Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File:                     dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier:          RSvcxZQgXi+SXbnqjCZUsFG4KshShZKqo8BKxCbG2UI=
Subject key identifier:   22:5E:9E:4B:D7:4F:FB:AE:C4:BB:6E:72:25:BA:E7:7D:3A:27:1C:06
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer:       /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial:       01962F072DD30DE6A0233AD9900991B6A9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number:          11B9
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: Qv3hVGEIw5Ck_5QiJYApdipPmqI.roa (hash: C4rOq98XQlQBOJoaFTi64wzA4+qXQilqH0FLuH6cokY=)
                          2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: 5yG+Sr/w34QrJSghQpynJhjAh7XHUThFOl7qqra5WlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2d:d3:0d:e6:a0:23:3a:d9:90:09:91:b6:a9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=225e9e4bd74ffbaec4bb6e7225bae77d3a271c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:cd:25:a9:24:ee:4c:09:59:38:66:b1:22:
                    5e:ff:f8:81:67:a2:00:a0:4e:47:02:58:b5:a8:9d:
                    6a:96:ba:a4:b0:97:e9:73:f0:2d:51:79:3e:45:23:
                    bf:cf:f8:9d:45:83:14:d6:b5:2d:79:09:7c:38:71:
                    4e:51:77:d2:89:f9:50:d1:f0:e2:b1:e2:b6:bb:2f:
                    7b:95:0a:9b:bc:c1:07:37:4a:99:0d:76:1d:59:29:
                    10:9d:24:92:57:d5:19:bc:fe:bf:cd:13:20:f4:67:
                    f6:e1:1c:f0:dc:75:a9:74:93:bd:c8:7e:f6:ba:49:
                    ca:96:b6:01:8e:fe:72:41:8e:29:14:e6:e2:d8:6e:
                    6d:64:9a:7a:5c:26:1c:1f:94:c4:55:a0:45:d7:8f:
                    99:cf:63:56:d7:26:6c:bf:3b:53:7e:ab:25:c7:0c:
                    d6:ea:a0:71:54:c5:29:35:a9:19:40:e6:95:fb:99:
                    d1:6a:06:a9:1e:e8:97:92:42:b2:7f:d5:03:9c:7a:
                    1e:1a:07:a3:fc:6e:8c:ea:09:34:54:bc:44:93:ef:
                    60:64:ad:a9:5b:51:35:30:19:83:31:1e:c0:7d:42:
                    a3:0f:57:2e:1c:6c:e7:c9:1f:41:60:36:26:b0:34:
                    6f:28:e1:97:c3:f7:a7:ae:39:03:16:a9:d6:34:83:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5E:9E:4B:D7:4F:FB:AE:C4:BB:6E:72:25:BA:E7:7D:3A:27:1C:06
            X509v3 Authority Key Identifier:
                keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:81:22:dc:f5:37:f9:ac:98:ed:7f:df:6e:6b:02:85:2d:
         44:42:dc:d5:eb:4b:94:f4:fc:95:d7:0d:20:50:b2:65:69:4e:
         c1:ff:98:e2:1a:61:78:0b:07:f8:fe:b7:39:fa:b0:5b:79:95:
         ac:6b:6e:f8:af:94:14:80:89:de:ee:57:c7:51:bd:ba:dd:e9:
         3e:18:f7:a3:5b:97:c4:a1:f4:80:ec:fa:3c:85:49:45:ed:2a:
         3f:d6:f3:b7:6e:20:da:2f:7f:f5:02:66:06:26:49:8e:2f:ba:
         c9:54:28:14:37:df:8f:03:02:e6:aa:6b:bf:8b:89:a9:b9:42:
         47:2e:ec:82:e1:2b:2a:72:13:7e:89:ef:2e:a7:06:9e:09:87:
         4e:db:c9:e7:c5:ec:e6:0c:7f:6a:b6:16:37:fb:31:9f:15:b1:
         a3:88:18:08:2a:e3:80:f3:ec:a2:dd:91:01:4e:67:7a:8f:c7:
         4a:b0:79:e9:64:5d:dd:de:79:5b:69:a0:9b:0d:a5:20:bc:5d:
         9c:4b:c0:25:b7:52:20:26:35:58:8c:03:51:3b:06:0c:31:6c:
         32:ed:14:b2:12:94:6e:95:4b:d6:af:79:33:c5:a2:d5:87:12:
         9f:6d:d1:08:e4:dc:c8:e4:d9:96:5c:05:9a:0a:68:92:4f:5a:
         50:81:54:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBy3TDeagIzrZkAmRtqnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzFiNjJiMGUxNTliYTZjY2Q4N2Y3MzI3NWE4NjhlYmNj
NDFhYjgwHhcNMjUwNDEzMTIwMjAxWhcNMjUwNDE0MTIwMjAxWjAzMTEwLwYDVQQD
EygyMjVlOWU0YmQ3NGZmYmFlYzRiYjZlNzIyNWJhZTc3ZDNhMjcxYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBXNJakk7kwJWThmsSJe//iBZ6IA
oE5HAli1qJ1qlrqksJfpc/AtUXk+RSO/z/idRYMU1rUteQl8OHFOUXfSiflQ0fDi
seK2uy97lQqbvMEHN0qZDXYdWSkQnSSSV9UZvP6/zRMg9Gf24Rzw3HWpdJO9yH72
uknKlrYBjv5yQY4pFObi2G5tZJp6XCYcH5TEVaBF14+Zz2NW1yZsvztTfqslxwzW
6qBxVMUpNakZQOaV+5nRagapHuiXkkKyf9UDnHoeGgej/G6M6gk0VLxEk+9gZK2p
W1E1MBmDMR7AfUKjD1cuHGznyR9BYDYmsDRvKOGXw/enrjkDFqnWNIO7gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJenkvXT/uuxLtuciW65306JxwGMB8GA1UdIwQY
MBaAFHcxtisOFZumzNh/cydaho68xBq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgt
NmJmYzMzNTAxNDc5LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgtNmJmYzMzNTAxNDc5
LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdeBItz1
N/msmO1/325rAoUtRELc1etLlPT8ldcNIFCyZWlOwf+Y4hpheAsH+P63OfqwW3mV
rGtu+K+UFICJ3u5Xx1G9ut3pPhj3o1uXxKH0gOz6PIVJRe0qP9bzt24g2i9/9QJm
BiZJji+6yVQoFDffjwMC5qprv4uJqblCRy7sguErKnITfonvLqcGngmHTtvJ58Xs
5gx/arYWN/sxnxWxo4gYCCrjgPPsot2RAU5neo/HSrB56WRd3d55W2mgmw2lILxd
nEvAJbdSICY1WIwDUTsGDDFsMu0UshKUbpVL1q95M8Wi1YcSn23RCOTcyOTZllwF
mgpokk9aUIFU3Q==
-----END CERTIFICATE-----