Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File:                     Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier:          XMFEUMtDlsA3jcnk7mj6kRh52AhLkm/jNVsqkfkArjg=
Subject key identifier:   61:F6:94:98:D6:C8:D2:CD:25:62:00:E8:7E:63:C0:7D:4D:8F:20:88
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer:       /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial:       01962F06B49F5A9270C6D4F39A275ECEEF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number:          0B6B
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: pvX0ULmLdzLgm29ZiC+w2XFSazgwIGybpLoVo1Gtjak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b4:9f:5a:92:70:c6:d4:f3:9a:27:5e:ce:ef:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=61f69498d6c8d2cd256200e87e63c07d4d8f2088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:fb:76:b9:10:c3:b3:59:97:97:b0:02:dc:
                    af:e8:e9:30:07:8f:09:28:8b:7b:9b:1d:8e:46:1c:
                    dc:ad:9e:be:e8:88:57:46:bb:b8:2e:fe:a8:b9:6e:
                    58:55:b5:f0:88:03:e8:eb:00:ca:64:6a:01:0f:98:
                    ac:82:7e:1b:d3:b3:22:38:bf:85:43:57:9a:f6:bc:
                    e0:4a:9e:ab:22:63:9f:c0:22:22:fe:10:21:39:1b:
                    ed:38:e7:a5:7d:e3:5e:e3:08:88:31:b2:4a:e6:01:
                    1b:99:1b:78:ba:d8:70:84:08:61:25:ce:a5:48:1b:
                    d3:b7:7a:50:63:a2:b0:87:d3:39:80:08:8f:24:16:
                    e4:67:a4:d8:d1:d3:bf:37:c8:02:1d:78:1c:1b:2f:
                    b6:4f:e4:2b:9f:ce:e4:2f:56:d4:fa:22:31:37:83:
                    81:ba:0f:65:5c:be:63:5c:41:49:6f:c4:e7:c8:45:
                    fc:90:f0:00:28:f0:95:22:a6:45:0b:60:b3:4b:0b:
                    dd:da:4e:55:da:31:83:01:e3:be:9b:18:f4:21:00:
                    1b:27:8d:3b:65:25:e2:1e:41:8c:ba:97:9c:77:36:
                    21:d6:66:45:a4:d3:cc:f0:88:e6:42:24:81:12:4e:
                    62:cc:d2:cf:51:73:b5:00:ee:56:02:f8:20:9d:80:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F6:94:98:D6:C8:D2:CD:25:62:00:E8:7E:63:C0:7D:4D:8F:20:88
            X509v3 Authority Key Identifier:
                keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:33:24:30:e4:d4:80:a5:e3:a6:17:3b:c2:3d:f1:92:e6:
         91:15:ce:c9:a2:e7:98:32:f5:68:e8:00:b6:d3:9e:38:27:eb:
         38:c8:3f:35:a6:a1:41:e9:8e:d9:bf:d7:0f:8f:e2:63:aa:bb:
         84:3f:d1:4a:1a:c0:b8:40:10:d9:0f:6f:fc:ca:0e:a3:f1:cf:
         74:b1:90:38:a6:57:66:88:c6:af:0a:5c:bf:89:7a:91:57:96:
         34:e2:66:83:37:c6:3a:52:b2:3a:c7:2c:0a:bb:99:ee:81:87:
         7e:f1:ca:38:fa:b0:96:87:98:9b:52:22:d9:a2:80:48:91:96:
         9a:b7:ae:4e:82:66:e0:ad:69:4f:d8:ac:2a:8a:55:fe:bb:1a:
         44:df:74:a5:5d:02:42:ac:f8:71:1e:9e:7d:62:30:00:2a:50:
         42:e1:49:51:e1:d3:b0:96:33:77:84:95:67:01:fd:14:e9:44:
         ef:11:f8:a0:67:6f:29:15:70:24:89:44:5e:79:00:72:7d:c1:
         3e:84:9a:5c:7f:a6:e2:2c:1e:66:99:e1:b1:75:10:06:5f:1b:
         10:33:3c:1b:67:b2:88:a3:9b:26:a6:6c:fa:67:7b:72:94:2f:
         e2:fd:b4:c1:83:1c:65:fe:90:56:bf:3e:00:55:5e:27:9c:38:
         d8:81:09:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrSfWpJwxtTzmidezu9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NmZiYjU3N2M5M2RjNDVkNDhmMDE5OWIxOWQxY2E3YTIx
MzdjNTYwHhcNMjUwNDEzMTIwMTMwWhcNMjUwNDE0MTIwMTMwWjAzMTEwLwYDVQQD
Eyg2MWY2OTQ5OGQ2YzhkMmNkMjU2MjAwZTg3ZTYzYzA3ZDRkOGYyMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWP7drkQw7NZl5ewAtyv6OkwB48J
KIt7mx2ORhzcrZ6+6IhXRru4Lv6ouW5YVbXwiAPo6wDKZGoBD5isgn4b07MiOL+F
Q1ea9rzgSp6rImOfwCIi/hAhORvtOOelfeNe4wiIMbJK5gEbmRt4uthwhAhhJc6l
SBvTt3pQY6Kwh9M5gAiPJBbkZ6TY0dO/N8gCHXgcGy+2T+Qrn87kL1bU+iIxN4OB
ug9lXL5jXEFJb8TnyEX8kPAAKPCVIqZFC2CzSwvd2k5V2jGDAeO+mxj0IQAbJ407
ZSXiHkGMupecdzYh1mZFpNPM8IjmQiSBEk5izNLPUXO1AO5WAvggnYClWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH2lJjWyNLNJWIA6H5jwH1NjyCIMB8GA1UdIwQY
MBaAFGdvu1d8k9xF1I8BmbGdHKeiE3xWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjItN1YzeVQzRVhVandHWnNaMGNwNklUZkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84YTEwN2UtYWI4Yi00M2UyLTk3MWYt
MWNkZTczMWU2ZmRmLzEvWjItN1YzeVQzRVhVandHWnNaMGNwNklUZkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy84YTEwN2UtYWI4Yi00M2UyLTk3MWYtMWNkZTczMWU2ZmRm
LzEvWjItN1YzeVQzRVhVandHWnNaMGNwNklUZkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh30zJDDk
1ICl46YXO8I98ZLmkRXOyaLnmDL1aOgAttOeOCfrOMg/NaahQemO2b/XD4/iY6q7
hD/RShrAuEAQ2Q9v/MoOo/HPdLGQOKZXZojGrwpcv4l6kVeWNOJmgzfGOlKyOscs
CruZ7oGHfvHKOPqwloeYm1Ii2aKASJGWmreuToJm4K1pT9isKopV/rsaRN90pV0C
Qqz4cR6efWIwACpQQuFJUeHTsJYzd4SVZwH9FOlE7xH4oGdvKRVwJIlEXnkAcn3B
PoSaXH+m4iweZpnhsXUQBl8bEDM8G2eyiKObJqZs+md7cpQv4v20wYMcZf6QVr8+
AFVeJ5w42IEJ9g==
-----END CERTIFICATE-----