Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File:                     zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier:          rcRyeQnVqheTEQ7zj6tybJbb+ZKuUB4YgSCysbGWLOc=
Subject key identifier:   2D:4B:AD:1E:17:23:29:2E:7C:B7:DB:AB:4F:09:93:B6:50:BA:4D:5D
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer:       /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial:       01962F3D98F718C76872D5D11967EA2AFBA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number:          11AA
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
                          2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: ybjR9jb83Qzv6FlHfxeT2HBkeT8rDXX6buapQQwDX60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:98:f7:18:c7:68:72:d5:d1:19:67:ea:2a:fb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=2d4bad1e1723292e7cb7dbab4f0993b650ba4d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:d8:d9:0b:e7:ac:9f:3a:63:dd:3b:35:05:
                    d5:ba:3f:1f:78:18:0c:0e:85:56:27:93:1a:57:06:
                    c2:76:d0:76:eb:93:9d:82:15:24:26:33:b5:9b:b8:
                    c0:73:d7:ee:eb:cc:7e:cd:a4:5d:9b:79:c6:73:de:
                    55:ca:ff:04:b6:9d:b8:2a:98:82:38:f5:70:cb:1e:
                    09:fd:09:f8:98:f3:69:25:7f:b9:e9:a5:62:1d:00:
                    11:5b:cf:03:fe:1d:49:53:b6:8e:7b:9e:8e:19:36:
                    c2:1b:50:02:e8:61:09:7f:58:21:e5:b7:4c:10:a1:
                    47:e6:0d:df:45:4b:b1:4a:eb:34:5e:a0:d7:9f:b1:
                    bf:7d:3d:86:a0:4c:11:6e:b1:64:8d:4f:18:92:55:
                    9a:98:e8:85:57:e1:28:cf:d4:86:96:d8:23:7d:ce:
                    02:a2:f2:78:bc:07:88:de:9c:64:69:77:f1:4b:87:
                    92:20:2d:41:a4:4b:c6:92:cb:06:bc:9f:01:1b:d4:
                    67:c3:1a:25:1b:14:48:61:b1:eb:f3:23:c3:76:91:
                    1d:d6:eb:b5:6a:19:9c:0a:b1:54:8b:31:3d:14:b1:
                    73:41:a4:9c:96:bd:99:94:2e:24:95:e0:76:ca:a5:
                    78:94:e0:bd:5a:89:40:34:e4:b8:10:9d:93:ea:25:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4B:AD:1E:17:23:29:2E:7C:B7:DB:AB:4F:09:93:B6:50:BA:4D:5D
            X509v3 Authority Key Identifier:
                keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7b:3a:b7:ab:09:d3:e5:6a:b3:93:3b:4a:33:bd:43:ad:1d:
         6a:85:32:63:50:46:cc:32:84:09:0f:eb:5e:d4:fe:4c:c7:bc:
         08:e1:ad:ce:de:0e:0a:01:a8:42:b5:5b:0a:96:f8:11:6c:88:
         45:b4:f2:f6:06:cf:a6:74:02:8e:52:c4:fd:08:27:f8:c8:04:
         15:3f:f8:c6:fd:43:cb:14:d0:e4:b5:5c:ca:c2:ee:bd:05:82:
         3a:f0:49:78:89:33:22:db:4e:70:ce:10:83:7e:9e:b6:80:0b:
         52:79:c6:b2:bf:d8:10:62:b0:40:7e:fa:5a:95:2b:df:21:dc:
         0c:cd:ee:ef:02:49:25:c2:11:7a:6f:3b:5a:f8:56:e5:12:cf:
         fa:62:70:04:73:0f:cc:2b:69:4c:af:15:37:1b:16:4b:e0:72:
         7e:0c:53:f7:f7:8e:f9:5f:4f:9d:e1:e5:91:80:27:9d:c7:bd:
         36:9c:92:24:d2:a9:3c:5a:a7:23:db:3f:82:84:82:54:67:0d:
         52:d0:c7:08:00:5d:d2:97:7f:89:35:5d:17:54:b7:45:3e:38:
         95:0a:30:a6:88:64:b2:66:b4:f3:c6:bd:5a:78:cc:c8:ed:32:
         e7:89:e4:c7:47:d3:b9:01:ae:3d:67:cf:2a:b9:e5:da:9a:78:
         6c:3c:2a:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZj3GMdoctXRGWfqKvujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjVjMmY5NThhN2UyMWEzMTM1OTE2ZWVkMWE0ZDk3ODZl
MDlkYTMwHhcNMjUwNDEzMTMwMTI3WhcNMjUwNDE0MTMwMTI3WjAzMTEwLwYDVQQD
EygyZDRiYWQxZTE3MjMyOTJlN2NiN2RiYWI0ZjA5OTNiNjUwYmE0ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RfY2QvnrJ86Y907NQXVuj8feBgM
DoVWJ5MaVwbCdtB265OdghUkJjO1m7jAc9fu68x+zaRdm3nGc95Vyv8Etp24KpiC
OPVwyx4J/Qn4mPNpJX+56aViHQARW88D/h1JU7aOe56OGTbCG1AC6GEJf1gh5bdM
EKFH5g3fRUuxSus0XqDXn7G/fT2GoEwRbrFkjU8YklWamOiFV+Eoz9SGltgjfc4C
ovJ4vAeI3pxkaXfxS4eSIC1BpEvGkssGvJ8BG9RnwxolGxRIYbHr8yPDdpEd1uu1
ahmcCrFUizE9FLFzQaSclr2ZlC4kleB2yqV4lOC9WolANOS4EJ2T6iW5VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1LrR4XIykufLfbq08Jk7ZQuk1dMB8GA1UdIwQY
MBaAFM5lwvlYp+IaMTWRbu0aTZeG4J2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2It
NWQ1OTZkMDBkZTljLzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2ItNWQ1OTZkMDBkZTlj
LzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArns6t6sJ
0+Vqs5M7SjO9Q60daoUyY1BGzDKECQ/rXtT+TMe8COGtzt4OCgGoQrVbCpb4EWyI
RbTy9gbPpnQCjlLE/Qgn+MgEFT/4xv1DyxTQ5LVcysLuvQWCOvBJeIkzIttOcM4Q
g36etoALUnnGsr/YEGKwQH76WpUr3yHcDM3u7wJJJcIRem87WvhW5RLP+mJwBHMP
zCtpTK8VNxsWS+ByfgxT9/eO+V9PneHlkYAnnce9NpySJNKpPFqnI9s/goSCVGcN
UtDHCABd0pd/iTVdF1S3RT44lQowpohksma088a9WnjMyO0y54nkx0fTuQGuPWfP
Krnl2pp4bDwqrw==
-----END CERTIFICATE-----