Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
File:                     YFgeZz2A90dJNrITN-r8wb3Dhek.mft (raw, json)
Hash identifier:          AuDAB3o9I27S/n/Qh7XEHzO9EhgbhlalrFI5NMT9gnE=
Subject key identifier:   9E:10:C0:E7:76:A5:F6:53:13:8B:F6:FD:A9:61:C5:B2:EC:6F:77:FF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Certificate issuer:       /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial:       0194BD85B309E15A5719E1BAAB9637A34D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
Manifest number:          0E44
Signing time:             Fri 31 Jan 2025 18:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:43 +0000
Files and hashes:         1: 0aLBssBiM0shb0gQaP0tz4Myeys.roa (hash: /uHevUb644M9Y20/EvaBGwSktD+u3M4pnfpsDZpoUkc=)
                          2: 17xelIZ1hlIUuFxHGjY7q1Rga1c.roa (hash: qGseiUfd5IFcITsclcI1uIFfpA5aFyoVyJT3z5Hf4KE=)
                          3: 2doyv893qLqpydv5qHFlRCB_g-Q.roa (hash: kktAELQ0ENAf23BgcauSsLAOuVx+m9eQ/dGq67Ovl60=)
                          4: 3S0rFsiwwjoluGLVOLYa6SaPGd8.roa (hash: 5o7wFBgF/K4kEGx40S0asC9sLXE7oQTuxZH8H28qZjg=)
                          5: 4RUU0H0CZEoC5gpDEekjR1R9h6M.roa (hash: 7bUqUDqc0oZAQM1cK+gYfpWx2QDOpoAMGvH2pmehKPc=)
                          6: 5S5eikik9Q_xDVx5MYBk01lniUo.roa (hash: ngg9Xz2VQXBNpE8NeUsVnB9BQF7D+WB2UavRJ6oDIPs=)
                          7: 5khkKd9D2jQ9XIItKFBCGEDVunU.roa (hash: cPoYaX7N1qtEkbleFjx3BiBi/7TqErjO9m1K3c+yXf4=)
                          8: 5uOG9VsGdNJNlgejT8Tsht1nhUM.roa (hash: QHz3YA+lDZCYqWA6U89tXxR1bP5hoykMs2MJZrJs1qQ=)
                          9: 6M2WewtvohzBCpFj9eGKBc_wUck.roa (hash: GtHrne2OsJ2aixOVwYaGAaC31E9k1B9/xfA47302VQI=)
                          10: 747xis10vgD7ULevX_Loj3frKXo.roa (hash: mQ6BJtUBaEnwSVMRT0K0Db6FrurhFP+HbT6xcILYMac=)
                          11: 99tSflxK1ZMyJfkB26ILosCegpo.roa (hash: 1MOpGQQ2HOe1CkKymD9ztyvGLbWUbIEdZACwN/G6c5k=)
                          12: 9uYAQcFVRofuqAzP-4ZTts6gMxk.roa (hash: 9faYzPUTeLAbJsFK932VG34IO3MuGCklN9TDeG3+oT4=)
                          13: AbycbJ8-chIMuhdOSMF0hOhFlzw.roa (hash: 7vNVdDBB5xJL2EspmBAJqjpOHShAAVctUk+cYpjvAZE=)
                          14: Bbcxb5b8BlUtXI78dBS8ALX1n_I.roa (hash: 26phTWokyQtplh+9Ozu3DEXgAaqIS5nyX7/OILlJ1Yk=)
                          15: CZKNcCBZhgcPDrbkdgCEL6XzQUg.roa (hash: lelom6wT2zOiXS4aMH5OacBgbrtd7B457VJKd5blgxo=)
                          16: DX2NKzxjPKtziJV-Mc4jyDw69wo.roa (hash: MGZi2+6aUJhXuosWvSv+DuWg3beWpRoeRvfGpPE0IBk=)
                          17: H53oYlOHU9ebmihjdJgHEfOknww.roa (hash: EJl3T7XYUNPe9KAKj0meY6HrpYNP1WZtTzuD1O8laTg=)
                          18: Hifc0702XiDz-jeJfzC2ajKIyOY.roa (hash: J3bLlXI7IzbpB/dKPV5vec+HK0BihbXKKbE2TQWAPFg=)
                          19: HyIoF8Yiex9w6zEsH5svMJ4UP_s.roa (hash: K7OjNgSdAnqBjOw3hW71Yxrg18OB8nuJeiXxnSlj0mE=)
                          20: IHsRgHPBwDwToyZ9xdqhs0SHL1s.roa (hash: RcA+AX4/Ylj7MrWqPsHJt7vcoJ5Z5MW7TEAjRz/Gn8I=)
                          21: IPXPzb4dkA4EEogsX4U2PxGFKcY.roa (hash: UZk64VeEyRK8kvQVYJ14kBD0C8kmSNJpbiyrVf6QFJg=)
                          22: JwJsqgN8tMHBb8-cKphUDXDGdjk.roa (hash: YTrRh6JikNqs6WlmNDRrBNlOxew2Uxiz3hinZoGWt2Y=)
                          23: KKJFn-DgHoGcGc7yHYPAtDy2ChU.roa (hash: V3e6QBpANOaBk5ZRIIsFmI+mxLWFeE748K5TNCh8oWE=)
                          24: LJgy--ghdav_MyF8TPbJGBBcJsM.roa (hash: RYIOnFchz2QfqIrXcmdOLL5n/fP3CTzRL8l0RQHC3K4=)
                          25: LQYNORBhyY8uLbl3IzAuzS6Pl3A.roa (hash: kmuywCebJSwq8F2RUs3rdzvnHjYFvCiVIBTFLkKRrqo=)
                          26: MV-wDd0VMa6vnsKNnOHPdxrVwco.roa (hash: qZJhpZqfZXLa+5ErzhTodO+1UQxzmF0ONShiWOqoCCY=)
                          27: N6McutVZ2sV6B6eV3O9BFi8T_2g.roa (hash: Ounp5vrz4sS/XpE5EgM1PvqZOLCKSQgUzBbP4Whl1LU=)
                          28: N9vNif2H5hKREG99HGyMGDkm2CQ.roa (hash: PdtFZgVQKJLHoaR+AAHz5YVey/pwaemzvAhPyxCTA1M=)
                          29: NCC8YJBWjJ8jH5fJYG7k_zftjyM.roa (hash: 1ewUkAqDqQt8/cTTlR7fz8q0UEEop/atctrCH+9g64I=)
                          30: NgWJPHurkGlhNYFV5xy5jz9_Yk4.roa (hash: bXFuPjVIYVA/BEdNvRkX9IGyh/+SZZPMlRBj8d0tgv0=)
                          31: ON0poV7FVuzPD70qh7fKI5j0oJg.roa (hash: /q+NYCB9oZnSOJ2CCK/lArv0oB5eufqBUd/a715fQoE=)
                          32: OjmUL4PXPE4u_tFLkR-mJ7_Xk10.roa (hash: ApL4REK4hvDckXMTbDtqJigIASndEdVI9SPkVd5oDgQ=)
                          33: RPUuvTefITVNtQz5BiNMhcWrd4U.roa (hash: o804bchNKn2fVECCBYjp5GRxx9ubyhX6FAu11T6aNRA=)
                          34: RXSiBKa7lHzi40PqRCPeIhfv3hE.roa (hash: TJAwIq90rB+C5PNrrA4/eQGuQdd0IYKHPB6UscCbXC4=)
                          35: THy2hv6xxwj5Wx6vdPknxpREPU8.roa (hash: 6vP2jcC6A352i2NqwXeJb7rfp9IZHQFNBW88KgDg+7s=)
                          36: UH1IUgklLnCiX41J1yC2fdKEJpc.roa (hash: O+N0+PoBX5KtnetBACkNlmec1yRCbzMZg4UbgRckrbU=)
                          37: UpILUvbN3-VCUF8uzkq7sns8Fyk.roa (hash: ykSd/OQ56bqBUGFasbCBtXm6JPnWOoc7h6a3uhDZ2CE=)
                          38: V_74GcUr3VNDUUYvRdcrr6BZ3NQ.roa (hash: rRNTgMx/CkgVrGTklN6Tit/Gw2HvhonKuJL8q3FnXKs=)
                          39: XVKCTrREBcRZRwCz4G6OqtvItLk.roa (hash: eGP/OjsT5JSliiPLzn1JjtehF3WlbqdKqrbsrU0Frdc=)
                          40: YFgeZz2A90dJNrITN-r8wb3Dhek.crl (hash: sPjd0fAmxNc1J84AyJjAVLSNepaVb1fZCYE7Bv5fy0s=)
                          41: Yf30QVSO2ocMHA5EW0f4DP5Qt1o.roa (hash: 32zz/SesO8BibqU6AhXd0H5KAG4NwMXgCvIzhG9KI60=)
                          42: a4bZ0wnKlIyihMeUtfqas67KO4g.roa (hash: v0pLlrl2mlPIUQl+B72iHlOicSw6LLpVWwF5dZGxyKc=)
                          43: anFByRTXTpApxuXdT5KkMmafEM8.roa (hash: Ydu39kCO+x8aBnBCDB8jBgfaTDrW1WB8oK91xbwe8q0=)
                          44: b_wRgWYeYrJvukDKrVQNSxCC1oA.roa (hash: QgRcnGJHDmU6CdnsgDMY+L6P5HOFim8w8/7ckonms0U=)
                          45: c-cz3EsrRUI_ANPL8vVnstUjDJo.roa (hash: i95jwrWeCHtPqkB24IYUU8/zCycrv4Fig9b4FzXTO5Q=)
                          46: g6hQI_rF-M9uMvF9BrKEyXmUEz4.roa (hash: n0C1owP42We2B+tz26M24CR8+gVn0wd9yQ78cMhq7Wk=)
                          47: gultSk-ngaWxbYaKhls_3MMuqMo.roa (hash: /LQFBQVoqCZebzUntQgXWyV9sV6pAp1CKUEe1b78KMQ=)
                          48: h54LjhvpFonP09FnDyrMEeih0es.roa (hash: AvrKAH+Q6E9pQ+/plEsw5D9ozqHMCXUxQ1YlkYwSO0k=)
                          49: kEbl5o9R9VIghbuFJkZmvJDz4YU.roa (hash: jYztlztH9XuEjEGgL0+vanGwSZibXNxwp5ZTk2Nuj2A=)
                          50: l6WQyjD-Rss080gWurbvjSNBj9w.roa (hash: G12fY9TmVOiqEQy0BdAHCWeOq44fPzXTbYdmPlnhNEg=)
                          51: mOu9jLrb-R_yvnWCY3nrq9lD9DE.roa (hash: 2fjxB0iJ7XeKX3j3JQUiqzGEumVdltx7nxS7/boooNY=)
                          52: mVReVPWxGfnvhL1fHkj4mVXfIq0.roa (hash: YVfRFO+rPp1uTqLUMqGDWKg9xl15o6g3NAJFZZrHU3Q=)
                          53: n79gEx7UYHYAYQJAVmYhIJISAXk.roa (hash: Ga/fjtUMsCtFjXCxBUOwV4quSfUVa9AMdMAL8Bv2DdE=)
                          54: oEstZq5G7zdtqmYeLeD2SsLc1ZY.roa (hash: z601uDhYpFAuVWYFwJ24Ua7Qrxw6MGp5XQSR4Xv/w7A=)
                          55: orHdBpXODd4_HWJCzgC38o3vmfw.roa (hash: tLCfBtUEfheWHRqaeNGdtVPZjn8bf8uPAJ/kIWUrND8=)
                          56: qoo2VyR8Gr9gl9o-bafiZ6ARihA.roa (hash: JqITCwECJl61GbonXsuHnPF4hMpZL4NohaTGm8mHPBA=)
                          57: rJVqQ0LvRc5OTIXLhdxUESJqAA0.roa (hash: Vp6I1jXURLTAVlgEpNZtZGEgUcHNs/Xk+Xza9skUTmM=)
                          58: tSbofo34srUr471Sv9rb867Ytw4.roa (hash: 851ayqgYRS2+fNAYDvkCWgkx1uIDrWdxY97ygaPGxXg=)
                          59: uF4YNJsU3xRn5CWRgdMY3ssOP8Y.roa (hash: XsztkUEqbhC6uorOZt6E6+xl15oRNXauhHgIURyOdaY=)
                          60: v4jwL5aOsrT26_p1kgTPrH3mZlo.roa (hash: rOGwOA5pBv3+y17Rws4nAP6xpKvfCcI+X3+rY1qP40Y=)
                          61: v6XLIeKZScSwIi6dNQdOVHQ-qj4.roa (hash: 7OMuR6fhsms8QfHt9y5086Ow7S9StBMGVTrScr2YfKs=)
                          62: wT410oSQJkuLENm8fiZ3XFuynTw.roa (hash: gPA3qsxbb1tD5VQTsdzhL/7R7AYoJxb6rMnGjeUK9U8=)
                          63: wUevmhZX2VylUs3tqEwu3N4i5Rw.roa (hash: +n6gGfGt/l9LEuw9jw4PqvOu1dgXZkoS3xM8wk02a5Y=)
                          64: wZjhE_pr55WbVQ7EqMILnUgk6q8.roa (hash: E6eN/ifoYlTOJWQpXkVLq+LL8JRVZ8agV15uv1I+xK0=)
                          65: xjFuTX7p8duFXbmjnW2eNX8jP2U.roa (hash: ZSDDnyDycJPJqkFrjcEZxISIgkwjV0ZH6RgKXgNg8MU=)
                          66: yjOw5zpX7c4ixOoQ9yfVmtuy9fQ.roa (hash: sXuPuujrB5h7YFj7wSxFAKLYLbkMm7phgdXg7ElP6Wg=)
                          67: yysHC6g2mvvoZbVhjTe18JGZfjs.roa (hash: 8Gd5CG1fNVv3lPsMuyZpEUhLFbuN8heMGJVI9OkTLd0=)
                          68: zmjoSn5I0WFyArKYL3CNzyTYt3k.roa (hash: 3JgC94x9YK1uKOSZibC092euWjVyeADbWW/A4EEbNv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b3:09:e1:5a:57:19:e1:ba:ab:96:37:a3:4d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
        Validity
            Not Before: Jan 31 18:00:43 2025 GMT
            Not After : Feb  1 18:00:43 2025 GMT
        Subject: CN=9e10c0e776a5f653138bf6fda961c5b2ec6f77ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:ff:04:73:db:3f:13:4c:28:b1:4d:88:dc:
                    b9:ea:8d:b3:42:b6:75:8c:12:37:8a:75:b3:8e:a8:
                    e2:18:36:ad:e0:b8:6c:39:b6:d3:7b:53:30:52:fb:
                    6f:e1:08:92:07:52:9c:75:59:0e:fa:d1:8c:52:ae:
                    32:7c:07:7b:39:c7:1d:de:0b:5c:f7:84:09:0b:3e:
                    22:1b:01:61:e1:86:97:32:3f:36:bc:fd:da:d6:71:
                    52:94:4e:73:bc:8d:0a:19:fb:4c:c6:8e:ae:13:86:
                    5b:43:ec:a6:f6:32:e8:38:c6:4b:c8:d4:e0:6c:bd:
                    5c:67:fe:44:1c:37:7f:98:48:e9:4d:b0:cf:ad:76:
                    29:e5:6a:34:8e:7c:2d:cb:28:35:6b:cb:b0:4f:a9:
                    67:7e:da:99:58:64:65:bd:fd:13:1f:a2:98:91:7d:
                    ad:51:59:ab:54:5e:0d:4e:50:00:e4:c5:3b:5f:a4:
                    b1:42:ba:90:17:ef:ed:7d:8f:2f:dc:89:2c:7e:e6:
                    dc:e5:78:28:d3:2d:a3:fc:c6:52:fd:07:79:7b:32:
                    7a:3a:db:f8:94:f9:49:aa:5e:55:d1:04:0d:f4:7c:
                    c6:8d:da:29:ad:1a:ca:f7:26:1e:ca:ca:63:93:5e:
                    c3:d1:67:59:5c:41:ca:fe:99:7d:31:5d:71:3b:60:
                    72:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:10:C0:E7:76:A5:F6:53:13:8B:F6:FD:A9:61:C5:B2:EC:6F:77:FF
            X509v3 Authority Key Identifier:
                keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:de:e9:93:d6:53:fc:a8:b0:15:ee:19:53:4f:cf:1e:a8:7b:
         f3:80:5a:62:40:2e:62:96:28:d3:81:dc:72:38:71:4d:1a:71:
         cc:d5:29:c1:fc:6d:6e:d8:6c:fc:5b:4e:81:ee:38:e5:41:07:
         51:c2:fb:c4:99:09:2c:d9:4c:01:68:df:a8:c9:fc:15:76:65:
         54:ab:a4:91:1a:b7:5c:7f:39:6d:a3:0b:ac:20:02:a2:81:d7:
         3d:6b:83:8e:c3:af:65:d6:26:af:ea:6a:f8:a1:6e:24:85:0d:
         ae:86:48:4d:0c:b8:6d:d9:e9:86:fd:0d:65:71:24:ee:56:9c:
         d3:88:04:72:df:41:39:de:b9:f3:19:90:68:05:50:9c:13:f5:
         52:83:66:a3:a3:b8:f2:88:fb:3a:3c:33:65:ae:89:1c:65:f9:
         bd:39:77:63:f4:33:e1:df:14:e5:6e:61:85:08:a2:db:b3:46:
         09:8e:fd:8a:e5:70:62:19:d5:2d:cb:df:11:0c:13:f9:ff:2d:
         0c:bb:7e:db:00:96:1a:0b:35:35:ec:dd:f0:40:43:2b:01:06:
         86:46:f9:11:db:73:36:b6:83:e3:0f:ef:15:39:be:8f:eb:7a:
         20:c2:ef:7d:bb:fa:bf:68:0a:23:3f:0d:2b:7b:71:a3:a5:fb:
         e1:32:d2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----