Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          GUamfy515p9y5n9RL9aISuOdYHEkz4aum005keuHQ/8=
Subject key identifier:   A7:F9:23:B9:37:C9:31:7D:C8:F2:8B:92:43:1A:04:10:BD:A2:D6:7B
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01962FAB7C764F138D513E3BAC98CBA3B610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1542
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: YM1I9RCeTdZZm965/vTYeVc2hYFzG3oPuybXQETUh8k=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7c:76:4f:13:8d:51:3e:3b:ac:98:cb:a3:b6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=a7f923b937c9317dc8f28b92431a0410bda2d67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:c5:0b:eb:7d:82:1f:a0:c2:21:01:e9:22:
                    3d:77:e2:dd:1d:23:4c:35:d4:72:f0:93:fe:30:ca:
                    d4:0d:37:0c:ac:de:e6:7f:cb:d4:62:43:c1:01:00:
                    fd:03:05:52:11:01:01:bb:54:c3:2f:39:58:f8:88:
                    58:8d:e8:be:12:6b:ed:f4:74:79:2b:1e:47:e6:2a:
                    05:47:9f:e0:5d:72:65:05:88:2e:7e:21:1f:d4:fd:
                    34:11:c8:02:a8:6d:7f:c4:45:e9:f9:a1:db:c3:14:
                    36:59:45:d5:1e:a6:83:b1:00:1d:1b:d6:19:e2:5f:
                    c3:61:f3:70:a2:20:a2:7f:b3:ac:21:4e:f6:35:b6:
                    d8:e0:8e:d0:69:ba:83:fd:ab:ea:72:49:26:b6:6f:
                    6c:cc:1b:ff:df:b9:9a:e3:e9:07:39:db:e9:be:9d:
                    10:bb:fc:16:a1:42:1e:7f:30:1b:3e:d6:37:68:cb:
                    15:84:c3:c2:b5:cd:ef:b3:15:20:78:33:77:0d:ee:
                    54:3f:73:e6:06:78:4b:25:b4:67:d4:9e:5e:36:af:
                    72:ed:e8:15:e8:e5:42:03:4a:c1:e7:67:ea:a6:96:
                    95:ef:c5:42:38:e2:7a:f3:1f:10:8e:f0:cc:45:54:
                    31:35:4a:a2:aa:17:e7:87:f9:56:f4:6b:55:2f:3c:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F9:23:B9:37:C9:31:7D:C8:F2:8B:92:43:1A:04:10:BD:A2:D6:7B
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0d:71:08:c1:b5:b3:c4:7d:72:fa:5e:a6:d6:ac:bb:d2:18:
         04:92:e8:af:15:31:51:b3:55:18:58:21:28:17:73:e7:db:14:
         94:e5:b2:d5:f5:dc:49:c2:1a:8f:16:5a:a2:bb:2a:af:fa:b3:
         b2:3d:f3:a3:f7:85:c3:01:a4:af:94:75:52:1e:2a:83:07:54:
         6c:15:4f:2a:62:36:b5:53:3f:40:89:44:3c:6f:64:6a:07:3c:
         ae:0e:1d:64:15:ca:58:1a:7a:5c:63:af:0a:77:99:26:f5:4e:
         5f:55:bf:4c:ab:2b:9d:49:fe:08:91:23:67:3f:1a:86:19:45:
         c2:b6:3c:05:47:22:69:ea:de:d6:a9:43:24:b7:9d:5f:5a:27:
         59:21:20:04:93:f3:f7:6b:4f:5c:5c:27:a1:91:d9:ec:2b:f3:
         52:fa:3c:7b:c7:ec:55:31:72:b9:22:a9:da:c8:9d:5a:d9:ce:
         0e:3b:2d:cd:56:3a:b1:7c:f0:cf:2f:77:36:3c:8b:31:a6:be:
         d2:58:cd:f6:9b:b1:f2:a4:6c:a6:2f:1c:e4:6a:61:b4:c8:97:
         77:40:0b:79:36:ba:4a:80:8b:bc:49:ea:66:46:ec:62:f2:b0:
         5a:4f:84:a0:44:04:e4:58:12:66:0b:6f:98:83:3d:db:e5:9e:
         70:4c:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----