Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File:                     ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier:          SZP2ZMXzXZrurxWjuLX98jmDiF7Cr9XrZXhePk9M8bI=
Subject key identifier:   71:E5:CE:46:B4:A7:34:83:3C:09:DF:F4:18:A4:A6:DC:E2:7C:C8:50
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer:       /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial:       01962E61DF26CE905BBB59D2DAF57F8122FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number:          1033
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
                          2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
                          3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: 0C4VWnasQxMG311yaPqEptek48ZZs8coxQVGqQV3hjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:df:26:ce:90:5b:bb:59:d2:da:f5:7f:81:22:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=71e5ce46b4a734833c09dff418a4a6dce27cc850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:58:85:de:1d:92:8d:bd:4b:d4:37:1b:55:
                    f5:b3:5b:5f:9e:ff:e9:37:68:ec:2f:4f:30:c8:a3:
                    2e:89:df:57:e6:ca:84:64:23:d8:2f:f5:e7:5f:fd:
                    4c:47:31:99:16:a6:ab:74:23:c8:df:51:18:dd:78:
                    8f:a7:39:c0:51:70:98:8c:da:73:1d:59:04:b7:2a:
                    11:18:de:3d:a9:7f:05:e6:62:ac:ad:d1:5f:45:25:
                    67:07:d8:a8:ad:dd:80:a4:f0:37:0e:67:d6:59:ca:
                    45:b8:e8:6a:49:f5:d0:d7:b3:9f:31:42:ed:fe:8d:
                    a5:8c:88:bd:eb:e2:ed:fc:b8:f8:10:34:8a:28:1f:
                    76:e8:e3:8f:64:d6:da:a6:b2:d8:24:d2:59:21:11:
                    40:93:00:8a:78:16:07:d9:ad:7f:c1:37:b9:18:02:
                    84:75:48:dd:7a:29:63:21:ac:00:65:b3:0d:69:80:
                    5a:23:10:19:fa:a1:cd:be:ba:87:b0:65:75:e2:c8:
                    08:3d:7e:7b:82:b7:5e:6d:87:4c:1e:9a:54:aa:d1:
                    7c:83:75:01:4a:d0:4c:c7:6f:a5:83:a0:48:87:a5:
                    4d:4b:99:1b:fa:11:b5:b8:39:98:75:d9:dc:4a:a3:
                    9c:d2:b3:66:dd:5e:9e:0c:38:5e:72:9e:82:e3:08:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:CE:46:B4:A7:34:83:3C:09:DF:F4:18:A4:A6:DC:E2:7C:C8:50
            X509v3 Authority Key Identifier:
                keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:90:5d:fa:2e:28:00:3a:51:51:58:8c:e3:d7:62:7b:87:90:
         f2:ff:e7:b8:58:30:52:3b:0b:7a:cf:ad:bc:3c:47:28:80:e2:
         1c:b2:88:8d:4e:7d:59:a8:65:17:57:92:6a:12:ea:9f:44:07:
         49:a3:71:11:99:00:03:99:dc:9e:fd:b6:31:84:21:7b:b9:ac:
         df:f2:3b:ec:ff:aa:e0:32:2b:53:4b:8e:2d:28:dc:95:40:3d:
         95:a6:7b:ee:bf:d2:0d:1d:ef:40:c9:a8:1d:9f:98:21:7b:ce:
         d5:a7:fe:14:35:98:dd:c7:f1:d8:15:10:9c:f5:af:9b:79:50:
         f9:0b:9c:ff:fe:fa:2b:b3:f7:01:48:57:a8:be:c2:0b:5f:fe:
         14:9a:60:83:3f:15:b9:76:d3:ee:c3:33:30:97:6b:de:74:30:
         d4:e5:fc:dc:8e:d9:98:3c:84:3a:c0:fa:5e:48:ac:68:5e:b8:
         f2:e8:b8:16:ac:be:64:34:b8:c7:8e:54:73:c1:a8:cc:4f:91:
         29:4e:c5:42:58:c9:2a:b8:ec:a5:ed:d6:b5:89:62:5e:fb:12:
         c7:df:da:b4:11:78:56:c6:fb:b1:f0:d5:9d:ab:8c:a8:27:fa:
         5e:ee:6c:08:d4:76:ee:ec:7d:27:58:92:87:b7:77:34:55:86:
         fe:ce:d3:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYd8mzpBbu1nS2vV/gSL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk
OTFjNmYwHhcNMjUwNDEzMDkwMTI4WhcNMjUwNDE0MDkwMTI4WjAzMTEwLwYDVQQD
Eyg3MWU1Y2U0NmI0YTczNDgzM2MwOWRmZjQxOGE0YTZkY2UyN2NjODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+5Yhd4dko29S9Q3G1X1s1tfnv/p
N2jsL08wyKMuid9X5sqEZCPYL/XnX/1MRzGZFqardCPI31EY3XiPpznAUXCYjNpz
HVkEtyoRGN49qX8F5mKsrdFfRSVnB9iord2ApPA3DmfWWcpFuOhqSfXQ17OfMULt
/o2ljIi96+Lt/Lj4EDSKKB926OOPZNbaprLYJNJZIRFAkwCKeBYH2a1/wTe5GAKE
dUjdeiljIawAZbMNaYBaIxAZ+qHNvrqHsGV14sgIPX57grdebYdMHppUqtF8g3UB
StBMx2+lg6BIh6VNS5kb+hG1uDmYddncSqOc0rNm3V6eDDhecp6C4whInQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHlzka0pzSDPAnf9BikptzifMhQMB8GA1UdIwQY
MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt
ZWY2YmQyNmEwMzA1LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1
LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZBd+i4o
ADpRUViM49die4eQ8v/nuFgwUjsLes+tvDxHKIDiHLKIjU59WahlF1eSahLqn0QH
SaNxEZkAA5ncnv22MYQhe7ms3/I77P+q4DIrU0uOLSjclUA9laZ77r/SDR3vQMmo
HZ+YIXvO1af+FDWY3cfx2BUQnPWvm3lQ+Quc//76K7P3AUhXqL7CC1/+FJpggz8V
uXbT7sMzMJdr3nQw1OX83I7ZmDyEOsD6XkisaF648ui4Fqy+ZDS4x45Uc8GozE+R
KU7FQljJKrjspe3WtYliXvsSx9/atBF4Vsb7sfDVnauMqCf6Xu5sCNR27ux9J1iS
h7d3NFWG/s7Twg==
-----END CERTIFICATE-----