Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File:                     zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier:          IBIM2ChNPw8vwCE2Xy7msXQnWjTHGpF6V5YCnPIqu90=
Subject key identifier:   8B:0E:27:60:F8:42:1B:85:85:F3:A9:11:EF:70:29:19:CC:CA:13:98
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer:       /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial:       01962FAB8AF30783BE17115F3788E4FCE237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number:          09DF
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: bL9XDxQqDi4zzbqIbwV9pxg-nag.roa (hash: vqETjbVoGoH82qeAvCJ8Sz1hJwZnPnltJtLCCK0jXFQ=)
                          2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: IBKK+Z89GIekjWSxG5gWrsh4A1O/5AeC6MNJ13d4u3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:f3:07:83:be:17:11:5f:37:88:e4:fc:e2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=8b0e2760f8421b8585f3a911ef702919ccca1398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:48:54:6b:21:25:d5:e8:51:af:9d:13:e1:
                    e0:97:3d:36:ea:a1:1a:67:c3:3d:f4:aa:f6:fe:2c:
                    bc:80:0d:d9:20:31:54:84:ce:27:c4:c1:9e:15:b6:
                    1e:65:67:e6:68:e3:2a:47:b6:5d:c0:49:fa:9a:1a:
                    b4:e6:e8:8f:8e:0c:fb:e1:eb:7d:90:30:80:7d:a4:
                    c7:e0:33:94:0b:b6:59:6e:ab:03:79:5d:f2:14:2e:
                    58:49:c2:b6:91:d1:f6:a8:58:f9:17:7d:40:86:6e:
                    f6:2b:c4:3b:42:ad:86:71:8d:3c:d4:10:fc:f9:48:
                    94:3e:2b:a0:f5:0e:32:e5:60:01:88:58:cd:ba:07:
                    ab:97:f0:50:cb:b6:5b:28:cb:bb:5c:82:81:2c:26:
                    58:af:cd:e2:f5:7f:6a:38:43:14:69:fc:70:35:a3:
                    64:af:92:ee:b5:3d:07:cc:ff:d0:5a:bf:01:a2:1c:
                    35:9a:09:22:0a:f5:42:6f:ed:7e:ef:9b:25:0f:9e:
                    3f:bc:f2:8a:38:13:cc:86:73:f9:92:d3:63:87:19:
                    79:06:90:b9:ee:df:e5:b5:ef:38:4e:80:2e:31:a2:
                    41:cb:49:75:f7:fa:ac:7e:be:28:bc:5c:af:e2:cd:
                    94:7d:4c:4f:f9:2a:72:3c:db:c3:72:aa:8f:3b:8b:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0E:27:60:F8:42:1B:85:85:F3:A9:11:EF:70:29:19:CC:CA:13:98
            X509v3 Authority Key Identifier:
                keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b1:b9:09:27:06:4d:c9:e3:58:64:6a:76:e1:20:3b:5e:bc:
         6b:3b:a5:24:e3:ea:7c:41:9e:fc:5d:c3:d7:3b:94:90:28:24:
         58:11:68:fd:15:1c:85:31:42:89:0b:22:97:d5:ee:5b:af:83:
         25:6b:bd:c7:1d:56:37:b8:af:54:02:cb:a9:6f:20:4f:5d:a3:
         a9:c3:eb:45:f2:5b:64:4b:44:23:89:fb:11:bc:83:3f:06:5b:
         8e:74:bd:bd:f0:63:f3:35:51:9f:24:6a:75:bb:77:a9:83:0a:
         0c:02:65:2f:b2:f6:3b:fe:92:a5:9d:e2:e7:96:01:a9:a7:8c:
         a2:24:78:c1:68:4d:69:f2:a0:0e:18:f3:05:ef:c9:6a:7f:46:
         57:69:6a:fc:16:d9:88:c0:a7:30:11:a7:b5:73:55:82:e2:50:
         bd:db:b6:c1:23:90:4f:f5:4b:24:a7:4d:a5:6a:15:46:40:f1:
         c6:0f:94:84:26:6c:01:b9:13:b0:00:a4:1e:18:f0:93:dd:b5:
         a2:b8:ee:ac:65:d7:a9:fb:c9:bd:32:f2:cc:35:84:37:cf:89:
         fc:f7:cd:60:69:36:c5:75:cc:33:22:85:2f:51:e3:fb:a3:25:
         8f:5a:02:fc:2d:d4:61:96:79:49:e2:cd:78:05:f9:3b:54:0a:
         bc:26:3c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq4rzB4O+FxFfN4jk/OI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjUxYTdiNGM1YjI0NTgwMjkyYjhjNGFhNmFhOWMzMjU2
NjU0ODAwHhcNMjUwNDEzMTUwMTMzWhcNMjUwNDE0MTUwMTMzWjAzMTEwLwYDVQQD
Eyg4YjBlMjc2MGY4NDIxYjg1ODVmM2E5MTFlZjcwMjkxOWNjY2ExMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6hIVGshJdXoUa+dE+Hglz026qEa
Z8M99Kr2/iy8gA3ZIDFUhM4nxMGeFbYeZWfmaOMqR7ZdwEn6mhq05uiPjgz74et9
kDCAfaTH4DOUC7ZZbqsDeV3yFC5YScK2kdH2qFj5F31Ahm72K8Q7Qq2GcY081BD8
+UiUPiug9Q4y5WABiFjNugerl/BQy7ZbKMu7XIKBLCZYr83i9X9qOEMUafxwNaNk
r5LutT0HzP/QWr8Bohw1mgkiCvVCb+1+75slD54/vPKKOBPMhnP5ktNjhxl5BpC5
7t/lte84ToAuMaJBy0l19/qsfr4ovFyv4s2UfUxP+SpyPNvDcqqPO4sVLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsOJ2D4QhuFhfOpEe9wKRnMyhOYMB8GA1UdIwQY
MBaAFM31GntMWyRYApK4xKpqqcMlZlSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzct
YTU1YjU4MGIwZWEzLzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzctYTU1YjU4MGIwZWEz
LzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7G5CScG
TcnjWGRqduEgO168azulJOPqfEGe/F3D1zuUkCgkWBFo/RUchTFCiQsil9XuW6+D
JWu9xx1WN7ivVALLqW8gT12jqcPrRfJbZEtEI4n7EbyDPwZbjnS9vfBj8zVRnyRq
dbt3qYMKDAJlL7L2O/6SpZ3i55YBqaeMoiR4wWhNafKgDhjzBe/Jan9GV2lq/BbZ
iMCnMBGntXNVguJQvdu2wSOQT/VLJKdNpWoVRkDxxg+UhCZsAbkTsACkHhjwk921
orjurGXXqfvJvTLyzDWEN8+J/PfNYGk2xXXMMyKFL1Hj+6Mlj1oC/C3UYZZ5SeLN
eAX5O1QKvCY81w==
-----END CERTIFICATE-----