Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File:                     zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier:          BZJLxhISF0z4ArCL1nLxzb6AVxSXNeBGB1BAsR37hGA=
Subject key identifier:   AB:48:8C:BE:E9:C2:33:58:F8:EC:DE:40:66:A9:3D:A1:A0:17:81:D7
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer:       /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial:       01962E61DF67DD7AF57CF3C46AEB2841254C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number:          065A
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=)
                          2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: prE7XH2hm0+CuOOKy6dCQP8k8g79bK+NtAXDgZ4ewAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:df:67:dd:7a:f5:7c:f3:c4:6a:eb:28:41:25:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=ab488cbee9c23358f8ecde4066a93da1a01781d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:3b:a9:79:93:a2:6c:28:47:00:e1:1e:75:
                    96:db:fa:76:0e:ac:5d:6e:2c:bf:c2:04:26:0e:5a:
                    da:f3:5e:f2:40:a9:b8:f9:cd:3f:5e:d0:22:61:4a:
                    f5:5d:03:ee:d4:71:a9:45:ae:c2:b3:f5:40:d8:99:
                    ed:5a:49:37:8d:40:05:71:67:05:7e:09:d7:92:30:
                    04:cd:bc:24:bc:f2:99:2a:ea:af:89:4b:34:50:99:
                    e2:65:cd:c4:91:ad:b9:6f:79:4d:7a:f2:88:b8:f7:
                    dd:2f:37:81:2d:37:6e:dc:5e:fc:ab:cc:ee:b6:f7:
                    5b:2d:e8:e1:fd:d4:b3:09:15:76:fd:10:91:2f:bc:
                    e8:27:84:0f:db:36:a5:2f:61:43:c2:1d:ad:c5:5b:
                    af:81:da:f7:61:f7:a1:e7:1d:2e:2b:17:73:5f:6a:
                    b9:cb:a1:ad:79:e0:ec:42:6f:20:54:85:68:15:96:
                    2c:1d:af:df:78:de:25:02:4a:d3:40:38:d8:4e:ff:
                    31:74:15:f6:38:bc:a4:08:84:a5:56:24:90:19:dc:
                    e0:f0:0d:d6:33:d7:c5:67:74:34:8e:e0:e5:67:e0:
                    60:32:e3:d8:a1:b6:fd:06:b5:fa:4c:d4:84:e0:a8:
                    b3:18:32:e0:09:1b:27:d1:be:a6:bb:9f:e8:ad:5e:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:48:8C:BE:E9:C2:33:58:F8:EC:DE:40:66:A9:3D:A1:A0:17:81:D7
            X509v3 Authority Key Identifier:
                keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:5f:b0:b1:3c:f1:81:d1:97:70:85:fd:84:37:a6:7c:d1:
         ae:69:50:e1:3e:7d:65:94:2c:cb:fd:aa:e7:e3:6c:dc:cf:f7:
         2b:90:14:3a:d1:c6:5e:0b:a9:5d:50:16:54:a1:31:9c:e2:79:
         b9:3a:3b:18:a2:bf:90:02:a0:06:f4:1e:b6:00:01:46:fc:7d:
         98:ff:ca:d4:3f:76:ce:41:97:27:6f:94:5b:13:d3:58:39:08:
         c6:2b:0e:0a:c2:53:0d:39:81:1c:df:34:8d:bd:b2:f0:48:60:
         0f:c2:94:34:b6:2c:89:47:e8:31:cf:06:14:22:9c:0b:19:30:
         7d:3c:64:62:d8:76:13:d0:18:71:f0:b2:8e:3b:d6:41:a5:a9:
         6f:34:dc:b8:42:73:fc:23:d5:0c:7a:99:42:9d:0b:c7:6d:6e:
         c7:3e:04:e0:cc:2a:48:c1:1a:a5:a4:5d:2b:d9:9e:42:82:7f:
         8b:86:80:15:04:d4:f4:ef:3e:4e:a9:a4:7f:9f:08:c3:a0:44:
         65:3f:3d:93:e7:b3:a4:a2:78:27:a5:c1:99:af:ec:fa:60:bf:
         53:67:4c:5c:5e:ca:36:7f:21:0c:cc:b8:d7:07:ea:78:81:bb:
         e7:4e:90:92:5a:32:42:2a:73:34:2f:ec:f9:d3:96:92:64:19:
         b9:93:3a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYd9n3Xr1fPPEausoQSVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy
MjQxODkwHhcNMjUwNDEzMDkwMTI4WhcNMjUwNDE0MDkwMTI4WjAzMTEwLwYDVQQD
EyhhYjQ4OGNiZWU5YzIzMzU4ZjhlY2RlNDA2NmE5M2RhMWEwMTc4MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tw7qXmTomwoRwDhHnWW2/p2Dqxd
biy/wgQmDlra817yQKm4+c0/XtAiYUr1XQPu1HGpRa7Cs/VA2JntWkk3jUAFcWcF
fgnXkjAEzbwkvPKZKuqviUs0UJniZc3Eka25b3lNevKIuPfdLzeBLTdu3F78q8zu
tvdbLejh/dSzCRV2/RCRL7zoJ4QP2zalL2FDwh2txVuvgdr3Yfeh5x0uKxdzX2q5
y6GteeDsQm8gVIVoFZYsHa/feN4lAkrTQDjYTv8xdBX2OLykCISlViSQGdzg8A3W
M9fFZ3Q0juDlZ+BgMuPYobb9BrX6TNSE4KizGDLgCRsn0b6mu5/orV5omwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtIjL7pwjNY+OzeQGapPaGgF4HXMB8GA1UdIwQY
MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt
NjM1OWY5MmUxZDJmLzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm
LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/lfsLE8
8YHRl3CF/YQ3pnzRrmlQ4T59ZZQsy/2q5+Ns3M/3K5AUOtHGXgupXVAWVKExnOJ5
uTo7GKK/kAKgBvQetgABRvx9mP/K1D92zkGXJ2+UWxPTWDkIxisOCsJTDTmBHN80
jb2y8EhgD8KUNLYsiUfoMc8GFCKcCxkwfTxkYth2E9AYcfCyjjvWQaWpbzTcuEJz
/CPVDHqZQp0Lx21uxz4E4MwqSMEapaRdK9meQoJ/i4aAFQTU9O8+Tqmkf58Iw6BE
ZT89k+ezpKJ4J6XBma/s+mC/U2dMXF7KNn8hDMy41wfqeIG7506QkloyQipzNC/s
+dOWkmQZuZM6PA==
-----END CERTIFICATE-----