Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File:                     RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier:          tlxcRLHRlqwrwxMSsrSiRaWwGs2PH4pNtyQqIRCqtlU=
Subject key identifier:   FD:03:D8:0D:EF:ED:75:B0:51:5A:FC:D1:52:68:61:6B:B0:3F:DA:73
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer:       /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial:       01962F07060E0B19CCAC76C1F64FFC8F365F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number:          03F1
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: NBemY8NvieEd7XS7R3UYhvCg+aSVOWfqgVHMAEGneu4=)
                          2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:06:0e:0b:19:cc:ac:76:c1:f6:4f:fc:8f:36:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=fd03d80defed75b0515afcd15268616bb03fda73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:46:dc:83:85:52:22:df:7f:b6:88:3d:05:d7:
                    93:3b:c4:73:d8:b5:28:ed:5b:0a:9a:25:68:80:42:
                    55:79:76:59:b7:82:92:dd:75:0f:96:e2:ee:c0:ab:
                    d2:db:85:cf:fb:42:e9:4c:f7:8b:16:e3:ed:a5:c1:
                    eb:b1:d4:89:92:f8:28:d5:a4:98:1c:9e:f7:70:11:
                    34:67:bb:c5:e4:44:13:02:c2:f5:9d:90:05:b9:ea:
                    10:49:73:86:d2:3a:f9:09:00:84:63:64:29:02:2d:
                    1b:f7:06:15:d2:9e:16:30:eb:b6:df:4e:b0:c6:5f:
                    e7:b7:33:3b:33:fd:ef:be:ee:15:e1:29:3d:7d:d3:
                    a9:80:5f:7c:fd:05:7d:44:f9:0f:4e:ca:d6:26:7c:
                    23:c1:9e:04:76:b6:b0:15:f5:96:00:30:03:2e:2e:
                    19:c2:e2:46:a4:b1:94:25:dd:c6:2c:31:92:b4:8e:
                    b9:0f:96:af:ac:1b:1e:c0:63:7d:91:6d:1d:3d:8d:
                    af:4e:b0:88:1a:32:79:9d:3e:dd:e3:41:3d:2e:84:
                    6c:f0:0e:88:eb:cf:6f:63:70:45:23:1d:d2:b8:f1:
                    41:37:3d:b7:21:7d:4a:cb:45:4e:28:02:8c:55:87:
                    18:22:82:97:3c:20:d1:1b:79:d4:0e:f7:d8:cd:ef:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:D8:0D:EF:ED:75:B0:51:5A:FC:D1:52:68:61:6B:B0:3F:DA:73
            X509v3 Authority Key Identifier:
                keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7f:45:64:6a:ce:1f:93:41:19:fd:2b:62:9b:55:d2:7a:9b:
         b9:6e:50:e3:51:c9:d5:33:28:aa:12:00:ab:40:bb:52:08:54:
         a6:20:84:5a:bc:79:74:8d:b1:fd:0e:28:90:f6:55:be:10:8b:
         3b:14:23:f7:10:b0:6a:c7:4c:74:8b:50:ce:3c:9a:a5:64:dc:
         2f:50:6e:ff:74:f4:ff:96:c5:8a:8d:c8:d4:f5:83:b1:d0:f4:
         2b:6c:7a:b6:90:cb:f7:da:37:48:c5:1f:47:63:6c:a7:ea:31:
         75:af:6c:41:0c:66:ac:c3:b1:a3:60:89:19:b5:47:1a:3a:7b:
         f3:06:ca:e6:78:95:c4:39:a9:6b:03:2b:ed:95:03:20:e5:72:
         32:27:35:14:5c:b7:79:fd:91:08:00:ce:18:33:b0:a1:cf:c5:
         bc:80:96:06:37:b5:bd:4c:ba:38:05:d6:a8:02:12:a2:48:c4:
         f0:f4:3f:35:9d:17:04:2d:fa:65:2a:89:a3:f1:f3:bb:3f:70:
         24:51:41:a9:79:c0:8b:55:30:bc:d7:79:40:aa:b7:d0:88:01:
         ab:bc:0a:a1:22:ee:b3:ef:19:b2:53:7a:eb:90:0e:fc:b8:bf:
         c0:b9:3e:b1:0c:20:7e:3c:bc:58:a6:c5:f0:c2:e5:b4:ea:f9:
         5c:bb:94:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwYOCxnMrHbB9k/8jzZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz
ZWFiYjkwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
EyhmZDAzZDgwZGVmZWQ3NWIwNTE1YWZjZDE1MjY4NjE2YmIwM2ZkYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ebcg4VSIt9/tog9BdeTO8Rz2LUo
7VsKmiVogEJVeXZZt4KS3XUPluLuwKvS24XP+0LpTPeLFuPtpcHrsdSJkvgo1aSY
HJ73cBE0Z7vF5EQTAsL1nZAFueoQSXOG0jr5CQCEY2QpAi0b9wYV0p4WMOu2306w
xl/ntzM7M/3vvu4V4Sk9fdOpgF98/QV9RPkPTsrWJnwjwZ4EdrawFfWWADADLi4Z
wuJGpLGUJd3GLDGStI65D5avrBsewGN9kW0dPY2vTrCIGjJ5nT7d40E9LoRs8A6I
689vY3BFIx3SuPFBNz23IX1Ky0VOKAKMVYcYIoKXPCDRG3nUDvfYze82LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0D2A3v7XWwUVr80VJoYWuwP9pzMB8GA1UdIwQY
MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt
NjU2YzE2MmZiMjRlLzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl
LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ39FZGrO
H5NBGf0rYptV0nqbuW5Q41HJ1TMoqhIAq0C7UghUpiCEWrx5dI2x/Q4okPZVvhCL
OxQj9xCwasdMdItQzjyapWTcL1Bu/3T0/5bFio3I1PWDsdD0K2x6tpDL99o3SMUf
R2Nsp+oxda9sQQxmrMOxo2CJGbVHGjp78wbK5niVxDmpawMr7ZUDIOVyMic1FFy3
ef2RCADOGDOwoc/FvICWBje1vUy6OAXWqAISokjE8PQ/NZ0XBC36ZSqJo/Hzuz9w
JFFBqXnAi1UwvNd5QKq30IgBq7wKoSLus+8ZslN665AO/Li/wLk+sQwgfjy8WKbF
8MLltOr5XLuUaA==
-----END CERTIFICATE-----