Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File:                     znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier:          0MVgC0kpa8O/CnaZmYZRi5thQaC1PerMXB1nLhlV0h4=
Subject key identifier:   85:17:8C:CE:3F:C8:B5:CD:ED:BD:9A:7F:02:77:39:1B:43:1B:DE:C5
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer:       /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial:       01962F064FE32334240A002BE99991F9446C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number:          1191
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
                          2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
                          3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
                          4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: cwRZTIXMqGKdqYzZ8pk35VjhL09qVcu1ShqybIVpSAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4f:e3:23:34:24:0a:00:2b:e9:99:91:f9:44:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=85178cce3fc8b5cdedbd9a7f0277391b431bdec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:c7:d4:03:63:2c:00:92:4c:29:a9:f5:a5:
                    cf:e4:53:97:ca:1a:dc:53:57:3e:cd:0d:cc:3b:5e:
                    4c:b4:3b:4b:45:a0:02:6f:92:78:48:2d:18:49:c3:
                    84:8c:d7:70:eb:20:3a:68:1f:7a:84:5e:09:ac:b7:
                    10:ce:07:d6:a7:c2:4e:16:08:0a:75:2b:49:6b:83:
                    f7:27:3c:a7:73:da:bb:79:51:19:94:d9:7e:91:b7:
                    1b:38:13:5a:39:fa:25:e2:21:72:a6:08:83:14:4a:
                    b4:e6:17:8c:ff:79:32:34:82:b2:e7:5e:83:d0:5a:
                    72:18:b5:6e:23:7c:f1:ee:a9:38:3e:b6:60:13:48:
                    5d:28:ff:0c:85:87:3a:61:52:44:21:4e:dd:e4:f8:
                    98:17:9d:83:08:d9:c3:c2:8c:07:52:9f:87:f2:53:
                    41:b1:4d:b6:8b:a1:db:0d:db:3f:5a:30:09:fb:8c:
                    10:66:26:d6:5f:98:7c:05:fd:6d:45:c8:bb:3d:ac:
                    39:da:4b:c3:55:f5:b3:59:4e:5d:ed:da:03:98:06:
                    bc:54:b8:06:8f:db:85:fd:ea:6e:89:88:e5:48:fb:
                    9a:a0:47:a6:82:95:8c:3e:15:8f:f5:c9:74:fc:fd:
                    f7:7e:f0:0d:f1:96:04:dd:1c:16:bc:9e:e4:8d:8d:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:17:8C:CE:3F:C8:B5:CD:ED:BD:9A:7F:02:77:39:1B:43:1B:DE:C5
            X509v3 Authority Key Identifier:
                keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:0a:be:65:f2:7c:19:0a:00:5d:3b:97:1f:63:59:d0:ad:
         5c:14:f1:d5:3a:7f:fe:b7:4d:04:39:98:40:2d:4a:8e:6b:bb:
         f9:a1:2f:79:cb:80:f8:ec:85:88:46:95:20:f6:bd:c1:49:91:
         b3:3f:2d:60:ae:c4:93:a5:69:16:3c:7a:98:3d:f6:db:f5:13:
         17:99:37:00:cb:3a:e4:df:a6:b8:eb:6a:7d:5e:68:cf:7b:e2:
         10:bb:04:f0:d7:d3:4e:17:c6:85:73:97:76:69:96:e6:1e:5b:
         1d:26:11:ad:b6:6f:77:a3:57:3a:99:c8:8f:52:f9:ea:03:f4:
         fd:0c:bb:33:ea:09:c0:3b:61:a1:f7:0b:30:29:20:f0:6c:98:
         9e:28:5c:12:fc:88:d4:78:8d:cb:8d:09:38:e3:3a:24:a5:16:
         4b:d7:50:48:76:ab:cc:a2:5a:52:1b:f6:cb:c8:cc:4d:14:54:
         36:07:0b:1b:a3:2b:b1:f4:1b:76:0c:17:64:a2:49:7b:55:6c:
         3d:13:10:16:02:17:85:c4:96:97:f6:29:ad:cd:5e:ac:30:65:
         aa:3f:21:bd:24:a8:e3:16:ac:05:41:3f:c8:13:8b:99:b7:dc:
         88:5f:ec:ea:e9:ea:4c:86:87:ea:f2:fd:60:be:59:45:0b:0a:
         35:31:f7:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBk/jIzQkCgAr6ZmR+URsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3
OGUyMGMwHhcNMjUwNDEzMTIwMTA0WhcNMjUwNDE0MTIwMTA0WjAzMTEwLwYDVQQD
Eyg4NTE3OGNjZTNmYzhiNWNkZWRiZDlhN2YwMjc3MzkxYjQzMWJkZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm/H1ANjLACSTCmp9aXP5FOXyhrc
U1c+zQ3MO15MtDtLRaACb5J4SC0YScOEjNdw6yA6aB96hF4JrLcQzgfWp8JOFggK
dStJa4P3Jzync9q7eVEZlNl+kbcbOBNaOfol4iFypgiDFEq05heM/3kyNIKy516D
0FpyGLVuI3zx7qk4PrZgE0hdKP8MhYc6YVJEIU7d5PiYF52DCNnDwowHUp+H8lNB
sU22i6HbDds/WjAJ+4wQZibWX5h8Bf1tRci7Paw52kvDVfWzWU5d7doDmAa8VLgG
j9uF/epuiYjlSPuaoEemgpWMPhWP9cl0/P33fvAN8ZYE3RwWvJ7kjY2/bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUXjM4/yLXN7b2afwJ3ORtDG97FMB8GA1UdIwQY
MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt
MDQ2ZDJlMmFkY2Q1LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1
LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheYKvmXy
fBkKAF07lx9jWdCtXBTx1Tp//rdNBDmYQC1Kjmu7+aEvecuA+OyFiEaVIPa9wUmR
sz8tYK7Ek6VpFjx6mD322/UTF5k3AMs65N+muOtqfV5oz3viELsE8NfTThfGhXOX
dmmW5h5bHSYRrbZvd6NXOpnIj1L56gP0/Qy7M+oJwDthofcLMCkg8GyYnihcEvyI
1HiNy40JOOM6JKUWS9dQSHarzKJaUhv2y8jMTRRUNgcLG6MrsfQbdgwXZKJJe1Vs
PRMQFgIXhcSWl/Yprc1erDBlqj8hvSSo4xasBUE/yBOLmbfciF/s6unqTIaH6vL9
YL5ZRQsKNTH3zg==
-----END CERTIFICATE-----