Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File:                     ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier:          NdmjlzmowcxhJqya5QRTLL5gp9OU4qN6YwIm5Fozh+s=
Subject key identifier:   B8:61:95:97:35:AB:F1:E1:99:D9:2B:55:0E:56:EB:D4:E0:8B:0C:C8
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer:       /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial:       01962ECFD93462A6314173071C93C222A8E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
                          2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
                          3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: l3OE+mMd4nP63gm9kvbY/lVS3T6SemvtpYDycknAO/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d9:34:62:a6:31:41:73:07:1c:93:c2:22:a8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=b861959735abf1e199d92b550e56ebd4e08b0cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:e4:9c:58:0e:d6:98:a3:bb:fb:6b:86:d0:
                    cb:d8:ab:f2:f0:80:f3:cc:3c:be:34:58:b8:77:e3:
                    87:a2:a1:9e:99:07:0e:07:e4:24:d2:db:59:a6:8f:
                    27:8b:5a:3b:ba:a2:ba:0b:ed:d2:95:f3:5c:7a:2d:
                    16:15:ee:5b:d7:27:50:7f:c6:8c:1c:c9:a7:0f:55:
                    d1:28:40:1b:11:a4:55:90:48:05:7a:69:d6:ad:50:
                    c5:2d:4b:d1:26:8b:54:28:df:39:e3:e9:ec:9c:fb:
                    95:2c:8d:e5:96:bc:8d:51:29:95:29:6e:ea:ef:dd:
                    e5:57:c1:b3:82:0e:fc:ea:1d:a7:8d:93:9c:fb:fd:
                    a6:cd:23:70:a6:5a:d8:ce:b1:6f:41:61:be:82:40:
                    c3:23:ce:c4:5b:52:28:37:32:9f:e0:69:d2:6a:e1:
                    a7:25:82:2c:c4:69:09:5d:93:59:32:88:e1:43:d9:
                    40:5d:d8:98:e8:83:99:74:14:5c:87:7d:f7:14:de:
                    a0:87:8d:9a:94:09:33:2f:49:11:55:29:c9:9d:d8:
                    60:3d:6b:49:36:9d:02:48:8e:0d:c9:0f:f8:5f:1e:
                    83:78:5b:7f:72:06:c6:3a:1d:9f:e1:ae:28:9c:a4:
                    a7:a2:71:44:6a:89:1c:93:97:61:86:bf:33:45:7c:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:95:97:35:AB:F1:E1:99:D9:2B:55:0E:56:EB:D4:E0:8B:0C:C8
            X509v3 Authority Key Identifier:
                keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:bc:97:a5:68:97:ec:d8:ef:32:77:75:21:10:16:2b:de:
         5c:d3:23:aa:51:b7:5d:fc:39:ec:60:c0:e2:44:6a:71:31:6f:
         0d:9a:6b:e7:25:a7:3f:d3:12:e7:4f:38:13:0c:71:99:75:b5:
         90:66:4a:a4:82:50:53:7a:72:e5:3c:74:17:28:39:4c:7d:b1:
         8a:9d:7b:e6:5b:ba:07:12:73:7d:7d:ad:fa:2e:25:f5:7a:29:
         d3:50:15:f5:98:05:40:f7:ca:c3:8f:b3:a7:75:7f:14:88:ab:
         1f:4f:5b:1c:76:e6:8e:9d:8d:42:2b:83:40:72:74:dc:f9:3d:
         7e:69:43:23:82:01:ac:09:92:57:df:99:49:a9:82:bf:8f:b6:
         85:eb:bb:56:e6:64:6d:59:5b:da:aa:55:d2:4b:ad:4f:71:bc:
         e9:be:9c:b7:8a:10:4c:40:3e:2e:f4:26:f6:81:9f:e9:e0:50:
         47:a7:8e:9d:58:96:08:fb:25:08:dc:08:e8:e4:bd:9c:73:39:
         a8:52:74:4c:ec:56:61:10:94:5a:6e:f5:d2:b3:0e:43:a1:f3:
         69:5d:12:70:65:4c:58:9c:12:c1:82:5c:78:7c:12:c4:1d:f4:
         b0:9e:05:e5:f8:f9:c4:b7:c1:14:53:d1:15:8a:73:46:ca:24:
         7a:b4:a9:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9k0YqYxQXMHHJPCIqjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODI5MGZlOTgxNGZjYjA2MmFiNzFlMzJlYzFmOTZkYTk5
NzNhMzMwHhcNMjUwNDEzMTEwMTM1WhcNMjUwNDE0MTEwMTM1WjAzMTEwLwYDVQQD
EyhiODYxOTU5NzM1YWJmMWUxOTlkOTJiNTUwZTU2ZWJkNGUwOGIwY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOzknFgO1piju/trhtDL2Kvy8IDz
zDy+NFi4d+OHoqGemQcOB+Qk0ttZpo8ni1o7uqK6C+3SlfNcei0WFe5b1ydQf8aM
HMmnD1XRKEAbEaRVkEgFemnWrVDFLUvRJotUKN854+nsnPuVLI3llryNUSmVKW7q
793lV8Gzgg786h2njZOc+/2mzSNwplrYzrFvQWG+gkDDI87EW1IoNzKf4GnSauGn
JYIsxGkJXZNZMojhQ9lAXdiY6IOZdBRch333FN6gh42alAkzL0kRVSnJndhgPWtJ
Np0CSI4NyQ/4Xx6DeFt/cgbGOh2f4a4onKSnonFEaokck5dhhr8zRXwBlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhhlZc1q/HhmdkrVQ5W69TgiwzIMB8GA1UdIwQY
MBaAFGWCkP6YFPywYqtx4y7B+W2plzozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4Mzkt
YWVkZTNmZmE0NDU3LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4MzktYWVkZTNmZmE0NDU3
LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLi8l6Vo
l+zY7zJ3dSEQFiveXNMjqlG3Xfw57GDA4kRqcTFvDZpr5yWnP9MS5084EwxxmXW1
kGZKpIJQU3py5Tx0Fyg5TH2xip175lu6BxJzfX2t+i4l9Xop01AV9ZgFQPfKw4+z
p3V/FIirH09bHHbmjp2NQiuDQHJ03Pk9fmlDI4IBrAmSV9+ZSamCv4+2heu7VuZk
bVlb2qpV0kutT3G86b6ct4oQTEA+LvQm9oGf6eBQR6eOnViWCPslCNwI6OS9nHM5
qFJ0TOxWYRCUWm710rMOQ6HzaV0ScGVMWJwSwYJceHwSxB30sJ4F5fj5xLfBFFPR
FYpzRsokerSpAw==
-----END CERTIFICATE-----