Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          CJ0i+dyTm7/e8O4OrIBgvKuZcnSzpm9MZpXOwnddHlc=
Subject key identifier:   1E:64:CB:77:A9:64:6A:8B:2B:A0:4E:1A:34:EB:2A:CA:86:B6:60:97
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       0195E159413348A9F61051CBEC0085636978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          159F
Signing time:             Sat 29 Mar 2025 10:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:17 +0000
Files and hashes:         1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=)
                          2: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: hscYnEHrNFYVsq5+hXK5BYcOZLUe/zXx0EohHDC/jN4=)
                          3: 8eRSPi4ZGN5PZEkCFFym2-fU8U4.roa (hash: xd6vWpJTo/8ngGWDjxjJH/uVaX7TKbxjvFa0Wcr8IWk=)
                          4: AMAwp6VcPHRw-QKe79lcrFcU19Y.roa (hash: 7tQw2Qq7bBZ1uCaMQ14QDglKar+luUjoIxeh5RB2w1o=)
                          5: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=)
                          6: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=)
                          7: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=)
                          8: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=)
                          9: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=)
                          10: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=)
                          11: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=)
                          12: RRXv77ic8-YnL2L0BrEWnnilces.roa (hash: oObWYvqL50IXeyb91XFkxYV2GVpxyr296NJwG9LKFJk=)
                          13: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=)
                          14: U3eAzBYqlS5ny3loqC6d-X4pjFc.roa (hash: EJBjhB6YSDKCWSO1xn35SUiNwifHM1pCOrpPoOsV3vc=)
                          15: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=)
                          16: XIL4KgKm0A4SvgCDqXS0umj0IHs.roa (hash: dU5jOvpnr6zhMIB71IuVm99Y99FhDfkWY/tGsCNXEh0=)
                          17: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=)
                          18: XYbT6yP37MVQytRjz04BPPzPYOw.roa (hash: WCX0oeshrNGios6moKGDBW4fxHN+erXZ54ZsoxBsG1c=)
                          19: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=)
                          20: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=)
                          21: _DWZCZ1si8aBzqMNIm8Ef7GE9Eo.roa (hash: s4OAbwWH4R0XydqNCXaiEZGXYXtwOtGgb6PW+nNqG2U=)
                          22: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=)
                          23: arMtKMIP71-vKvUAgp4clBsMWok.roa (hash: tYZYrtz6Qwf6eAJhxSX8JcByWBMLnLzyGmAuVNAgGeU=)
                          24: cmkgGNwAjlwl-nXBDnQsuZkaQjk.roa (hash: GH4mAasSrVefCL06doAPOCgwr9kOuVQg7pmr2jmaWv0=)
                          25: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=)
                          26: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=)
                          27: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=)
                          28: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:41:33:48:a9:f6:10:51:cb:ec:00:85:63:69:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Mar 29 10:01:17 2025 GMT
            Not After : Mar 30 10:01:17 2025 GMT
        Subject: CN=1e64cb77a9646a8b2ba04e1a34eb2aca86b66097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:22:c5:c5:80:84:fc:10:cd:62:04:8a:2a:66:
                    27:d7:d9:49:8a:83:34:17:ca:e7:fe:ea:46:ec:21:
                    af:f6:ef:53:a5:a5:e0:92:42:df:8c:45:09:d2:bb:
                    c4:cd:24:84:6c:c7:f6:33:1f:97:66:76:ff:4b:c9:
                    2a:36:8a:4a:2d:19:14:7d:8a:8d:3b:2b:ee:ed:6c:
                    9f:b8:34:f5:e4:51:f5:0f:85:71:82:50:67:2c:c0:
                    5d:47:ee:99:9a:0e:6c:54:11:d7:66:83:76:43:c6:
                    a3:c0:08:64:ca:cb:6d:87:d4:a3:c2:83:6b:99:a6:
                    ee:ac:a6:e8:95:88:c5:d8:51:fe:0e:19:e5:11:76:
                    0d:db:e1:f6:b4:36:d4:8c:d2:a4:95:54:d9:65:e0:
                    a7:0f:ab:32:74:bf:b6:45:dc:cd:28:3f:ac:b8:01:
                    f0:a5:3f:64:80:5d:6d:7d:f9:64:80:20:15:e6:27:
                    56:47:c5:4d:65:a5:49:66:4a:b5:97:d1:87:3c:78:
                    5d:2d:69:4d:92:47:95:94:69:df:73:b2:e4:6e:d3:
                    dc:03:3e:15:9b:7e:ba:5b:1c:d5:df:92:b0:80:07:
                    c5:13:32:6e:1c:40:3a:d9:22:a4:ca:d2:0e:a4:0e:
                    ff:53:07:4e:b4:af:c8:a1:fa:b9:9c:5c:61:b6:ec:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:64:CB:77:A9:64:6A:8B:2B:A0:4E:1A:34:EB:2A:CA:86:B6:60:97
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:49:94:89:e8:a3:6d:77:d2:a9:86:88:da:50:83:17:e9:
         88:eb:5e:57:3b:25:6c:f7:96:ce:23:a4:4d:b2:94:7c:fb:88:
         bc:ed:5f:26:1c:cf:c3:4c:ef:6e:a3:82:7a:46:4c:4f:ff:13:
         25:54:65:ef:26:70:50:2d:51:c9:91:63:fe:3e:0e:0d:32:e0:
         b2:fa:f9:57:a6:54:88:bb:cb:18:b9:94:e8:ff:93:40:6a:40:
         ce:f5:a9:17:33:30:8c:16:5d:8b:f8:96:57:44:5c:18:43:bb:
         bb:85:28:49:7c:78:3b:a3:58:fb:43:1d:e1:2f:17:1f:bb:e8:
         a6:0f:58:d5:f6:a1:cd:2e:15:94:75:e4:6d:72:cb:80:a2:bc:
         34:67:32:39:29:d6:ef:82:6d:65:c4:17:5d:a2:44:ca:ce:82:
         aa:a7:e4:88:3b:11:5e:ad:95:73:e6:99:20:15:74:28:2b:8c:
         07:52:1f:f1:d3:8d:7e:77:71:4c:b0:76:68:7b:bd:af:17:a1:
         22:c1:b5:73:35:53:08:02:5d:a3:b4:57:f2:3e:bd:d7:b3:69:
         ba:5b:ce:7a:1d:18:43:74:85:90:30:14:12:bb:2c:42:16:30:
         e9:d1:dc:be:1c:f3:e2:31:aa:ee:39:f7:f4:99:10:39:88:38:
         3f:a7:74:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWUEzSKn2EFHL7ACFY2l4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjUwMzI5MTAwMTE3WhcNMjUwMzMwMTAwMTE3WjAzMTEwLwYDVQQD
EygxZTY0Y2I3N2E5NjQ2YThiMmJhMDRlMWEzNGViMmFjYTg2YjY2MDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SLFxYCE/BDNYgSKKmYn19lJioM0
F8rn/upG7CGv9u9TpaXgkkLfjEUJ0rvEzSSEbMf2Mx+XZnb/S8kqNopKLRkUfYqN
Oyvu7WyfuDT15FH1D4VxglBnLMBdR+6Zmg5sVBHXZoN2Q8ajwAhkystth9SjwoNr
maburKbolYjF2FH+DhnlEXYN2+H2tDbUjNKklVTZZeCnD6sydL+2RdzNKD+suAHw
pT9kgF1tfflkgCAV5idWR8VNZaVJZkq1l9GHPHhdLWlNkkeVlGnfc7LkbtPcAz4V
m366WxzV35KwgAfFEzJuHEA62SKkytIOpA7/UwdOtK/Iofq5nFxhtuxlhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5ky3epZGqLK6BOGjTrKsqGtmCXMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3lJlIno
o2130qmGiNpQgxfpiOteVzslbPeWziOkTbKUfPuIvO1fJhzPw0zvbqOCekZMT/8T
JVRl7yZwUC1RyZFj/j4ODTLgsvr5V6ZUiLvLGLmU6P+TQGpAzvWpFzMwjBZdi/iW
V0RcGEO7u4UoSXx4O6NY+0Md4S8XH7vopg9Y1fahzS4VlHXkbXLLgKK8NGcyOSnW
74JtZcQXXaJEys6CqqfkiDsRXq2Vc+aZIBV0KCuMB1If8dONfndxTLB2aHu9rxeh
IsG1czVTCAJdo7RX8j6917NpulvOeh0YQ3SFkDAUErssQhYw6dHcvhzz4jGq7jn3
9JkQOYg4P6d0eg==
-----END CERTIFICATE-----