Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          5dID/fMNTgprBBlci8E22Ybk1NlT/l0cWCraHGWQraQ=
Subject key identifier:   95:BE:9B:72:F5:84:2B:F3:DA:07:94:ED:20:A1:11:3D:64:11:C3:41
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       01962FAB11C0C76E1B9D8F06531732F0BDAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=)
                          2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: UbqXPBpmRyRgZt14XoxBXL2nBkue0foEF8NAdE2Dtt4=)
                          3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=)
                          4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=)
                          5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:11:c0:c7:6e:1b:9d:8f:06:53:17:32:f0:bd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=95be9b72f5842bf3da0794ed20a1113d6411c341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:0f:fb:7d:be:e2:7e:4e:41:81:81:42:7d:
                    b3:58:22:ea:2d:36:05:c4:77:ec:d2:0e:3a:cf:8f:
                    33:05:26:c6:6c:8d:0c:78:24:18:81:53:aa:10:2f:
                    04:fc:03:3a:d3:9c:34:d2:d9:56:04:ab:1a:a5:d1:
                    1c:ed:06:65:ad:53:4a:cd:f0:75:8c:96:50:ba:b3:
                    bb:2f:34:50:69:ac:59:5d:c9:ee:e7:bd:08:14:ef:
                    4c:33:ed:71:68:c7:7b:95:0a:3a:50:fb:a5:6b:9c:
                    c9:aa:23:04:cc:bc:6f:c7:32:d4:34:dd:e5:9e:49:
                    a0:19:3e:32:df:41:bc:73:2e:07:8f:c1:40:21:20:
                    30:1f:e2:5b:50:d5:91:16:d0:f4:ef:42:11:db:14:
                    7d:d7:59:af:d2:45:41:ef:9c:89:59:d3:1a:8e:a3:
                    a4:64:dc:97:b8:9a:a6:1c:fc:d0:87:13:f5:14:ed:
                    c7:ad:bf:b9:04:c0:6e:45:b5:62:0b:d6:19:9a:03:
                    c2:fd:d3:cb:a6:fe:d9:ab:65:92:60:a7:22:cb:88:
                    df:e1:eb:ba:aa:bd:fb:4b:9f:44:21:45:47:a7:59:
                    5a:dc:b2:f5:cd:12:5a:81:d4:d6:e8:19:db:03:6f:
                    32:8e:c3:fe:2a:92:7a:29:5e:e1:51:97:5b:f1:9e:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BE:9B:72:F5:84:2B:F3:DA:07:94:ED:20:A1:11:3D:64:11:C3:41
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:bc:e5:fe:1d:a1:a9:47:3a:05:71:85:ea:15:e0:cc:7a:0f:
         b4:cb:eb:7c:29:1f:26:c1:66:11:ed:57:b4:0f:50:a3:9d:fc:
         a3:bf:0f:88:46:62:b7:38:f0:4d:74:40:5f:dc:12:9c:3a:e6:
         70:15:e0:ed:92:ce:c9:88:1c:3f:0f:f5:aa:34:7a:b0:f5:03:
         01:c5:54:af:94:cc:bb:30:cf:7b:7e:90:73:13:de:24:bb:17:
         f2:62:da:b8:75:1b:78:88:7d:33:d7:78:e8:85:be:da:8b:5a:
         25:20:b8:48:bc:e3:90:b4:fe:0c:11:85:4a:c6:a3:a4:70:80:
         27:b6:ce:86:47:62:5d:9b:c6:b4:41:7f:e2:7a:60:27:2b:31:
         79:ef:cd:2c:33:0a:cf:e8:33:bb:b0:cd:06:55:d3:92:cd:84:
         73:bd:8d:c6:e8:8f:d9:87:f5:d5:f7:92:b1:76:f9:e6:5b:30:
         dd:cc:31:c3:40:44:40:9f:92:4b:58:18:d5:68:dd:1a:72:c1:
         ed:2e:21:d8:87:d3:52:4e:fe:24:1f:e3:b4:b8:96:a3:2a:a6:
         cc:1a:16:93:81:1e:91:f9:5e:c5:80:34:10:65:73:0d:c5:98:
         bd:81:3f:c6:6f:ff:24:d7:65:c9:7c:6e:71:3c:c3:37:03:3c:
         bc:f8:97:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxHAx24bnY8GUxcy8L2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjUwNDEzMTUwMTAyWhcNMjUwNDE0MTUwMTAyWjAzMTEwLwYDVQQD
Eyg5NWJlOWI3MmY1ODQyYmYzZGEwNzk0ZWQyMGExMTEzZDY0MTFjMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXwP+32+4n5OQYGBQn2zWCLqLTYF
xHfs0g46z48zBSbGbI0MeCQYgVOqEC8E/AM605w00tlWBKsapdEc7QZlrVNKzfB1
jJZQurO7LzRQaaxZXcnu570IFO9MM+1xaMd7lQo6UPula5zJqiMEzLxvxzLUNN3l
nkmgGT4y30G8cy4Hj8FAISAwH+JbUNWRFtD070IR2xR911mv0kVB75yJWdMajqOk
ZNyXuJqmHPzQhxP1FO3Hrb+5BMBuRbViC9YZmgPC/dPLpv7Zq2WSYKciy4jf4eu6
qr37S59EIUVHp1la3LL1zRJagdTW6BnbA28yjsP+KpJ6KV7hUZdb8Z4sjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW+m3L1hCvz2geU7SChET1kEcNBMB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7zl/h2h
qUc6BXGF6hXgzHoPtMvrfCkfJsFmEe1XtA9Qo538o78PiEZitzjwTXRAX9wSnDrm
cBXg7ZLOyYgcPw/1qjR6sPUDAcVUr5TMuzDPe36QcxPeJLsX8mLauHUbeIh9M9d4
6IW+2otaJSC4SLzjkLT+DBGFSsajpHCAJ7bOhkdiXZvGtEF/4npgJysxee/NLDMK
z+gzu7DNBlXTks2Ec72NxuiP2Yf11feSsXb55lsw3cwxw0BEQJ+SS1gY1WjdGnLB
7S4h2IfTUk7+JB/jtLiWoyqmzBoWk4EekflexYA0EGVzDcWYvYE/xm//JNdlyXxu
cTzDNwM8vPiXjw==
-----END CERTIFICATE-----