Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.mft
File:                     IYFM8so-F5k0nM1Mfmp21j-DSj0.mft (raw, json)
Hash identifier:          jrGfUDD8wHt1KQpzCotUtjHsHUQRYLkItkKno4DwAxc=
Subject key identifier:   91:A1:E8:4A:4A:25:B7:74:C9:A2:41:A3:6D:52:90:50:44:7D:DE:D5
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0187C80700CF9B353BC44EFF0CCC9E6BDCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.mft
Manifest number:          0967
Signing time:             Fri 28 Apr 2023 13:21:54 +0000
Manifest this update:     Fri 28 Apr 2023 13:21:54 +0000
Manifest next update:     Sat 29 Apr 2023 13:21:54 +0000
Files and hashes:         1: 1-3v8bnkizlBVX8O4l28FC-ebYXg.roa (hash: bszEk0Q8/rQlohC19Mjnj4Vq4DwKQiWDsmJUKAaqp5g=)
                          2: 2JOp1xc62hnGy4EV2WeIK8tGYmw.roa (hash: 9aSQaDEW9iCQP0X7Y0TD5M/gEunF8VA0CeQDoJWMGx0=)
                          3: 2UTlPiFRFR9x-lXdYW_kYS1MGgQ.roa (hash: EM01fjXGIvEuIW+CDME+H7zRorZaGPtqRcrnLGJQbtc=)
                          4: 43r1emDxVXlkonIHhD1AcpwUYLc.roa (hash: +aOzdo+lTdsJPWru/EEv+VNloSYCQmmn5/BXoha2WwA=)
                          5: 4tpJp9R-emqtO5_9VKSCIAq-5DQ.roa (hash: WKq7WE7Po0RSlnU/jYkaY2JCbB3RLDdMM/DAKFqdxbs=)
                          6: 8RagmYwCiGmVXH0LlTluAmaKU7A.roa (hash: DSDtLxfJpxQg++VpoT4lCaplsPBszxXywoiX2zEf2YQ=)
                          7: 8bjHUV5QGqT7Izl2bDeQcgUZG1M.roa (hash: dLPonb2EMA7K3hGlGhe3R9V5Wm3E97peAhtrw4mXvTg=)
                          8: 9iKMFrHHTF6tDPvbri7NLT8EerM.roa (hash: jODaDnAetGeT2KFgPlAG4XKHOPIEY2AFfRGAJQTU6IY=)
                          9: 9okBSoy3VczettAhxAASu7QABUs.roa (hash: CJBLYwDKKzBwYIABjby2b17iUlUiE1zicgK0vcKOHF0=)
                          10: AUYWYV-LXbYsKfVrsa2xUEZYVNY.roa (hash: PnInyW5nGmdbieN1wZLWcrZKWLhZ6kyXYFxeJ2eAhcQ=)
                          11: BqgSvgvgq1kAKxwdh1vp6k6WhcI.roa (hash: PT02nLLrcEWfszP/4yjTCUQPN98JoHo5b7WmPKzfQzM=)
                          12: FTmPPteUuYdEqEo3F360hUYlgzw.roa (hash: +LYG9coMWn2v5v0HZGvogOqFoS8zhg2SxSQM7Qy0ixc=)
                          13: IUKCghSwyaSnAn9wzjvzkNPczaY.roa (hash: HsaeyyDw4siHc60yA4jURO3ZT+SqaK+Cvndvs2toIKg=)
                          14: IYFM8so-F5k0nM1Mfmp21j-DSj0.crl (hash: wzUIPRGf0adojeblgUAnD+e6uS1SYuGkOkfW4bvVPm0=)
                          15: MeMpqtUkrPjBg0Jawq4oHtGC4dU.roa (hash: KG+2RfGGDcT1Pxo1cuiQiQyGpnJu3Swg419Hn93Do4Q=)
                          16: Mv8rHAw7NhM2N8XghKvyZqPk1Mg.roa (hash: CegqQt+vBlHtfjFoG0ywjgT+6aGD9KLmdRNwMoFrh+A=)
                          17: N1ZYCogp-CZhL-6UZZKuhDL1Q-w.roa (hash: d89uwgUVrY4u1T9Lp41ESAN921NeMDVR5qfqy9S6h+Y=)
                          18: OvWjpWwivrUka_sTJvPa9dkhXvc.roa (hash: IbKie9JJ59HuvXE5WgnDVH/XRJMqVJl3x9wQyRfTAzM=)
                          19: PwUWwX2TBwgzrxgmsxLF32QqILE.roa (hash: l+DpJB0ExclARKgB4xpcC1OyVjgxRrpm5zHVK3sTXZM=)
                          20: RGpHVG00Cc-wK-vpiAByabC8PJo.roa (hash: QzlCB5Gilev1YQmcdiMTmIBOrQLF8Fyq2Quguajle6s=)
                          21: Wn-6eXi3yNqnVAEu4TS93GZY_nA.roa (hash: zskLxIOZC90KQL1wCxly+WqSV8aMEjBxTgei+6EGOQE=)
                          22: Xw446w4mrbiq0965oquzj4-CcD0.roa (hash: VskGZuBOVDXSjr6Wvk5VsewmGYk6Saj1LB/L2f0jjXk=)
                          23: ZUT4oMsCBjEhHSuW8OS0KSQZKKM.roa (hash: NI3PApbrmHq+E7ox1QGvdb+Nj16EaF8CNKj5Lig06Lk=)
                          24: _F8ZIzJCKKwLvvh28uzEu9SCTsQ.roa (hash: LUplaKDvPNs8HllYNyBtsmCrTifPY71Ti9J9aDobLyI=)
                          25: _nBY93JBZttn2938LkJSPACSyjQ.roa (hash: e6XSqg77WfPzxSCoGH2BxTruIFkELB6o7I0wszutFUk=)
                          26: _wckM-bY-nvLzmkT3wrufkackxE.roa (hash: 1hwRodeIuMwehPa7HRoWcK2vZ0veOj3BCIxmQiCtuxw=)
                          27: a1CFMWBGbLCLZBlXsIp38Z9a7UE.roa (hash: f486D/6qmZqD5i29WUFzKAcWxwfzOKASzO+EgmuyDQs=)
                          28: biE60XlKsRdnMkY1lTV0mYkmDaw.roa (hash: C63Q0slLOEY4wGLYSIZ8Os/TJpQcBjv/DCjlwmpmH44=)
                          29: cQNkcrwVggU7kb8rZ22t5B7tkC0.roa (hash: ZqugVOM4QK6w5PsCRjirp8Gtqb2TopcN4tcyeElJW6w=)
                          30: e45iu4AmuR_fphcJLfGiHhGpthg.roa (hash: BCRdgtpSeAjl+U3PcELT6o+ElWq9DJRMX0+EVwndlK0=)
                          31: fOebQ8--9w6q50ba_gWg1cg8jYY.roa (hash: 7wtR3HbMXQNTP6IbosygGl0YVwoLYHH72h5mLbm5CiU=)
                          32: gFOf999230VoZhNV5B6ONM8eVbY.roa (hash: tEAZrasHRWgQ0ZuGhETdGWSD2Nn3zaJpiEfjIE5GslI=)
                          33: gNbYTycSr35RRbjked3_6HVxG0U.roa (hash: faVnZg11fkRZ2eprjXtVPc5Tio1Qon7F4yVKf7bN3ik=)
                          34: hnLx6QlaLD0GM83uE7rl2U71-Bo.roa (hash: 0hsmKnzKm+VY1UwJZw0HCvRGPaeKzX8owTFxmqHX1Sg=)
                          35: oKB2M8gqK-ydTcOI2E-WpbEDBXA.roa (hash: DYHp1uvG3zbc3pqTcHRqDmjFWwkbNqz+hpvtEWaPpIE=)
                          36: pHq8U3RilO3AO4-iMBnca-aZYjQ.roa (hash: OQ3yLo0JsWxGJKmegIGo2F7x5ZdxBO8KYmVBqxWOrUM=)
                          37: pQTbm-gqwC9hgUtKyddreOzjX6w.roa (hash: UwVJQExf/0Fi4e9DCSNvKbBKHNi+k7jQEN0FhsL0yDg=)
                          38: rVWT3lyF4Es-KSFwo664WjzjnAU.roa (hash: f9iR+oQ6FKErn/P3CqmQ6sm+vEoPqy+I38ZY6ZURLj8=)
                          39: xJmfwkNPayB3HDX9otHfZEqUXH4.roa (hash: f9kof5LX4nY8b32OX511vcpS2c3O2Z2NoD9sqOEsVVk=)
                          40: yOMpcNlNmXgMbH1yBHRnv8BKs1g.roa (hash: YGY71MhvqfTDO/YCmQbbmO6fvRbKPzKRixKcU9VK10E=)
                          41: zYUvMZStWyRe9EIVaElYvBFQ3tE.roa (hash: HTLEWQF14NS8U8bc8QKvXy6hJJ5ri/e04fpkPxhO0e0=)
                          42: zffaIYr2PRzrjGVwjGVka1LPzjk.roa (hash: nlheoGDWEbGCvkpSE99uOjFtRIqTAgNx8FO4OyC+5zg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c8:07:00:cf:9b:35:3b:c4:4e:ff:0c:cc:9e:6b:dc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Apr 28 13:21:54 2023 GMT
            Not After : Apr 29 13:21:54 2023 GMT
        Subject: CN=91a1e84a4a25b774c9a241a36d529050447dded5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:1e:a4:5f:49:06:39:c0:97:b5:71:b5:e9:
                    d1:6b:90:76:eb:3f:71:cd:31:06:d9:d4:02:e6:31:
                    77:25:70:62:a6:d6:bb:e1:b9:79:f1:04:b6:79:ac:
                    14:51:e6:8c:5a:d4:74:5f:39:3b:eb:b3:b7:b9:4b:
                    62:e7:fc:6b:ed:32:16:67:5c:36:be:b9:4b:23:c4:
                    2b:3d:61:e9:cf:f9:c5:43:1a:07:a7:57:88:0e:a9:
                    aa:01:18:aa:42:a5:be:a4:56:ad:f7:51:2d:21:20:
                    9a:e9:3d:4b:60:2d:ea:0b:98:d0:a7:67:3c:ef:58:
                    95:11:ab:a2:58:4d:7a:3e:e8:e5:fa:9d:9d:85:05:
                    4d:ef:2a:cc:b8:12:a4:d3:54:36:3c:68:94:b6:78:
                    91:20:57:d2:a0:ee:f3:7d:43:3a:d7:e4:f8:b1:68:
                    ea:b0:18:dc:c2:32:bc:a9:87:e0:e5:2a:87:fe:4d:
                    83:40:39:ca:39:ca:cf:4d:70:01:0d:c9:ca:21:41:
                    92:22:7c:a6:e7:51:31:4d:c1:41:6a:11:74:82:6a:
                    b7:65:0a:66:59:6b:ef:50:f4:92:7d:c7:1a:9e:82:
                    10:8d:95:39:99:81:a9:a5:46:7d:a3:6f:74:3c:3e:
                    3d:c6:b8:50:2c:0c:70:78:82:c6:48:8d:e8:c9:87:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A1:E8:4A:4A:25:B7:74:C9:A2:41:A3:6D:52:90:50:44:7D:DE:D5
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:24:4e:d9:85:de:45:7c:ca:49:d7:13:a2:37:53:97:2b:f6:
         78:2f:b3:0e:18:d8:90:76:2f:07:08:dd:9e:bf:a4:20:a1:04:
         b0:0e:8f:1e:9e:87:85:2e:b3:31:c5:12:7c:0f:47:e7:04:af:
         2c:83:23:54:99:1c:c5:da:77:00:aa:f7:e5:55:0c:32:2d:53:
         7b:20:b4:1d:54:30:0b:c0:a3:ff:c0:dc:0f:15:21:b8:70:2c:
         3b:9f:b5:cc:ad:72:25:8f:25:c7:b0:2a:34:77:08:6d:a5:ee:
         7f:3b:2a:3e:df:98:39:1b:2e:df:17:ce:6a:cb:1f:e4:9c:1c:
         46:e1:84:e9:5e:20:0f:fe:81:df:a5:d0:0e:7e:55:04:40:1d:
         e7:fd:1a:2b:6e:95:d8:a8:59:c2:30:35:80:33:dc:9e:d0:ed:
         1a:43:ed:ba:d6:48:ef:f8:df:4c:e3:fb:82:e2:cf:76:5a:27:
         f6:e2:c3:d3:f4:f7:b8:36:2e:47:9c:e1:58:60:d6:dd:50:5a:
         82:df:76:64:0c:02:18:2d:94:45:cd:5d:17:59:bc:08:dc:44:
         3a:84:42:3c:c3:84:73:14:ec:7a:a5:81:63:77:2b:9c:49:6c:
         d8:79:8c:43:d0:f2:98:47:9a:ce:bc:71:d6:d9:44:30:96:2e:
         e4:20:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----