Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File:                     z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier:          YNmu4q8qQr9Vzb1/ZioLLkWfN+pAWCqkI/cyZgALumA=
Subject key identifier:   A5:B7:6B:3B:4E:3C:35:17:23:C5:DF:3E:BB:72:54:5C:AC:99:75:B3
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer:       /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial:       01962E2B155C115D695BD9BE070AB6673EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number:          01EA
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: 5kD7fPCQqSTAu+fATKwIXCqPfaVIepH79N5Va+IgcMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:15:5c:11:5d:69:5b:d9:be:07:0a:b6:67:3e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=a5b76b3b4e3c351723c5df3ebb72545cac9975b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:40:6f:99:74:a0:f5:b5:98:b5:a2:8c:56:
                    96:85:92:6e:e3:0d:25:9f:88:df:13:be:d3:d9:15:
                    04:e6:48:c6:e4:fd:e0:12:6f:fb:26:a7:6f:39:19:
                    70:a0:00:c1:27:59:f4:db:c2:e1:11:55:ce:83:f1:
                    23:c6:04:93:ef:c5:e3:95:09:dc:1e:fd:3f:77:fe:
                    5f:74:51:e8:6b:d2:88:9c:d1:49:63:b9:18:13:e7:
                    09:c0:d6:9b:7d:69:bc:4b:82:4a:ac:05:bc:83:44:
                    ea:e2:b3:1a:dd:a0:b8:9f:24:47:e6:10:59:3b:a5:
                    d1:54:80:c3:cd:e9:75:6b:ff:84:5e:28:47:7d:6f:
                    5b:ad:40:63:74:33:ae:35:8e:1e:3c:f0:69:b8:3c:
                    99:33:0c:75:28:65:4c:a3:d8:51:fc:d4:a4:77:50:
                    bf:61:3c:e0:00:53:35:cd:8a:0a:5c:6e:8d:19:cc:
                    4e:e1:d0:2d:dc:24:09:ca:d1:ce:bf:2e:22:05:c8:
                    15:8e:82:10:db:09:01:5b:bb:35:fc:c3:ab:3e:4b:
                    73:d3:02:0b:8f:7d:c5:ce:b3:29:18:23:45:90:bd:
                    2d:80:d8:5f:91:cf:3d:8f:c8:e3:ee:1f:f4:be:0b:
                    d6:98:20:d1:4e:6d:cc:e7:1b:5c:ef:87:ef:50:25:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B7:6B:3B:4E:3C:35:17:23:C5:DF:3E:BB:72:54:5C:AC:99:75:B3
            X509v3 Authority Key Identifier:
                keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:90:86:51:31:90:18:ff:97:29:e9:ce:e9:41:92:1d:16:ce:
         d4:c0:56:e5:bf:a3:c4:a4:7a:4b:cf:d4:98:87:f5:c1:af:37:
         c9:3f:bd:aa:f7:4f:26:40:01:19:61:d2:66:7f:80:d2:34:18:
         ad:92:a6:da:22:1f:e5:15:54:13:13:22:58:b0:45:6f:b2:69:
         8c:1b:95:66:8b:ad:21:7c:a0:5e:e4:e1:d7:9f:c7:83:40:f1:
         54:00:86:2a:de:be:27:62:ae:19:43:33:aa:ba:4a:96:a9:81:
         29:eb:f3:93:cc:17:87:43:88:b0:be:44:29:5c:76:04:4e:45:
         d0:e3:b0:d6:0e:1c:db:d4:96:9f:93:74:87:50:45:92:22:91:
         94:15:d3:3b:54:98:78:5c:6f:c5:f1:29:85:ef:e8:97:57:50:
         43:1e:a0:34:33:8d:92:7c:fb:7d:ee:68:ba:ec:11:33:14:02:
         ae:a3:3b:2b:9f:f8:56:92:5e:c3:d9:0d:c7:92:14:66:c9:b4:
         d2:cd:bb:ce:17:02:9f:21:7b:c0:df:4b:17:58:e1:bc:64:c6:
         5a:54:6e:60:03:81:a5:ae:da:a0:04:a0:d0:ac:16:99:ac:fd:
         eb:f7:d8:e1:53:5f:6a:0e:20:ee:6b:ee:83:83:74:d6:28:a2:
         0b:eb:4c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxVcEV1pW9m+Bwq2Zz7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTc1MmMzMjQxMGM2Y2IzY2NhNGZkOTAzNDczMGM5ZGMy
NDJhZTQwHhcNMjUwNDEzMDgwMTM3WhcNMjUwNDE0MDgwMTM3WjAzMTEwLwYDVQQD
EyhhNWI3NmIzYjRlM2MzNTE3MjNjNWRmM2ViYjcyNTQ1Y2FjOTk3NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJZAb5l0oPW1mLWijFaWhZJu4w0l
n4jfE77T2RUE5kjG5P3gEm/7JqdvORlwoADBJ1n028LhEVXOg/EjxgST78XjlQnc
Hv0/d/5fdFHoa9KInNFJY7kYE+cJwNabfWm8S4JKrAW8g0Tq4rMa3aC4nyRH5hBZ
O6XRVIDDzel1a/+EXihHfW9brUBjdDOuNY4ePPBpuDyZMwx1KGVMo9hR/NSkd1C/
YTzgAFM1zYoKXG6NGcxO4dAt3CQJytHOvy4iBcgVjoIQ2wkBW7s1/MOrPktz0wIL
j33FzrMpGCNFkL0tgNhfkc89j8jj7h/0vgvWmCDRTm3M5xtc74fvUCXqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW3aztOPDUXI8XfPrtyVFysmXWzMB8GA1UdIwQY
MBaAFM+nUsMkEMbLPMpP2QNHMMncJCrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZkU3d5UVF4c3M4eWtfWkEwY3d5ZHdrS3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWY5ZjQtYjQ0ZC00ZjU5LWFhMWIt
ODI0Nzc1N2NmYjI4LzEvejZkU3d5UVF4c3M4eWtfWkEwY3d5ZHdrS3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84NWY5ZjQtYjQ0ZC00ZjU5LWFhMWItODI0Nzc1N2NmYjI4
LzEvejZkU3d5UVF4c3M4eWtfWkEwY3d5ZHdrS3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5CGUTGQ
GP+XKenO6UGSHRbO1MBW5b+jxKR6S8/UmIf1wa83yT+9qvdPJkABGWHSZn+A0jQY
rZKm2iIf5RVUExMiWLBFb7JpjBuVZoutIXygXuTh15/Hg0DxVACGKt6+J2KuGUMz
qrpKlqmBKevzk8wXh0OIsL5EKVx2BE5F0OOw1g4c29SWn5N0h1BFkiKRlBXTO1SY
eFxvxfEphe/ol1dQQx6gNDONknz7fe5ouuwRMxQCrqM7K5/4VpJew9kNx5IUZsm0
0s27zhcCnyF7wN9LF1jhvGTGWlRuYAOBpa7aoASg0KwWmaz96/fY4VNfag4g7mvu
g4N01iiiC+tM4Q==
-----END CERTIFICATE-----