Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File:                     pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier:          zMQP01lDhUrSC2FLLWVLezgZbD6BOBpdzw9oZkV53FE=
Subject key identifier:   CE:39:E4:E8:40:70:59:5C:7B:1C:C6:2A:60:F3:9B:E1:1C:29:08:F6
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer:       /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial:       01962ECFB5FD6A036CFC9EC14C0A14FF855C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number:          07CC
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
                          2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: vdu44lG9csSLkQoiPZ8+DzxelK3mC4g9fAgRo5VZzK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b5:fd:6a:03:6c:fc:9e:c1:4c:0a:14:ff:85:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=ce39e4e84070595c7b1cc62a60f39be11c2908f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:8e:82:e2:50:ee:5e:42:da:09:41:0b:ea:
                    4c:5b:1c:47:cb:a8:48:ee:6c:e8:04:88:12:d2:c7:
                    6a:db:e7:96:49:a7:1c:a7:93:b5:7b:ed:ae:88:ca:
                    f8:35:9a:42:3a:a8:15:33:8f:f4:6c:e1:d9:16:68:
                    42:bd:40:f6:90:1c:40:42:5a:5e:60:5b:0f:39:e1:
                    8e:8a:62:ea:c3:fa:93:c9:3d:87:f5:1f:55:bf:2a:
                    f4:ce:3a:12:d9:49:02:3d:57:75:1e:cd:2b:d5:6b:
                    0e:fa:0b:d5:7c:25:d6:b9:00:69:31:d2:67:d1:d6:
                    14:15:26:42:43:05:c3:89:94:69:2c:a0:d3:52:02:
                    be:22:15:d5:6b:87:27:8c:46:b2:d7:0c:5c:51:b3:
                    4f:2e:eb:e3:63:83:6d:40:f9:e7:69:67:4f:c5:13:
                    c1:a0:05:79:d2:4e:04:23:6b:67:a4:81:7c:55:f2:
                    1b:35:aa:93:fe:e8:af:db:a3:3e:96:7f:b8:d9:f2:
                    30:3f:43:9f:13:fd:87:eb:88:56:ee:20:db:6d:ca:
                    ea:7c:b4:f8:4e:e8:fe:c1:b6:34:6f:4c:9d:80:1f:
                    41:f6:1b:04:05:a2:3e:3e:9a:8e:ee:6a:c8:a5:d6:
                    d4:c2:72:8e:87:60:65:c6:19:fe:6f:c1:f9:ae:dd:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:39:E4:E8:40:70:59:5C:7B:1C:C6:2A:60:F3:9B:E1:1C:29:08:F6
            X509v3 Authority Key Identifier:
                keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cc:be:a4:b4:3a:f4:83:22:ec:39:f3:2b:82:0f:31:a1:c0:
         d8:f9:af:0a:8e:e9:39:8b:c4:be:b8:a9:b6:08:21:b3:f0:63:
         71:da:63:3d:9f:71:05:79:93:de:1b:a1:75:e3:50:2c:7a:df:
         14:09:80:30:5b:d8:5b:7f:cf:61:9d:0c:9b:45:da:b5:98:bd:
         8b:53:85:ba:6c:b8:3a:c7:7e:2a:f3:a9:37:07:20:31:97:93:
         0a:8d:f6:d8:63:28:ee:02:fb:8c:e0:d4:1f:8e:a1:21:78:f8:
         21:28:ea:10:89:3c:a4:a9:fe:07:a6:d4:d4:b7:1a:e1:45:fc:
         58:39:a6:3f:36:d1:15:82:bd:61:3d:78:91:87:cf:7a:ed:64:
         27:60:19:f6:cc:a8:ee:28:0e:7d:1b:77:31:9b:14:13:c8:44:
         89:37:be:e3:12:87:5b:0d:ac:66:41:eb:cd:8a:23:12:2a:c7:
         a4:eb:d3:2f:5d:1f:43:85:bc:77:4f:a8:a2:2d:0b:80:0b:74:
         f3:04:e8:3c:99:b8:1c:0a:76:6a:c7:bc:e2:19:a8:bb:5f:5b:
         b8:10:c0:e4:73:07:b8:4c:7e:e1:4a:4c:06:c9:83:1a:d6:00:
         60:e6:94:2a:b0:b8:48:73:7e:fe:57:75:f4:55:5d:08:38:34:
         51:09:e3:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7X9agNs/J7BTAoU/4VcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj
Yzg3OGEwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
EyhjZTM5ZTRlODQwNzA1OTVjN2IxY2M2MmE2MGYzOWJlMTFjMjkwOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQWOguJQ7l5C2glBC+pMWxxHy6hI
7mzoBIgS0sdq2+eWSaccp5O1e+2uiMr4NZpCOqgVM4/0bOHZFmhCvUD2kBxAQlpe
YFsPOeGOimLqw/qTyT2H9R9Vvyr0zjoS2UkCPVd1Hs0r1WsO+gvVfCXWuQBpMdJn
0dYUFSZCQwXDiZRpLKDTUgK+IhXVa4cnjEay1wxcUbNPLuvjY4NtQPnnaWdPxRPB
oAV50k4EI2tnpIF8VfIbNaqT/uiv26M+ln+42fIwP0OfE/2H64hW7iDbbcrqfLT4
Tuj+wbY0b0ydgB9B9hsEBaI+PpqO7mrIpdbUwnKOh2Blxhn+b8H5rt1ZiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM455OhAcFlcexzGKmDzm+EcKQj2MB8GA1UdIwQY
MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt
MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk
LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcy+pLQ6
9IMi7DnzK4IPMaHA2PmvCo7pOYvEvriptgghs/BjcdpjPZ9xBXmT3huhdeNQLHrf
FAmAMFvYW3/PYZ0Mm0XatZi9i1OFumy4Osd+KvOpNwcgMZeTCo322GMo7gL7jODU
H46hIXj4ISjqEIk8pKn+B6bU1Lca4UX8WDmmPzbRFYK9YT14kYfPeu1kJ2AZ9syo
7igOfRt3MZsUE8hEiTe+4xKHWw2sZkHrzYojEirHpOvTL10fQ4W8d0+ooi0LgAt0
8wToPJm4HAp2ase84hmou19buBDA5HMHuEx+4UpMBsmDGtYAYOaUKrC4SHN+/ld1
9FVdCDg0UQnjOA==
-----END CERTIFICATE-----