Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File:                     Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier:          Bem5+QZ4Bt2RfiM+SzZnscD86jVKRoEyk8jAtlFABsE=
Subject key identifier:   A7:BE:E4:A6:6F:6D:17:85:CA:B0:A9:D5:92:69:BA:93:AE:9E:B5:0F
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer:       /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial:       01962E61E90DAA171CAF77029A572DEF0F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number:          1518
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: Cd7cyChZhy9mMNvd0Nth-NseLV4.roa (hash: TLZJfbst8zmWkSuiSURO6a7dmcirf5v9QS7cBAmoefs=)
                          2: Fh6CLt6xczOHHemrrM4bMN7qnwo.roa (hash: hvSyiuRPH2Z9ZscYXJ/Gadi12dcqRqXvTeKlVkuzaPk=)
                          3: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=)
                          4: I1XoXbCRQDzU94nytFVYdEpxlsY.roa (hash: x9Wg/IuXvM9pdB1fOvM4EOxkcoralT2x+DA/73JOviQ=)
                          5: MzbBL-KB16aNaaOWCdz_zlq5-Sk.roa (hash: EojRlQEsQxjmCahz4GI2JRZbd+U9Ggw+WBgDfZNnVQ8=)
                          6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: YmttpMvF1Dqf7dNKgrvS5IvNmUt3mb7TX649pGedNfA=)
                          7: bv4tcwtbryxLyYhV6XTH39AB-vY.roa (hash: Xi6BhRdiZvjQrRH2s9UR2MhITflZG1sNqXTRu0wxscs=)
                          8: fN1BDsW9C5C9Bqke6ry_fePDBlM.roa (hash: 3fdGseWrPkjGKUusjcENuIavE0xvyg7utbXjROm1P3E=)
                          9: mo5JK6v6R0SlbhL9bpJDUSnP2o0.roa (hash: 727Fnu3PPIa8ngtI0/OvrhrO6bIcmHl3XFKfTHPbhNk=)
                          10: pi020TsW0QReka4EU_X98LZY30k.roa (hash: gf5U/BiHkb9/XX1VONoBqkzZ+yxHvJslptQx9dyXOBA=)
                          11: qDEIt49JLY1H1gFAAbmQ8aaWUYI.roa (hash: xIlEw0FiUYRvplwXdUlAk/D6XIj861qLM1Kz3WS/HKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:0d:aa:17:1c:af:77:02:9a:57:2d:ef:0f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66df7742890173927935206a28efbf48123e787c
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=a7bee4a66f6d1785cab0a9d59269ba93ae9eb50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:34:cf:e6:2e:c0:b8:01:e7:5b:df:32:b5:
                    e0:fd:0b:0a:7c:42:cd:fd:4e:11:79:cc:3c:4e:66:
                    78:f7:72:f9:5e:bc:9e:7a:1b:8e:b7:96:73:a5:73:
                    67:e2:c8:62:55:48:3d:69:5e:b4:c3:02:e7:af:54:
                    a4:85:9d:4a:9c:5a:52:73:4d:8c:0a:25:47:1d:eb:
                    88:87:2a:30:ec:1c:4e:b1:17:17:6c:e7:e1:00:b2:
                    eb:35:fd:5d:5b:5d:70:8d:3a:0d:03:67:2c:7b:64:
                    80:01:79:f7:8b:19:11:41:e9:e4:e7:f5:ef:eb:eb:
                    91:fa:9e:f4:fb:8a:a0:de:c2:59:ca:7b:3d:24:80:
                    30:d4:77:86:36:b6:3e:f1:41:86:4d:af:d3:67:23:
                    5a:1a:df:5a:05:72:ed:5e:38:7d:e6:e1:5c:24:6e:
                    89:5f:60:4d:99:8a:75:88:f1:4f:f9:33:08:23:24:
                    3e:b4:95:4a:60:42:f4:96:05:a9:b7:ba:54:59:7b:
                    df:9b:d2:a1:83:43:46:14:5b:3a:f8:70:72:1d:6f:
                    c7:d3:9c:e6:e5:a1:8a:c4:7f:f4:ff:a3:ab:3b:e9:
                    ca:f3:92:60:9c:ab:20:78:ba:df:bd:03:31:c0:4d:
                    d4:3f:27:3e:70:56:44:1c:9e:c7:2b:ef:8a:68:47:
                    45:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:E4:A6:6F:6D:17:85:CA:B0:A9:D5:92:69:BA:93:AE:9E:B5:0F
            X509v3 Authority Key Identifier:
                keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:62:14:18:b0:25:4d:db:9c:c6:ea:df:1a:40:d3:d7:3b:58:
         5f:69:9b:1b:0a:85:a5:2c:3d:79:89:10:84:19:1c:54:68:a9:
         75:ad:ca:0b:7e:22:a6:53:28:c8:28:da:2b:90:a5:a4:b2:c1:
         bd:69:d7:cc:ae:a4:53:21:3d:95:ac:7d:68:c6:8e:45:7a:50:
         89:5a:31:55:72:3f:32:ec:68:22:a1:40:1a:b6:ae:bd:f4:96:
         2e:2d:d6:80:98:8a:45:f8:b2:c2:70:40:16:ee:fd:80:73:29:
         a1:57:a4:1b:aa:17:d4:10:80:74:0d:9f:37:31:8e:51:c2:c8:
         f6:69:a7:d0:3d:60:7d:1d:11:2b:3f:25:80:b1:db:9f:3d:89:
         1f:1f:8d:94:5f:9f:31:57:0b:1b:f4:a0:88:7e:81:c8:88:94:
         d6:0f:c3:4d:7b:85:2b:a0:b7:42:35:68:41:c3:69:7c:c4:af:
         ca:a9:a6:80:4e:fd:c9:a8:49:4a:59:df:47:5a:ea:a5:cf:51:
         c5:01:98:b1:e7:1e:6b:78:37:45:25:da:ca:d4:e1:d6:8a:f5:
         cb:22:73:09:63:61:6e:39:e9:0a:84:fb:ca:a3:b5:6a:ec:6b:
         b9:26:23:0a:d9:43:62:93:74:7a:36:6a:eb:4c:cc:55:97:3b:
         59:a0:04:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYekNqhccr3cCmlct7w84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
EyhhN2JlZTRhNjZmNmQxNzg1Y2FiMGE5ZDU5MjY5YmE5M2FlOWViNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Q0z+YuwLgB51vfMrXg/QsKfELN
/U4Recw8TmZ493L5XryeehuOt5ZzpXNn4shiVUg9aV60wwLnr1SkhZ1KnFpSc02M
CiVHHeuIhyow7BxOsRcXbOfhALLrNf1dW11wjToNA2cse2SAAXn3ixkRQenk5/Xv
6+uR+p70+4qg3sJZyns9JIAw1HeGNrY+8UGGTa/TZyNaGt9aBXLtXjh95uFcJG6J
X2BNmYp1iPFP+TMIIyQ+tJVKYEL0lgWpt7pUWXvfm9Khg0NGFFs6+HByHW/H05zm
5aGKxH/0/6OrO+nK85JgnKsgeLrfvQMxwE3UPyc+cFZEHJ7HK++KaEdF1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe+5KZvbReFyrCp1ZJpupOunrUPMB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2IUGLAl
TducxurfGkDT1ztYX2mbGwqFpSw9eYkQhBkcVGipda3KC34iplMoyCjaK5ClpLLB
vWnXzK6kUyE9lax9aMaORXpQiVoxVXI/MuxoIqFAGrauvfSWLi3WgJiKRfiywnBA
Fu79gHMpoVekG6oX1BCAdA2fNzGOUcLI9mmn0D1gfR0RKz8lgLHbnz2JHx+NlF+f
MVcLG/SgiH6ByIiU1g/DTXuFK6C3QjVoQcNpfMSvyqmmgE79yahJSlnfR1rqpc9R
xQGYsecea3g3RSXaytTh1or1yyJzCWNhbjnpCoT7yqO1auxruSYjCtlDYpN0ejZq
60zMVZc7WaAEmA==
-----END CERTIFICATE-----