Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File:                     cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier:          d/AFFwMtT9AtxYDflupDKrXffwzbyeNHrNCAhuLx+8I=
Subject key identifier:   30:07:31:C2:A6:A8:38:D9:91:2C:D6:B0:AB:14:D7:B3:4D:2B:BE:05
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer:       /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial:       01962F3D4E08D5B62607EF41E59D14CCCAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number:          05AD
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: iKnoy58l0DvnBUDXmrYqF25zKSstLzad0OPtrsljHdg=)
                          2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4e:08:d5:b6:26:07:ef:41:e5:9d:14:cc:ca:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=300731c2a6a838d9912cd6b0ab14d7b34d2bbe05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ce:1d:52:40:11:0d:24:5c:19:17:36:76:49:
                    04:30:c3:4a:15:75:25:70:37:64:2f:2f:26:89:18:
                    26:11:29:81:8c:35:10:ea:7c:a3:1d:1b:3b:ca:8b:
                    4f:a0:84:33:ec:a6:81:b1:6e:19:9e:2c:6f:2b:45:
                    c6:db:62:8d:88:d2:20:2b:3e:b4:f9:12:75:55:f4:
                    a8:78:ec:a3:9c:bc:3d:5c:2f:e1:96:65:f3:7d:6b:
                    85:3e:42:9f:83:e9:01:33:68:bb:67:0a:02:7a:8b:
                    25:06:0b:52:78:06:bb:cb:27:e6:57:9e:3e:4e:0a:
                    f1:70:b1:7f:83:cf:d3:ca:8e:22:e0:d3:98:de:52:
                    c5:36:3a:b7:f3:47:43:0b:a4:e2:ed:d8:c8:f1:c9:
                    de:a1:34:e3:5c:3a:74:9e:0f:3d:b3:a7:50:9c:cb:
                    95:83:af:8c:3a:8d:0f:c4:d9:07:32:4a:a9:8e:ef:
                    cf:fe:64:7f:64:2a:77:45:bc:c7:1c:7e:3a:09:66:
                    da:88:da:75:94:06:1c:a0:82:81:5d:32:60:da:95:
                    5b:bc:f2:f9:91:44:ad:8f:5d:5f:7a:90:38:c2:90:
                    4b:20:ea:8b:8b:d1:6b:bf:fb:a8:6b:2e:0b:e1:24:
                    c9:c9:e1:14:eb:0f:ac:5f:55:de:ec:52:eb:17:a0:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:31:C2:A6:A8:38:D9:91:2C:D6:B0:AB:14:D7:B3:4D:2B:BE:05
            X509v3 Authority Key Identifier:
                keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:df:e1:c8:7c:d4:38:b2:39:6f:c5:4d:da:ec:ec:52:bf:
         68:3e:15:57:d3:fc:db:71:87:c0:7e:70:df:72:88:d9:1a:6a:
         cc:50:61:97:3a:b7:db:23:22:a2:cb:43:d3:c9:0c:22:ed:6b:
         49:19:76:c4:51:e7:8b:93:4d:78:99:32:27:ca:89:36:c8:fe:
         31:86:33:04:dd:08:0c:13:fe:01:38:f3:c9:3b:e9:24:9d:6c:
         a9:aa:69:52:a6:4b:98:cc:ea:40:0a:9b:35:f3:02:b1:bb:9b:
         f5:38:7b:20:69:43:35:7a:77:4b:c5:5b:7a:cc:89:9d:c0:89:
         db:fc:17:b2:9d:77:bc:57:dd:51:b1:7b:a9:c1:a8:0a:3c:9d:
         a7:fd:5a:58:4d:d4:db:ca:82:f1:76:61:ab:e1:72:46:42:56:
         d7:66:5d:72:ac:85:ae:a8:47:3a:d5:b4:30:d8:37:03:ec:6e:
         da:ea:80:11:6c:e6:37:7b:bb:a3:54:c7:36:ae:7a:4f:9c:72:
         9f:e7:de:22:6c:9c:5e:b6:f3:8e:32:06:4a:97:e1:a9:1a:0f:
         8d:ca:24:84:80:16:1a:14:44:3c:00:c6:b8:26:be:ca:27:eb:
         df:7f:ba:0f:67:b1:ab:9e:06:ea:e9:d6:ea:4d:a5:b3:95:19:
         d2:2f:84:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPU4I1bYmB+9B5Z0UzMqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTg2NzMxOTI1YmU4NTUxYTUzMDkxYWZlNmQwOTcyZGZh
MzgwN2UwHhcNMjUwNDEzMTMwMTA4WhcNMjUwNDE0MTMwMTA4WjAzMTEwLwYDVQQD
EygzMDA3MzFjMmE2YTgzOGQ5OTEyY2Q2YjBhYjE0ZDdiMzRkMmJiZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs4dUkARDSRcGRc2dkkEMMNKFXUl
cDdkLy8miRgmESmBjDUQ6nyjHRs7yotPoIQz7KaBsW4ZnixvK0XG22KNiNIgKz60
+RJ1VfSoeOyjnLw9XC/hlmXzfWuFPkKfg+kBM2i7ZwoCeoslBgtSeAa7yyfmV54+
TgrxcLF/g8/Tyo4i4NOY3lLFNjq380dDC6Ti7djI8cneoTTjXDp0ng89s6dQnMuV
g6+MOo0PxNkHMkqpju/P/mR/ZCp3RbzHHH46CWbaiNp1lAYcoIKBXTJg2pVbvPL5
kUStj11fepA4wpBLIOqLi9Frv/uoay4L4STJyeEU6w+sX1Xe7FLrF6DK6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAHMcKmqDjZkSzWsKsU17NNK74FMB8GA1UdIwQY
MBaAFHGYZzGSW+hVGlMJGv5tCXLfo4B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmIt
ZTBkNTc2YTU0NTBlLzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmItZTBkNTc2YTU0NTBl
LzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbU/f4ch8
1DiyOW/FTdrs7FK/aD4VV9P823GHwH5w33KI2RpqzFBhlzq32yMiostD08kMIu1r
SRl2xFHni5NNeJkyJ8qJNsj+MYYzBN0IDBP+ATjzyTvpJJ1sqappUqZLmMzqQAqb
NfMCsbub9Th7IGlDNXp3S8VbesyJncCJ2/wXsp13vFfdUbF7qcGoCjydp/1aWE3U
28qC8XZhq+FyRkJW12ZdcqyFrqhHOtW0MNg3A+xu2uqAEWzmN3u7o1THNq56T5xy
n+feImycXrbzjjIGSpfhqRoPjcokhIAWGhREPADGuCa+yifr33+6D2exq54G6unW
6k2ls5UZ0i+Emg==
-----END CERTIFICATE-----