Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          Hbi5kSYy+ztB+5n2Ah8gzPTPIb4kN5XOWPcQq3jrlBM=
Subject key identifier:   07:84:86:87:20:5B:D6:84:64:7D:D7:E3:11:A1:75:FF:99:AF:FA:A7
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       0195E07D4A583BB73A25A4822B990D0D1F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          14E3
Signing time:             Sat 29 Mar 2025 06:01:02 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:02 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:02 +0000
Files and hashes:         1: 1vircYxh5-jeyCHncAB4LncMdwU.roa (hash: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=)
                          2: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: d1Xf0ceaXROZ0piP/Ozyra51FtQpj4Vt5I2SF99qFrY=)
                          3: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (hash: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=)
                          4: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (hash: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=)
                          5: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (hash: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=)
                          6: EpGUqveN8_iwqXtX3loQqZpefjQ.roa (hash: BK7p4b3/2gbXuD0eD7vqsFTJ+r23upun/RghpY97TiM=)
                          7: KHEz-UIy1itbvqjSN-exHkznw7M.roa (hash: mV8K8D3yuT/lnpk/k3Efi2aUQNdC5dfkApy2KMYktWo=)
                          8: NSnb3tUKAteQgCjg27tPwCtQsow.roa (hash: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=)
                          9: OBs7tOHp2Wjn-4vQjiF3T1Tvdqo.roa (hash: fvlWOqKo6QA1tHDJxdBzRG65QuYwKPujIF/1V8LwtVw=)
                          10: PW-XBbZvdPD9m9eDPj0lHnb6ghY.roa (hash: N1LlPU0OyiEGm15myNdRDTryn/I5VsBGbIp8D8OMHY4=)
                          11: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (hash: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=)
                          12: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (hash: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=)
                          13: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (hash: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=)
                          14: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (hash: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=)
                          15: XNivPuYpwzsyBWSVK0UP_mTGSTM.roa (hash: b8FsxpaUdfRYc57L8BwR77E37GuFMW2GwS9TNBfbgIo=)
                          16: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (hash: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=)
                          17: YLX2PpJC2jdo1UiXusO_3hzsXug.roa (hash: 8rbASZsr6aOYYISGy+IELA0dmKcsLlWy4ooK50nSGCM=)
                          18: _0Fsi7ExnvxZvUlBuBySlQdmmfg.roa (hash: jXEhTPkNTKh8qr7YJI+rU0aZtl6egvKgkBd6i4d7S/E=)
                          19: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (hash: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=)
                          20: btDg54MeJbXTPEtxucWKVoxBNaM.roa (hash: H3nemfeenmHgaltlyzaYjSQZrnYMiZ/c/aLfawo+I4k=)
                          21: d4YbeMmWmyXeBM8u68uKWF25nwo.roa (hash: qtZE6RS5BgKCqE6kopMvxaMLNpxuumjautrXypOIQx8=)
                          22: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (hash: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=)
                          23: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (hash: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=)
                          24: pGvZFqdJfVwAhNj34rEhjtwcqqs.roa (hash: xskFCPdKZw/j4SJCIetQoQZeZl6kQRAE9JdBqHbYOdY=)
                          25: pbTTnCLOLIjCLVBstBODbiFmGmw.roa (hash: 8YkIamAbQU3NMaTjWNl+EcrwO/p3qlC0IxQhIIQUrsg=)
                          26: z6yT1q0T7LBqZpy9PTiWdAbhrhU.roa (hash: n5dOrWVGmQ/SZ7Maa9/Hdiv5+rDt72g8LPCctbA9zS8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:4a:58:3b:b7:3a:25:a4:82:2b:99:0d:0d:1f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Mar 29 06:01:02 2025 GMT
            Not After : Mar 30 06:01:02 2025 GMT
        Subject: CN=07848687205bd684647dd7e311a175ff99affaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:71:c4:49:7b:1a:b7:f9:82:2e:af:50:4b:
                    59:92:3c:4c:09:b4:27:95:3b:60:40:20:c7:76:70:
                    9f:71:0f:1c:9e:b9:d1:47:c0:d6:61:cd:86:c9:28:
                    25:83:c5:98:0b:9f:e2:a3:3a:da:a1:f6:2f:12:2a:
                    84:82:d0:a3:b8:70:0a:50:a7:7f:66:66:81:68:c3:
                    3d:a9:70:cd:bc:c2:4d:c6:e0:e3:e3:39:43:ec:fb:
                    d6:20:c1:bf:83:b8:7c:44:20:1f:9c:8d:71:0d:16:
                    ff:ea:95:ac:28:84:ea:13:b1:3c:06:66:4a:b3:b1:
                    fe:bf:a2:f9:7d:2d:3b:7b:8c:ff:78:38:b7:c5:92:
                    6e:bc:2f:a4:41:2f:32:eb:1c:56:4f:f1:f1:d3:cc:
                    e6:b3:c9:ae:18:7d:38:6f:76:c1:63:09:15:00:24:
                    eb:c9:2a:f8:9f:81:38:81:6b:9d:64:ad:fb:93:63:
                    4b:3a:ab:f4:3e:a3:7d:c1:f8:f9:61:db:0e:bd:16:
                    4d:65:88:42:d5:c7:46:77:a7:b7:9b:69:cd:7b:40:
                    e8:bc:58:06:55:ed:cb:a2:31:90:5f:df:f9:05:56:
                    24:b0:d3:e5:be:b5:97:0f:bd:5b:a8:9a:0d:c2:18:
                    c7:2a:a4:87:38:44:3a:5b:13:2a:00:7b:ed:8c:47:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:86:87:20:5B:D6:84:64:7D:D7:E3:11:A1:75:FF:99:AF:FA:A7
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:08:b1:90:f5:14:5b:ae:1e:65:c9:ba:e0:a1:15:7f:b5:e3:
         09:e9:9f:c5:ca:e8:a3:49:2d:11:b9:3c:48:0e:0e:78:54:2e:
         13:8a:a0:c0:31:58:d3:bb:68:88:21:83:f1:bb:27:1c:ad:d5:
         4f:74:fd:90:aa:3f:79:40:0f:50:75:bd:29:2d:ab:0b:79:26:
         65:82:c2:f6:d5:44:60:9d:a5:6b:f7:02:dc:c4:25:74:40:47:
         11:96:82:b1:45:c4:a5:5c:fd:e7:3e:d5:ea:07:f3:61:29:69:
         83:8d:de:48:a4:a1:90:da:3d:b5:f7:4a:6a:12:00:e9:0c:54:
         62:2f:db:91:3f:d9:38:68:8a:96:8b:ea:e4:ea:2d:cf:87:06:
         5a:b7:e8:8e:d6:e1:64:15:28:f2:bc:14:bc:39:ee:ac:25:9a:
         da:c7:5e:33:86:ef:17:6a:e5:dd:59:1d:71:fb:17:fc:0c:30:
         23:60:57:49:eb:64:fd:8c:aa:4b:b7:56:30:2b:0e:99:44:b2:
         b3:0f:38:4a:c6:c8:db:27:20:ad:51:7d:61:86:58:cd:50:77:
         ec:d1:65:65:fa:89:94:46:94:a7:87:f4:dd:79:68:64:c5:d5:
         ec:2d:11:22:fc:b8:47:bc:22:ce:af:04:7e:65:36:b0:ff:30:
         ec:d2:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----