Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File:                     Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier:          Jf7K3KWwG47E6+gLUpO9UARsEJEY7TKM2PV0KgEd9io=
Subject key identifier:   18:D7:A0:B4:AB:9B:05:D1:EC:48:21:ED:DF:D0:DD:7F:15:8C:97:43
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer:       /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial:       01962FAB93D771811875928266EBA895A963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: Pg3Kxo+3Kmtk7gBKCcH0SMq2fH0vwlZE1vPqdVo5LTc=)
                          2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:d7:71:81:18:75:92:82:66:eb:a8:95:a9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=18d7a0b4ab9b05d1ec4821eddfd0dd7f158c9743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:32:b0:a6:d0:71:8b:64:65:28:dd:43:7f:
                    fb:0c:4f:af:98:19:98:90:37:2a:f1:47:ef:b0:8d:
                    2f:d4:b8:e7:b2:a2:03:12:5f:bb:ef:7e:c5:0c:43:
                    04:43:43:c4:14:52:17:d6:d2:e6:93:24:d9:fa:2c:
                    37:d9:5c:22:92:51:4c:f9:fa:39:15:ea:d6:96:17:
                    0a:16:94:3d:70:7a:e0:03:f1:3a:78:08:97:59:80:
                    c1:cf:8b:07:2a:ba:2a:6d:1b:e4:20:27:2f:3e:fa:
                    20:17:e4:e4:00:7d:45:8f:bd:4a:32:5b:6d:00:7d:
                    40:61:17:c6:05:2a:a0:37:05:dd:3e:e1:71:5a:5f:
                    3d:ea:47:74:9f:ea:66:03:87:e6:4e:ea:83:dd:cf:
                    91:ab:b8:63:9e:c3:d1:19:4c:72:b5:32:09:aa:d3:
                    f0:42:3c:33:1d:c7:73:dd:f9:3a:a4:dd:e0:ce:2b:
                    b9:68:9c:be:44:00:eb:47:4f:58:b8:56:b6:4d:94:
                    af:51:a2:34:14:69:de:78:62:bd:28:86:54:c0:35:
                    0b:1b:81:b1:3f:b8:0b:8b:c6:9f:ff:65:08:c1:b1:
                    2e:3e:e1:9e:51:2c:ae:b1:06:b2:22:d5:b6:23:ed:
                    26:ed:b2:a3:90:cf:c6:f6:97:df:39:19:0d:87:93:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:A0:B4:AB:9B:05:D1:EC:48:21:ED:DF:D0:DD:7F:15:8C:97:43
            X509v3 Authority Key Identifier:
                keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ab:cc:38:a8:b0:36:22:0f:a8:c8:7d:e4:6b:c7:d8:05:02:
         cf:01:ec:1b:d8:64:ad:28:51:ae:af:7b:69:2a:eb:97:a8:29:
         dc:f6:9c:1f:e1:b7:c9:6e:c3:24:a0:ed:3a:c3:af:6d:4b:d0:
         58:1e:9f:e4:a4:d2:00:26:73:0c:63:53:cd:3b:53:68:e3:e9:
         f0:1c:e7:94:45:ac:2d:f2:77:f4:7d:eb:d1:de:29:9e:66:2b:
         f9:91:c1:9c:d5:8a:65:1d:e4:60:a6:1c:8e:78:5b:73:3d:37:
         e0:2e:2b:b1:65:46:3a:98:33:b9:67:f1:7b:83:a4:a8:89:7c:
         8c:da:97:7b:3b:ef:51:aa:00:c5:90:f8:c4:ca:69:cb:6a:24:
         3f:e6:3c:d2:3a:2c:b1:49:e9:ff:56:0d:ac:05:8e:89:7d:37:
         4b:a0:7b:f2:bb:80:6d:e5:80:9f:e4:6b:b1:a6:09:7b:3a:a0:
         86:3e:d5:df:e5:71:78:e7:10:33:66:07:19:b7:f2:1f:f6:53:
         e4:6f:3b:73:90:26:21:69:55:d0:95:c2:02:f1:57:f7:5f:33:
         16:a2:6c:d6:b1:d7:ad:59:79:d3:17:e2:a2:e0:43:46:ab:aa:
         ba:55:4b:ed:36:73:dd:94:8a:cb:9c:a1:21:df:61:a5:9d:25:
         40:94:be:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5PXcYEYdZKCZuuolaljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MWU3MTc0YmY5ZTllYTFiNjRhOTJiYTY1ZmZjZjFlOTMx
Y2NlMzIwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
EygxOGQ3YTBiNGFiOWIwNWQxZWM0ODIxZWRkZmQwZGQ3ZjE1OGM5NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lQysKbQcYtkZSjdQ3/7DE+vmBmY
kDcq8UfvsI0v1LjnsqIDEl+7737FDEMEQ0PEFFIX1tLmkyTZ+iw32VwiklFM+fo5
FerWlhcKFpQ9cHrgA/E6eAiXWYDBz4sHKroqbRvkICcvPvogF+TkAH1Fj71KMltt
AH1AYRfGBSqgNwXdPuFxWl896kd0n+pmA4fmTuqD3c+Rq7hjnsPRGUxytTIJqtPw
QjwzHcdz3fk6pN3gziu5aJy+RADrR09YuFa2TZSvUaI0FGneeGK9KIZUwDULG4Gx
P7gLi8af/2UIwbEuPuGeUSyusQayItW2I+0m7bKjkM/G9pffORkNh5OysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjXoLSrmwXR7Egh7d/Q3X8VjJdDMB8GA1UdIwQY
MBaAFGYecXS/np6htkqSumX/zx6THM4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAt
NmJkODQ0ZWE4NmM3LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAtNmJkODQ0ZWE4NmM3
LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKvMOKiw
NiIPqMh95GvH2AUCzwHsG9hkrShRrq97aSrrl6gp3PacH+G3yW7DJKDtOsOvbUvQ
WB6f5KTSACZzDGNTzTtTaOPp8BznlEWsLfJ39H3r0d4pnmYr+ZHBnNWKZR3kYKYc
jnhbcz034C4rsWVGOpgzuWfxe4OkqIl8jNqXezvvUaoAxZD4xMppy2okP+Y80jos
sUnp/1YNrAWOiX03S6B78ruAbeWAn+RrsaYJezqghj7V3+VxeOcQM2YHGbfyH/ZT
5G87c5AmIWlV0JXCAvFX918zFqJs1rHXrVl50xfiouBDRququlVL7TZz3ZSKy5yh
Id9hpZ0lQJS+fQ==
-----END CERTIFICATE-----