:f2:2b:73:fd:82:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:DC:63:6F:19:A0:55:7C:82:4D:FB:49:5D:03:56:1A:3B:CF:AC
            X509v3 Authority Key Identifier:
                keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:53:dd:6b:36:9c:dc:b1:f9:ab:12:ec:f1:f8:c2:5c:4d:
         20:2c:94:7b:95:96:7f:ed:66:9b:be:21:46:10:4b:c6:72:26:
         9a:de:b5:a5:10:ae:f9:89:3d:14:ee:42:75:05:c4:e5:1b:41:
         0f:76:24:e5:fd:19:bd:8f:37:54:cb:a2:7d:1f:34:9a:ff:ed:
         34:97:5f:72:a4:a7:31:1a:a5:6d:ca:d0:7e:6a:20:cb:ab:33:
         2f:14:da:05:ec:6c:0b:45:32:50:01:3e:c3:7f:d4:41:11:d3:
         2a:47:b5:b8:b1:9b:5b:ac:ba:7c:5f:78:36:05:ae:66:ea:4c:
         46:73:16:47:5d:43:7a:cb:71:b9:63:8c:7d:7a:fa:65:19:4c:
         5d:8c:4f:94:21:62:aa:01:b3:01:e4:2f:98:fa:ab:03:ec:0d:
         08:b1:96:7b:3f:ac:2f:93:87:10:f0:5f:24:c6:14:ae:50:06:
         0d:6e:df:ce:d8:3c:12:75:1b:0e:75:47:cf:6f:5a:9c:51:bc:
         c4:f5:a1:f8:42:29:a1:8f:44:97:c0:10:2c:50:bf:a9:65:bc:
         1a:18:ae:6a:35:81:39:88:cd:5d:50:13:8a:f8:e3:4e:39:97:
         4b:f2:d7:1a:c2:7f:d2:95:6c:56:d6:fd:a3:af:0e:78:0b:dc:
         bf:28:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----