Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File:                     FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier:          qz4JhDyEnKZFsVtyiMevBdiPCNXW2Yo+poMOuia8nmk=
Subject key identifier:   38:DB:BE:60:4F:1E:2C:51:17:3D:88:C7:E1:07:60:90:C7:F0:88:07
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer:       /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial:       01962E998A91B7C1B1AD4F188C7A4798B9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number:          0B6E
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: L97TPb+yUethd1wJfQtXqqpPfFuLlOGW1sjVTKP6yPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8a:91:b7:c1:b1:ad:4f:18:8c:7a:47:98:b9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=38dbbe604f1e2c51173d88c7e1076090c7f08807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:9b:de:b0:8a:d2:c8:a5:03:85:7c:22:46:
                    a7:08:06:8e:32:cf:1e:e2:45:99:88:18:67:04:71:
                    e2:06:0a:b2:67:7b:58:d7:0c:ee:d8:33:ab:3f:5b:
                    27:e1:0d:93:9b:f6:e4:53:28:d0:ec:74:ab:8e:ef:
                    f6:99:8a:96:6f:37:75:ef:60:06:48:b7:11:36:00:
                    bc:6b:10:8c:a0:bc:80:ee:fd:17:30:ca:6e:84:66:
                    64:d0:3b:5a:bd:98:b7:e9:06:7a:8e:f3:50:01:bd:
                    ac:31:b1:3a:ea:a8:0c:f6:1b:2b:e9:c7:b7:95:d9:
                    da:fe:16:97:ad:cf:ab:64:02:9e:56:38:67:b3:e3:
                    e5:c0:b6:2b:24:d8:81:96:d2:5f:c9:86:d8:10:58:
                    5e:55:4d:f0:4c:01:e0:9e:b9:89:43:a5:24:f9:b6:
                    18:5f:fd:dd:fb:58:ef:ca:af:1a:67:88:8f:f0:d5:
                    1e:22:17:f0:3e:52:db:30:02:f6:39:69:2a:47:7d:
                    47:5a:dc:f8:5d:6a:e1:89:0c:8c:cd:b0:19:ac:89:
                    ff:33:f9:86:e7:98:01:ec:0d:24:40:7a:ee:c1:54:
                    65:b8:f2:de:57:85:2b:80:af:62:27:5a:ff:dd:c6:
                    a4:9e:56:96:29:44:17:8d:e8:36:05:b3:0c:da:ff:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DB:BE:60:4F:1E:2C:51:17:3D:88:C7:E1:07:60:90:C7:F0:88:07
            X509v3 Authority Key Identifier:
                keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:10:37:c1:12:26:94:18:d4:cc:d5:f7:af:9f:33:44:4f:
         a1:12:98:d0:a3:e8:d2:8e:87:a3:7d:66:26:4f:6c:45:7a:7b:
         f2:46:83:51:37:35:8b:93:31:f5:18:5b:d1:58:67:cc:75:29:
         1f:8a:27:84:7e:ea:01:e2:59:d5:cd:0d:09:90:a6:6d:65:e3:
         09:ef:e4:c2:f7:00:a4:31:0a:63:7f:67:62:4a:67:56:3c:7c:
         59:5c:b5:86:91:cb:21:36:88:5c:86:10:61:cf:0c:7a:c5:60:
         15:1e:d4:9e:4f:dc:f6:de:00:bf:a4:77:09:78:c1:be:66:ec:
         47:52:57:98:5c:32:da:1c:f9:5d:16:a4:6c:0d:e3:79:9d:58:
         17:db:c2:81:59:ad:27:84:a0:64:ef:c0:b4:c9:fd:a9:d3:81:
         01:e6:69:81:e0:27:af:e3:10:d2:a9:fd:1c:5b:30:08:0a:f2:
         0e:44:97:d5:01:2a:ab:f0:b6:8a:00:ee:87:cf:ef:76:72:e0:
         da:9c:dd:a8:79:b8:1d:9f:cb:3a:95:f4:4f:0d:3e:02:15:4c:
         55:0b:10:e7:24:39:46:6f:7d:14:f4:dc:6b:05:6c:c9:ef:13:
         1e:51:f3:73:8e:7b:7e:93:73:ae:14:30:e6:1f:f8:17:09:92:
         91:96:ad:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYqRt8GxrU8YjHpHmLn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDA4NDNiMjQ1ZmMyNzM1Y2YyNDc1MDRjNGYxYmQ4NTVm
ZmNlZmMwHhcNMjUwNDEzMTAwMjE2WhcNMjUwNDE0MTAwMjE2WjAzMTEwLwYDVQQD
EygzOGRiYmU2MDRmMWUyYzUxMTczZDg4YzdlMTA3NjA5MGM3ZjA4ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurKb3rCK0silA4V8IkanCAaOMs8e
4kWZiBhnBHHiBgqyZ3tY1wzu2DOrP1sn4Q2Tm/bkUyjQ7HSrju/2mYqWbzd172AG
SLcRNgC8axCMoLyA7v0XMMpuhGZk0DtavZi36QZ6jvNQAb2sMbE66qgM9hsr6ce3
ldna/haXrc+rZAKeVjhns+PlwLYrJNiBltJfyYbYEFheVU3wTAHgnrmJQ6Uk+bYY
X/3d+1jvyq8aZ4iP8NUeIhfwPlLbMAL2OWkqR31HWtz4XWrhiQyMzbAZrIn/M/mG
55gB7A0kQHruwVRluPLeV4UrgK9iJ1r/3caknlaWKUQXjeg2BbMM2v8GEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjbvmBPHixRFz2Ix+EHYJDH8IgHMB8GA1UdIwQY
MBaAFBTQhDskX8JzXPJHUExPG9hV/878MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2Ut
NzIxYmViZDhhMWQ1LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2UtNzIxYmViZDhhMWQ1
LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnsQN8ES
JpQY1MzV96+fM0RPoRKY0KPo0o6Ho31mJk9sRXp78kaDUTc1i5Mx9Rhb0VhnzHUp
H4onhH7qAeJZ1c0NCZCmbWXjCe/kwvcApDEKY39nYkpnVjx8WVy1hpHLITaIXIYQ
Yc8MesVgFR7Unk/c9t4Av6R3CXjBvmbsR1JXmFwy2hz5XRakbA3jeZ1YF9vCgVmt
J4SgZO/AtMn9qdOBAeZpgeAnr+MQ0qn9HFswCAryDkSX1QEqq/C2igDuh8/vdnLg
2pzdqHm4HZ/LOpX0Tw0+AhVMVQsQ5yQ5Rm99FPTcawVsye8THlHzc457fpNzrhQw
5h/4FwmSkZatsg==
-----END CERTIFICATE-----