Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File:                     z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier:          zKbChde7aX3OHaiZnSykHSOS/y+eblOJ3pWPjRLYuWA=
Subject key identifier:   69:74:DE:4D:8A:6B:97:B0:E0:10:1D:5A:BE:20:AB:63:D1:75:CA:E8
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer:       /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial:       01962E995C3205F7CC385341F1E1F898294F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number:          0FBF
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (hash: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=)
                          2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: ocBKbgYWuJI48A9Y6+JDNuDnMHDCDOh4AwVPTTgIizE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:32:05:f7:cc:38:53:41:f1:e1:f8:98:29:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=6974de4d8a6b97b0e0101d5abe20ab63d175cae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:c0:2a:d2:c6:67:41:35:b7:87:67:6f:5c:
                    05:12:e6:cf:3d:07:2e:92:a6:45:3f:ef:b6:88:1a:
                    c0:09:1a:66:30:ef:61:cf:67:e7:e8:76:12:b1:14:
                    d2:18:04:20:6d:58:7d:a5:f1:69:c2:2c:a0:c8:38:
                    ed:00:84:b5:75:6b:54:14:67:90:20:4f:60:96:5a:
                    0e:43:c9:58:ae:ad:2c:db:40:ae:f3:fd:56:2c:46:
                    05:b8:09:b1:43:a6:10:be:a8:71:67:63:7e:a5:5e:
                    4c:d4:84:9b:35:f6:ee:d7:bc:62:75:2a:2c:e0:ac:
                    93:71:c4:04:2c:52:ad:22:2a:86:c8:2e:e9:9d:4b:
                    41:bd:13:cd:c8:38:28:23:50:c6:bb:ad:af:1b:ab:
                    8b:57:aa:0d:e2:8f:23:49:51:84:bb:6c:be:17:34:
                    85:c4:d6:55:70:69:b2:2d:a0:c8:38:02:21:c2:b9:
                    65:0f:9f:ac:f9:93:56:40:75:b1:90:cc:16:4f:23:
                    bd:87:71:b0:11:a4:65:55:04:25:5b:64:c3:6b:de:
                    06:59:1d:1b:ba:e7:48:50:3d:88:7e:fe:41:c1:24:
                    5d:98:2a:0b:65:9d:fc:4c:61:7e:ce:3e:00:46:80:
                    92:21:e8:e2:ef:c1:6e:25:68:e0:00:fa:be:30:8d:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:74:DE:4D:8A:6B:97:B0:E0:10:1D:5A:BE:20:AB:63:D1:75:CA:E8
            X509v3 Authority Key Identifier:
                keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:79:bb:53:6b:d3:6b:13:5b:e0:c9:cf:0c:d0:c1:b3:2f:a2:
         7e:d2:9b:fc:ce:c5:c3:e2:ff:21:22:53:7e:08:c5:37:b5:e2:
         a9:d6:b5:3f:a5:a3:1e:0f:c4:8c:7f:aa:e1:f4:0e:64:35:96:
         06:7b:b9:5a:c8:68:69:e3:ac:01:a2:13:a0:cd:d4:43:56:18:
         a3:b3:81:f1:a9:14:ef:51:7f:12:51:56:34:34:ae:75:8a:39:
         1f:75:ab:39:39:c2:b2:f4:07:52:dc:1b:2b:91:b5:b5:97:21:
         32:d9:56:51:86:b5:aa:11:37:dd:77:4f:e3:c4:4c:5a:58:63:
         4b:92:30:5c:3c:76:4c:b8:86:eb:9f:e4:ea:3d:5e:09:dc:44:
         19:5d:79:7f:e7:22:e5:42:ed:63:54:1c:0b:87:81:c3:2d:d7:
         6d:05:86:37:0a:b6:38:4a:d0:c5:57:c6:6a:78:4f:45:a6:c2:
         9c:5f:d8:7f:59:56:97:33:ec:0e:d6:3c:71:e7:2a:3c:1b:23:
         e3:93:82:fe:e0:62:60:f5:91:04:62:e4:73:dd:ca:ba:eb:9f:
         22:f5:64:8d:93:a0:74:17:bb:cc:b3:31:ee:12:2b:2b:b4:38:
         5c:26:36:c7:04:f2:c7:98:1c:8e:d6:b4:4f:fa:24:fc:b7:8b:
         06:e9:6e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVwyBffMOFNB8eH4mClPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYmEwNDNlMWM0YjUyNDQ3YThlMzY3YmJjMTMwNzUxOWZh
NWZhZTAwHhcNMjUwNDEzMTAwMjA0WhcNMjUwNDE0MTAwMjA0WjAzMTEwLwYDVQQD
Eyg2OTc0ZGU0ZDhhNmI5N2IwZTAxMDFkNWFiZTIwYWI2M2QxNzVjYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtPAKtLGZ0E1t4dnb1wFEubPPQcu
kqZFP++2iBrACRpmMO9hz2fn6HYSsRTSGAQgbVh9pfFpwiygyDjtAIS1dWtUFGeQ
IE9glloOQ8lYrq0s20Cu8/1WLEYFuAmxQ6YQvqhxZ2N+pV5M1ISbNfbu17xidSos
4KyTccQELFKtIiqGyC7pnUtBvRPNyDgoI1DGu62vG6uLV6oN4o8jSVGEu2y+FzSF
xNZVcGmyLaDIOAIhwrllD5+s+ZNWQHWxkMwWTyO9h3GwEaRlVQQlW2TDa94GWR0b
uudIUD2Ifv5BwSRdmCoLZZ38TGF+zj4ARoCSIeji78FuJWjgAPq+MI0powIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl03k2Ka5ew4BAdWr4gq2PRdcroMB8GA1UdIwQY
MBaAFM+6BD4cS1JEeo42e7wTB1GfpfrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYt
YzBjYTgwYTA1ZTJhLzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYtYzBjYTgwYTA1ZTJh
LzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXm7U2vT
axNb4MnPDNDBsy+iftKb/M7Fw+L/ISJTfgjFN7Xiqda1P6WjHg/EjH+q4fQOZDWW
Bnu5WshoaeOsAaIToM3UQ1YYo7OB8akU71F/ElFWNDSudYo5H3WrOTnCsvQHUtwb
K5G1tZchMtlWUYa1qhE33XdP48RMWlhjS5IwXDx2TLiG65/k6j1eCdxEGV15f+ci
5ULtY1QcC4eBwy3XbQWGNwq2OErQxVfGanhPRabCnF/Yf1lWlzPsDtY8cecqPBsj
45OC/uBiYPWRBGLkc93KuuufIvVkjZOgdBe7zLMx7hIrK7Q4XCY2xwTyx5gcjta0
T/ok/LeLBuluJw==
-----END CERTIFICATE-----