Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File:                     zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier:          528Bgxmk+WiXKbtQfiL0rpBt2cq4+50V8c5CXQptxHc=
Subject key identifier:   B7:CF:62:88:56:FB:21:FF:24:27:5D:11:79:F1:F4:FE:F4:91:B9:AC
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer:       /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial:       01962F3DB93A4E1E21B20A716F7C3928E0A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number:          0F74
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=)
                          2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: IBHwJbLJwy+3HGKcBUm6YVfAtRszcBFDlgEXLF7B7yI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:3a:4e:1e:21:b2:0a:71:6f:7c:39:28:e0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=b7cf628856fb21ff24275d1179f1f4fef491b9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:ee:b4:ed:df:25:85:9e:81:56:ff:bd:7e:
                    3c:34:c9:2b:67:8b:1a:99:66:89:4c:76:38:86:4e:
                    73:57:89:6e:e9:fc:a3:6c:73:61:e9:57:72:1a:0a:
                    6b:d0:db:42:67:bc:79:32:57:db:54:62:98:5e:67:
                    52:74:5b:46:08:bb:eb:9f:22:69:69:34:a1:da:d1:
                    08:aa:1f:85:d3:68:ae:39:2e:ee:e3:f1:76:b2:75:
                    4c:7d:59:c9:bc:6a:7c:ba:f7:4f:1f:aa:37:ae:4c:
                    2a:58:7b:3b:c8:1c:d3:98:f8:13:5c:3a:66:8e:57:
                    9a:23:60:ce:aa:a3:0f:4f:7e:2e:85:47:08:ca:0b:
                    fe:c0:13:33:ae:0d:30:f6:f5:c1:05:2e:e8:01:c5:
                    96:eb:94:f9:09:3c:56:ff:0c:7c:24:db:7e:ee:b3:
                    88:5d:22:f8:c1:f5:a0:1f:11:a5:95:7b:7f:42:9c:
                    9c:4b:2b:9f:da:56:ad:8d:47:4c:ee:e0:1a:ca:cf:
                    d2:50:7d:93:11:97:71:12:01:f1:46:40:5b:1d:df:
                    3a:ee:0e:14:21:27:c9:51:ad:ea:df:b5:80:85:0d:
                    58:d6:bf:0a:54:68:ef:62:a1:76:c8:ce:0e:9a:3b:
                    ae:2f:1a:5b:11:cc:6a:3e:89:5d:82:1b:37:26:5d:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CF:62:88:56:FB:21:FF:24:27:5D:11:79:F1:F4:FE:F4:91:B9:AC
            X509v3 Authority Key Identifier:
                keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d5:84:a0:6f:66:35:f0:cf:4d:bc:21:c6:e8:5a:81:70:8a:
         6f:e4:87:38:12:da:64:31:ec:7e:92:8f:9c:06:d5:b4:93:a9:
         26:38:6e:0b:3b:ff:6b:aa:16:04:54:25:05:8d:ac:ba:82:90:
         43:e8:59:2b:42:64:e2:bc:37:40:88:ee:57:2b:8e:a4:68:1c:
         b7:d8:b7:28:59:94:97:6d:2c:26:45:2c:cf:0b:5e:5a:04:f5:
         32:25:40:26:25:69:9f:9e:9a:e1:af:78:ee:96:4c:c4:66:7e:
         6b:eb:88:7f:df:6c:c4:cf:e8:f8:61:ba:2a:b1:c0:0a:3b:ab:
         ff:10:a0:97:47:77:82:00:41:99:b5:aa:9e:fb:f5:a6:67:68:
         36:a7:a9:38:e4:cc:2e:67:2d:e4:21:1e:47:f7:15:a2:94:52:
         10:ee:5b:e6:d6:0d:7b:63:0e:2e:2c:a0:24:8e:00:59:09:d6:
         6a:43:64:5b:e1:83:5e:90:e8:31:4e:b1:45:35:80:9d:ad:94:
         14:2f:23:52:a3:a8:f1:5f:55:a1:e6:f8:19:6a:7c:f2:6c:a7:
         3c:9b:f0:9e:0c:03:5a:86:f0:8f:7f:cc:b7:17:4a:b8:d4:99:
         0b:37:31:15:f4:6b:4a:ad:66:5c:4e:1e:78:34:96:17:1d:01:
         84:f5:bd:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbk6Th4hsgpxb3w5KOCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTM2ZTAxZmZhZjg1M2RiYjJhNWNmY2ZlNWQxYjY3ZDIw
YzIwYjUwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
EyhiN2NmNjI4ODU2ZmIyMWZmMjQyNzVkMTE3OWYxZjRmZWY0OTFiOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4/utO3fJYWegVb/vX48NMkrZ4sa
mWaJTHY4hk5zV4lu6fyjbHNh6VdyGgpr0NtCZ7x5MlfbVGKYXmdSdFtGCLvrnyJp
aTSh2tEIqh+F02iuOS7u4/F2snVMfVnJvGp8uvdPH6o3rkwqWHs7yBzTmPgTXDpm
jleaI2DOqqMPT34uhUcIygv+wBMzrg0w9vXBBS7oAcWW65T5CTxW/wx8JNt+7rOI
XSL4wfWgHxGllXt/QpycSyuf2latjUdM7uAays/SUH2TEZdxEgHxRkBbHd867g4U
ISfJUa3q37WAhQ1Y1r8KVGjvYqF2yM4OmjuuLxpbEcxqPoldghs3Jl1sewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfPYohW+yH/JCddEXnx9P70kbmsMB8GA1UdIwQY
MBaAFM8TbgH/r4U9uypc/P5dG2fSDCC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYt
NjVkYmE2M2IxYTgyLzEvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYtNjVkYmE2M2IxYTgy
LzEvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdWEoG9m
NfDPTbwhxuhagXCKb+SHOBLaZDHsfpKPnAbVtJOpJjhuCzv/a6oWBFQlBY2suoKQ
Q+hZK0Jk4rw3QIjuVyuOpGgct9i3KFmUl20sJkUszwteWgT1MiVAJiVpn56a4a94
7pZMxGZ+a+uIf99sxM/o+GG6KrHACjur/xCgl0d3ggBBmbWqnvv1pmdoNqepOOTM
Lmct5CEeR/cVopRSEO5b5tYNe2MOLiygJI4AWQnWakNkW+GDXpDoMU6xRTWAna2U
FC8jUqOo8V9Voeb4GWp88mynPJvwngwDWobwj3/MtxdKuNSZCzcxFfRrSq1mXE4e
eDSWFx0BhPW9/A==
-----END CERTIFICATE-----