Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          yWIsQhRLQXsGNYKxM3iv6ubseNA5Su3q63pChsMC8yc=
Subject key identifier:   00:5D:CC:F5:B6:BA:7A:86:0F:BC:B6:4F:9D:AA:3C:60:D9:6D:CE:1D
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       01962FAB449A398C91E3AEFF9BB38E4032B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          0CDE
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
                          2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
                          3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: /cBh5vhAE/5JY1nDp0t8tifU6eOOfMtk+QsxhvNfXTY=)
                          4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
                          5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:44:9a:39:8c:91:e3:ae:ff:9b:b3:8e:40:32:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=005dccf5b6ba7a860fbcb64f9daa3c60d96dce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:1d:26:4c:5b:3a:9b:d2:a1:d8:7d:be:92:
                    43:7b:7a:1b:ba:5c:b5:b7:bd:c3:10:fa:ab:c5:a7:
                    f0:6e:9c:eb:81:a9:c2:17:e8:44:a1:d4:db:4e:d8:
                    39:de:97:21:1f:eb:34:84:92:25:0f:2b:8f:28:94:
                    d6:7c:5f:70:8d:0d:75:39:3a:b9:6b:80:67:16:28:
                    87:be:30:60:43:b4:64:7c:8f:e4:0c:eb:a2:9c:79:
                    18:51:51:f4:d2:8c:11:32:e2:4d:13:77:d4:08:1f:
                    b3:bf:33:1f:d5:ba:3a:2d:b7:09:c7:b7:d1:f3:51:
                    1d:80:6e:0f:d4:2c:1a:d7:37:cf:06:bc:d5:e7:db:
                    d9:18:0c:5d:6d:39:97:58:8e:cb:1a:18:6e:5f:71:
                    e9:10:49:97:d2:67:25:4a:e0:1b:d3:2c:fe:f5:d5:
                    d9:61:33:b2:5a:6c:1e:a6:17:2f:1d:b1:32:9f:f6:
                    09:3d:3b:fe:f5:85:5c:2a:8b:8b:2c:a1:5d:ae:3a:
                    a1:a5:5e:90:23:62:4b:89:12:3e:86:d2:8e:65:b4:
                    fa:e5:3a:f6:f4:82:ae:58:3b:92:4e:9b:e2:6d:59:
                    6c:9e:1b:a7:d4:ab:17:f7:12:ae:5e:45:e2:ea:7a:
                    b8:fe:6b:cd:bb:e2:46:7c:de:ce:e3:cf:75:d3:1f:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5D:CC:F5:B6:BA:7A:86:0F:BC:B6:4F:9D:AA:3C:60:D9:6D:CE:1D
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:80:3b:24:6e:d5:01:25:98:59:fd:3e:51:1b:09:95:77:
         34:73:f9:98:51:6e:35:19:71:78:c5:4d:46:a3:2f:b6:9e:18:
         c3:05:c8:dc:0e:a0:08:c9:5d:76:31:8c:b6:c6:af:1b:ad:41:
         59:2b:fb:d7:5e:b4:b0:1a:f5:46:4a:32:0a:06:81:ce:f6:14:
         f7:91:58:d1:81:8d:3e:82:39:a2:4a:0a:42:aa:8d:64:12:3c:
         15:07:67:1c:90:6f:6d:fc:fc:74:c3:ca:f3:e6:34:6f:17:f2:
         8e:fb:7f:72:5b:cb:dd:1e:6a:3b:b6:6b:24:35:db:ee:a7:f3:
         df:80:57:69:bb:94:08:fe:90:40:0f:0c:02:2a:cd:bf:55:08:
         fa:09:72:11:20:51:42:cc:c8:9f:10:29:75:07:52:b2:23:26:
         19:be:b3:5a:16:ab:9d:58:d3:ef:32:f9:98:80:90:c6:9a:eb:
         01:6f:36:9d:d1:ae:6e:62:bd:bf:2c:4e:9e:1b:01:39:5a:23:
         0b:53:13:d4:78:eb:78:f2:0a:5e:20:e5:19:b8:3b:75:8e:e9:
         8d:e1:13:bf:91:ce:dc:0f:62:cb:4a:8e:5b:79:42:5f:67:46:
         a9:ea:ef:66:17:8c:03:9b:d5:52:c9:ab:89:1d:77:c3:48:8c:
         b0:ba:92:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0SaOYyR467/m7OOQDKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjUwNDEzMTUwMTE1WhcNMjUwNDE0MTUwMTE1WjAzMTEwLwYDVQQD
EygwMDVkY2NmNWI2YmE3YTg2MGZiY2I2NGY5ZGFhM2M2MGQ5NmRjZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sAdJkxbOpvSodh9vpJDe3obuly1
t73DEPqrxafwbpzrganCF+hEodTbTtg53pchH+s0hJIlDyuPKJTWfF9wjQ11OTq5
a4BnFiiHvjBgQ7RkfI/kDOuinHkYUVH00owRMuJNE3fUCB+zvzMf1bo6LbcJx7fR
81EdgG4P1Cwa1zfPBrzV59vZGAxdbTmXWI7LGhhuX3HpEEmX0mclSuAb0yz+9dXZ
YTOyWmwephcvHbEyn/YJPTv+9YVcKouLLKFdrjqhpV6QI2JLiRI+htKOZbT65Tr2
9IKuWDuSTpvibVlsnhun1KsX9xKuXkXi6nq4/mvNu+JGfN7O48910x97TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABdzPW2unqGD7y2T52qPGDZbc4dMB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7iAOyRu
1QElmFn9PlEbCZV3NHP5mFFuNRlxeMVNRqMvtp4YwwXI3A6gCMlddjGMtsavG61B
WSv71160sBr1RkoyCgaBzvYU95FY0YGNPoI5okoKQqqNZBI8FQdnHJBvbfz8dMPK
8+Y0bxfyjvt/clvL3R5qO7ZrJDXb7qfz34BXabuUCP6QQA8MAirNv1UI+glyESBR
QszInxApdQdSsiMmGb6zWharnVjT7zL5mICQxprrAW82ndGubmK9vyxOnhsBOVoj
C1MT1HjrePIKXiDlGbg7dY7pjeETv5HO3A9iy0qOW3lCX2dGqervZheMA5vVUsmr
iR13w0iMsLqSVA==
-----END CERTIFICATE-----