Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File:                     1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier:          IiZ6rQfc4fTBqIh+ji8GYJR1amXIaoCod7xRi8i0gGs=
Subject key identifier:   0E:69:EC:AA:03:85:02:40:B2:99:CB:5F:AB:28:B7:75:5E:03:E2:2C
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer:       /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial:       01962ECF93350C899459431CAECE0AC67E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number:          0DBF
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: VJHlDKSDiPPqZXRvQcB/D27BHloEhX2DKguitorPn2s=)
                          2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:93:35:0c:89:94:59:43:1c:ae:ce:0a:c6:7e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=0e69ecaa03850240b299cb5fab28b7755e03e22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:78:38:ba:1a:f9:c6:a5:37:6c:97:f9:a1:
                    e4:94:a0:6a:e0:4d:10:7c:d0:72:c6:e6:39:71:71:
                    3c:6a:60:f5:7f:9b:6f:e7:de:95:84:99:b1:4e:1c:
                    5b:84:f3:7b:c1:34:dd:89:a3:fb:e4:47:6b:9b:9a:
                    92:88:83:3d:26:b3:80:ba:7c:8d:19:f0:b4:8d:7e:
                    06:94:50:06:15:25:fd:b4:36:2a:3d:43:f4:66:c9:
                    9b:08:76:df:bd:ca:39:03:7b:87:d7:67:5d:6a:01:
                    2e:46:83:db:65:10:72:24:2e:b7:b6:9c:f4:8c:71:
                    08:a7:7c:f4:e7:58:77:55:3a:e5:55:34:5d:2e:61:
                    81:24:f7:74:4a:f3:3d:76:d7:97:4e:5c:b0:6a:9c:
                    c4:14:28:8a:0b:66:2e:8e:3d:e4:3c:fe:9b:42:6a:
                    3c:0d:50:c8:51:ac:df:08:20:dd:aa:41:13:d0:fd:
                    49:c3:c8:93:87:7e:e2:2d:a3:d6:dd:43:c2:a4:0a:
                    06:00:f3:61:be:c9:c3:84:93:02:30:d9:2b:f0:60:
                    54:1e:f0:ce:b7:b5:19:55:f6:b4:a8:cc:0e:d6:f3:
                    bf:da:cd:81:31:13:3e:c3:ba:83:36:9a:f1:1f:79:
                    38:f0:bc:dd:fb:0d:4f:4b:fe:31:41:2a:af:9d:6f:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:69:EC:AA:03:85:02:40:B2:99:CB:5F:AB:28:B7:75:5E:03:E2:2C
            X509v3 Authority Key Identifier:
                keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7c:d9:d0:a1:56:4a:08:b3:50:7f:5c:73:46:72:9f:80:ea:
         11:ad:0d:13:69:b7:ca:09:58:f8:16:fa:9f:82:cd:6a:6e:28:
         e9:9c:4c:49:42:c9:80:fd:c2:66:8d:14:79:4d:86:fe:d2:e6:
         d0:73:6b:9f:3a:e5:52:30:5d:83:c0:70:25:03:5e:6d:a1:7b:
         f5:8e:43:3f:03:d9:1c:29:aa:b6:9b:b6:66:2a:95:45:6f:bb:
         4d:4c:11:48:04:fe:83:64:ad:07:6d:3e:32:48:b0:ac:c6:dd:
         12:a2:4a:62:12:64:85:4e:42:89:e8:b6:79:32:98:e8:2f:95:
         51:a2:a8:06:9e:67:f5:9a:33:c5:b3:91:d4:3e:04:44:f0:f4:
         66:ba:4e:94:77:9f:4a:d2:0d:bf:f0:88:1e:b6:8e:d5:c6:05:
         1b:2f:16:24:7f:ba:57:1f:78:a7:ef:77:07:15:c8:5e:96:89:
         6b:ca:1d:0d:29:6f:a8:4d:f9:ac:dd:c6:21:87:81:73:1f:6d:
         b9:69:7f:4f:72:13:63:75:89:ef:2c:bf:43:72:04:4c:37:4f:
         c3:d5:5f:18:f6:c6:8a:a7:a5:a2:fc:45:e9:c2:23:d9:70:6b:
         a3:2d:7b:bf:20:1e:74:9d:19:7c:8f:f7:cf:68:a1:52:32:18:
         2f:a4:c4:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5M1DImUWUMcrs4Kxn5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZmFmM2EzZjIxNDBjYjdjNmZmMGNkNmE3ZjU2MTRhMDVl
NGU0NjcwHhcNMjUwNDEzMTEwMTE3WhcNMjUwNDE0MTEwMTE3WjAzMTEwLwYDVQQD
EygwZTY5ZWNhYTAzODUwMjQwYjI5OWNiNWZhYjI4Yjc3NTVlMDNlMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2x4OLoa+calN2yX+aHklKBq4E0Q
fNByxuY5cXE8amD1f5tv596VhJmxThxbhPN7wTTdiaP75Edrm5qSiIM9JrOAunyN
GfC0jX4GlFAGFSX9tDYqPUP0ZsmbCHbfvco5A3uH12ddagEuRoPbZRByJC63tpz0
jHEIp3z051h3VTrlVTRdLmGBJPd0SvM9dteXTlywapzEFCiKC2Yujj3kPP6bQmo8
DVDIUazfCCDdqkET0P1Jw8iTh37iLaPW3UPCpAoGAPNhvsnDhJMCMNkr8GBUHvDO
t7UZVfa0qMwO1vO/2s2BMRM+w7qDNprxH3k48Lzd+w1PS/4xQSqvnW8tBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5p7KoDhQJAspnLX6sot3VeA+IsMB8GA1UdIwQY
MBaAFNf686PyFAy3xv8M1qf1YUoF5ORnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYt
ZjM3OTdjZmQ2NWFlLzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYtZjM3OTdjZmQ2NWFl
LzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXzZ0KFW
SgizUH9cc0Zyn4DqEa0NE2m3yglY+Bb6n4LNam4o6ZxMSULJgP3CZo0UeU2G/tLm
0HNrnzrlUjBdg8BwJQNebaF79Y5DPwPZHCmqtpu2ZiqVRW+7TUwRSAT+g2StB20+
MkiwrMbdEqJKYhJkhU5Ciei2eTKY6C+VUaKoBp5n9ZozxbOR1D4ERPD0ZrpOlHef
StINv/CIHraO1cYFGy8WJH+6Vx94p+93BxXIXpaJa8odDSlvqE35rN3GIYeBcx9t
uWl/T3ITY3WJ7yy/Q3IETDdPw9VfGPbGiqelovxF6cIj2XBroy17vyAedJ0ZfI/3
z2ihUjIYL6TEnA==
-----END CERTIFICATE-----