Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
File:                     O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json)
Hash identifier:          p5X9k2zaPcuLa5cpoQSCymeUYg34THa8yudUSH0Z8/M=
Subject key identifier:   F7:60:B2:7E:79:CD:FC:28:1D:9C:2D:17:40:C8:15:C0:4E:59:03:97
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       0195E122292DB4646613BE8B3EBB37154758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
Manifest number:          1690
Signing time:             Sat 29 Mar 2025 09:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:07 +0000
Files and hashes:         1: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=)
                          2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=)
                          3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=)
                          4: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=)
                          5: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=)
                          6: D0L0LFndzzXtixPyXy6YiMbyR7Q.roa (hash: le65wEoYAgLiuW7LHDLfiJaMqsJkMNtdkgbBI9+aSho=)
                          7: DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa (hash: Et9FWADnNl04HSdSo6iAdV5+gKD6jObcWqGDBUveUoM=)
                          8: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=)
                          9: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=)
                          10: H7yrNUT75yVv09M5UBmNbZIqcoA.roa (hash: CZfSBGRpxyxAFQpjENd+v0cJ93DJ7YkMpWAIc48uiNM=)
                          11: IWwsiS-aJdot4eBshq8oe0oy5GY.roa (hash: qosKjF6lbWWzBy51nWgFpyBeu/cGBM7SjKVMCbf+nJM=)
                          12: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=)
                          13: KtPtCnsNO7KrNH_mi8irxAh2a64.roa (hash: 0X6VJNdKzEQIN2KQI1h+LTGHgQgh9YXQ8FCAd7HKCL4=)
                          14: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=)
                          15: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: r5azbw3MIr2SFWicA9F2IHVuHlT6N9zmMRPXGD1h/yg=)
                          16: OHtdamk3K8NdLEh-keiR2rSuuSg.roa (hash: qIQbXlJhQUZZHP5a7YOGBONxaoVnF9gndUOU4O5iAEE=)
                          17: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=)
                          18: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=)
                          19: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=)
                          20: UfHhhtI05mBJabZ-hLmNIxHX8ug.roa (hash: E4kcCskG284NOpULkH3nCUBGoPB5JKBTg+hvJO3hTjc=)
                          21: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=)
                          22: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=)
                          23: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=)
                          24: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=)
                          25: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=)
                          26: ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa (hash: INQh1RPZ3Hg+l39PdTi0B9Y2GnJwgu1gLpokQWLUkWY=)
                          27: jbZYE4DgNw-VE9vD3aUU0sOMZBo.roa (hash: xYas/ZOn3Bz6fch4pO0zLVYI0uCgN1comuyV0H04g6w=)
                          28: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (hash: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=)
                          29: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=)
                          30: xsQaPzEAqz3pDunOcF8U-e9v6lM.roa (hash: Ru7vpHpqmPXp0ihwhPtUeId9PSoJarGzPxNPybLxGj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:29:2d:b4:64:66:13:be:8b:3e:bb:37:15:47:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Mar 29 09:01:07 2025 GMT
            Not After : Mar 30 09:01:07 2025 GMT
        Subject: CN=f760b27e79cdfc281d9c2d1740c815c04e590397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:89:43:72:e9:a9:72:f5:b1:8d:a5:b3:08:
                    68:06:95:06:62:3a:15:e5:de:5e:79:68:32:0c:7e:
                    2f:76:b5:59:d9:53:60:5a:6e:88:b5:98:cf:6e:7d:
                    3c:23:33:2d:ae:8d:46:1d:79:3e:9f:f6:1a:4d:16:
                    54:05:4c:b0:71:ac:59:d6:ba:5e:7f:40:d6:08:da:
                    0b:3e:af:fb:fc:cc:b0:47:ea:84:ac:05:9d:56:20:
                    4f:79:28:af:cf:f2:d2:ba:15:88:d2:8f:39:de:1c:
                    ec:ea:1c:a0:a1:b3:2f:7b:d6:53:41:36:fe:5b:13:
                    82:11:46:e6:25:56:b9:57:a1:9c:bb:cc:91:5f:03:
                    a2:3d:c8:b6:9a:0e:03:62:c1:5f:50:4e:08:11:d2:
                    c6:38:7b:50:36:26:75:16:d8:67:de:33:16:4c:d7:
                    8e:44:71:8d:30:c3:73:ad:14:a7:97:fb:b0:fc:25:
                    e5:7e:09:44:df:33:4b:97:11:8d:a5:19:da:3e:65:
                    a7:ad:eb:0c:bf:24:bd:d0:1b:f5:44:b5:6d:2a:a0:
                    2f:2d:c8:3a:2c:71:f3:6c:2c:73:5f:20:7c:db:83:
                    5a:f6:a0:88:4a:d9:b2:26:b8:85:32:0f:fb:c9:c4:
                    16:14:c5:5f:9b:a7:f5:b0:c1:e1:7b:cb:e8:08:a1:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:B2:7E:79:CD:FC:28:1D:9C:2D:17:40:C8:15:C0:4E:59:03:97
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:78:a4:d5:8b:18:f5:fa:7d:ec:a3:e4:b9:65:df:f0:06:a6:
         e4:7c:2f:85:3f:e6:7d:ea:da:6f:e0:7e:73:23:d7:6b:d7:da:
         e7:b3:a7:82:16:e8:63:27:c5:42:79:ea:f2:5a:8e:72:c4:d4:
         fd:93:56:69:11:d9:e0:27:f6:32:36:9f:88:5d:2a:4f:6a:76:
         6e:e9:46:c8:bb:52:70:f4:ca:46:b3:bb:91:4c:aa:89:d2:da:
         29:c4:10:a8:1d:4d:fa:45:d9:42:0f:cd:18:a9:5f:89:7b:b4:
         43:ef:84:5b:d0:97:aa:94:db:d1:fa:0c:f0:54:2e:6e:ba:27:
         53:cb:ee:d0:96:68:28:15:1c:14:1a:4c:77:a0:1e:49:9b:ba:
         e7:e1:45:fa:2e:1f:35:eb:db:d6:40:f2:71:84:69:d5:6a:f1:
         95:30:52:9e:48:82:05:8b:84:69:b8:aa:bc:b6:c5:13:45:fa:
         c5:3e:a4:16:84:ad:d4:36:27:57:f0:61:a8:0e:74:48:b8:93:
         7f:3a:60:59:26:56:a6:cf:8d:63:af:7c:ce:ec:37:37:fe:a4:
         ca:ae:b5:5b:45:ab:38:25:82:f0:36:9a:39:b1:8b:95:6f:90:
         b9:2c:c6:39:e6:38:3c:ea:e2:3f:13:5f:a3:28:a4:8f:32:8f:
         56:50:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----