Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File:                     z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier:          VsXAW7R1YVGGmeUsmKBX3ZFAHjTYhERa1nJkVRQRQ2s=
Subject key identifier:   CA:62:71:F3:B1:CA:02:09:75:C8:09:D9:31:55:30:71:13:DA:AB:84
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer:       /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial:       01962F3DDE58FF0168C3B2780908A5FEB094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number:          1034
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=)
                          2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: oU8AEWOwmN/yi3uuTSU6fXUfaSe6mxPPRxfhC4BrOwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:de:58:ff:01:68:c3:b2:78:09:08:a5:fe:b0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=ca6271f3b1ca020975c809d93155307113daab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:9d:93:c3:c7:a0:73:06:84:e9:c3:0b:ef:
                    c9:18:c5:06:e6:4e:70:2e:98:56:7f:02:f9:f4:26:
                    d7:c2:3e:8a:9f:bf:08:a9:a7:89:ae:7f:0d:6e:fb:
                    ed:d7:6d:82:d2:18:89:8f:71:ed:f4:55:0e:a4:6c:
                    7e:a6:94:d3:f1:cb:cf:f1:d3:9b:37:4b:d6:b1:34:
                    4c:a9:5a:47:e1:00:f6:ba:e1:eb:26:7e:d3:f9:c4:
                    f1:28:1b:62:95:22:5f:11:b1:51:53:ef:ad:47:c5:
                    a8:35:08:90:62:07:78:ec:33:42:29:7e:27:06:39:
                    ef:07:5a:84:b7:51:1c:10:3b:48:cc:13:df:d8:67:
                    7b:84:87:1e:a7:17:23:ea:e8:01:ce:52:a2:3f:00:
                    35:6c:6a:7f:37:03:c6:07:10:7f:7d:ff:3c:d1:08:
                    c8:4a:df:e7:1d:c3:f7:19:76:32:10:c2:e8:2c:59:
                    57:00:e6:07:44:c2:f7:77:eb:02:67:df:e4:44:94:
                    dd:0c:f4:a1:2e:62:5d:bc:df:70:ab:82:6d:d7:d5:
                    cc:8c:e2:b5:d2:b7:ca:87:66:d9:09:0f:e9:0d:ef:
                    04:f5:ba:b3:57:59:d8:d5:65:b7:b7:15:67:e4:2c:
                    ca:7f:99:30:6e:c6:b5:d7:f8:31:b3:27:98:5e:01:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:62:71:F3:B1:CA:02:09:75:C8:09:D9:31:55:30:71:13:DA:AB:84
            X509v3 Authority Key Identifier:
                keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1c:3d:53:ff:1b:dc:8a:82:1c:df:a9:b5:67:28:22:11:af:
         fc:38:7d:63:3b:91:ef:d7:bb:10:ad:c5:6d:62:03:a3:c1:58:
         ea:0e:ac:72:b9:ed:06:6c:9f:b6:56:04:31:28:d9:db:dd:d6:
         a0:cc:11:d5:56:60:31:78:18:70:ad:36:51:1a:de:f3:d8:df:
         9a:7b:9e:45:dd:ae:25:a4:9b:40:d2:94:ca:fe:e0:9d:36:d7:
         a2:c1:f3:4c:4f:16:64:76:e3:b6:6a:ac:6c:42:31:b8:3b:6b:
         c8:db:07:dd:c0:83:09:d8:f6:37:b0:74:38:80:a8:eb:a8:c4:
         17:de:77:37:9e:fa:7e:06:02:37:18:ae:5a:0c:a2:0e:16:25:
         b5:57:3e:38:6c:c6:89:3f:48:fb:7b:3b:a9:0e:9b:80:b7:7a:
         00:f9:7f:28:35:6e:a8:b1:c7:88:a8:54:59:68:5e:48:4b:a5:
         4c:65:6c:a1:90:ee:58:c9:4d:da:a6:25:57:3b:b1:06:cb:95:
         0f:0f:3d:d5:a3:c7:6e:18:41:2d:de:c8:70:3b:96:bd:8a:0d:
         67:28:c2:3d:f1:82:a6:dc:19:06:b8:9f:64:2e:05:17:c6:27:
         de:43:7f:31:cf:1b:d3:9b:07:15:25:22:a4:6c:3a:7e:19:83:
         9f:9d:ca:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPd5Y/wFow7J4CQil/rCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODM3NWMzMjFkZWY5MjY1OTgzZTIxOTRkNDBiYTk3YWZl
N2YxY2MwHhcNMjUwNDEzMTMwMTQ1WhcNMjUwNDE0MTMwMTQ1WjAzMTEwLwYDVQQD
EyhjYTYyNzFmM2IxY2EwMjA5NzVjODA5ZDkzMTU1MzA3MTEzZGFhYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvydk8PHoHMGhOnDC+/JGMUG5k5w
LphWfwL59CbXwj6Kn78IqaeJrn8Nbvvt122C0hiJj3Ht9FUOpGx+ppTT8cvP8dOb
N0vWsTRMqVpH4QD2uuHrJn7T+cTxKBtilSJfEbFRU++tR8WoNQiQYgd47DNCKX4n
BjnvB1qEt1EcEDtIzBPf2Gd7hIcepxcj6ugBzlKiPwA1bGp/NwPGBxB/ff880QjI
St/nHcP3GXYyEMLoLFlXAOYHRML3d+sCZ9/kRJTdDPShLmJdvN9wq4Jt19XMjOK1
0rfKh2bZCQ/pDe8E9bqzV1nY1WW3txVn5CzKf5kwbsa11/gxsyeYXgH2LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpicfOxygIJdcgJ2TFVMHET2quEMB8GA1UdIwQY
MBaAFM+DdcMh3vkmWYPiGU1Aupev5/HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUt
ZTBjN2I5NmI1N2YyLzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUtZTBjN2I5NmI1N2Yy
LzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphw9U/8b
3IqCHN+ptWcoIhGv/Dh9YzuR79e7EK3FbWIDo8FY6g6scrntBmyftlYEMSjZ293W
oMwR1VZgMXgYcK02URre89jfmnueRd2uJaSbQNKUyv7gnTbXosHzTE8WZHbjtmqs
bEIxuDtryNsH3cCDCdj2N7B0OICo66jEF953N576fgYCNxiuWgyiDhYltVc+OGzG
iT9I+3s7qQ6bgLd6APl/KDVuqLHHiKhUWWheSEulTGVsoZDuWMlN2qYlVzuxBsuV
Dw891aPHbhhBLd7IcDuWvYoNZyjCPfGCptwZBrifZC4FF8Yn3kN/Mc8b05sHFSUi
pGw6fhmDn53K1w==
-----END CERTIFICATE-----