Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File:                     ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier:          o6AuVtksHKt9ZRQ1u+XGPpfVHS6D2vqGSHK/7OZ90Do=
Subject key identifier:   63:5B:DF:09:1A:28:26:C3:E5:94:BA:E4:EE:7D:2E:C3:2E:17:32:04
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer:       /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial:       01962E2B4489A80BF7D4317DD45E52C97684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number:          021F
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: 3WkvkP8HguUwI9Ex3drZAUPP9l+lgGycLEXWAyWCJO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:44:89:a8:0b:f7:d4:31:7d:d4:5e:52:c9:76:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=635bdf091a2826c3e594bae4ee7d2ec32e173204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c3:ba:d5:90:c6:a0:65:95:49:86:1b:b1:65:
                    c5:91:89:63:7a:be:cd:23:c1:41:8c:09:b4:0b:8d:
                    b3:e7:39:4e:c2:88:59:0b:c9:3a:b2:ab:17:f4:3c:
                    6d:db:fe:e0:2d:a7:64:0e:4b:99:84:fb:18:a8:39:
                    51:7b:b8:00:12:09:32:fd:a8:db:76:49:43:24:4a:
                    88:05:c3:e1:67:3a:62:cf:e8:cc:f9:34:98:bf:19:
                    16:5d:84:30:ff:c7:4f:7d:e6:e1:a5:eb:da:73:fb:
                    7e:cc:f0:0e:2d:90:60:1e:a3:5d:ab:22:47:91:46:
                    c7:a9:db:30:61:a6:c8:ae:42:0c:64:98:37:5b:5c:
                    0e:9a:4b:1b:46:de:79:25:26:3a:74:3c:c7:e2:0a:
                    76:f7:02:47:ff:16:c0:1d:55:9d:b8:4f:c6:2f:35:
                    5e:74:92:e3:8f:ac:a9:40:18:1a:66:f3:33:a5:1e:
                    76:18:94:73:f4:32:cd:75:38:b5:0b:66:eb:03:a5:
                    4b:83:45:94:3a:d2:fa:69:55:a4:dc:97:ab:1d:a1:
                    f6:f0:eb:f8:62:b5:5f:0f:c3:59:e1:ec:0e:8c:f7:
                    bb:4c:ec:8a:b4:3b:6f:f9:28:3a:04:03:2f:89:63:
                    69:e4:60:bd:b0:37:5c:a0:64:4c:ff:0d:7d:89:94:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5B:DF:09:1A:28:26:C3:E5:94:BA:E4:EE:7D:2E:C3:2E:17:32:04
            X509v3 Authority Key Identifier:
                keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:be:f2:87:1a:7d:02:32:d6:ef:a0:d6:2c:71:a7:7b:3c:
         0d:47:91:f9:94:41:c1:a6:00:71:41:a5:47:85:c9:17:73:6f:
         7a:bc:04:a9:4d:b4:94:8a:97:f0:43:a9:99:44:b1:79:9b:bf:
         75:1d:93:93:ec:0f:0c:58:3a:ba:9a:49:21:9b:3e:9e:5c:f6:
         55:97:e6:97:34:2f:eb:30:d9:ea:f3:fb:c6:e5:fa:20:b3:b8:
         9c:68:eb:a5:c6:94:85:6f:98:e1:2f:9e:f1:3a:b5:29:6f:d1:
         4d:92:22:99:af:95:22:17:ee:02:33:10:48:5f:d0:86:ea:14:
         52:74:6a:22:1b:84:07:60:d7:e4:88:86:b2:a4:ae:2f:73:87:
         ab:6f:da:a5:71:70:12:f1:cc:91:08:31:48:dc:2b:15:af:fe:
         17:4f:fd:53:5d:08:73:01:fa:27:ce:8c:a1:e5:64:28:bb:11:
         ef:e1:58:c3:bb:06:ca:ce:4e:57:b3:24:06:9b:9a:40:99:d8:
         d8:c8:7b:b4:a5:10:d0:f6:21:05:f1:ba:77:93:39:19:ee:94:
         ab:a3:76:b6:1a:fa:ba:47:76:94:3f:61:ba:73:c5:4f:49:a9:
         52:59:a6:0e:6f:78:ff:99:c3:76:1c:6c:c9:b6:95:a1:f1:6e:
         95:6b:81:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0SJqAv31DF91F5SyXaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTExNDRlZGM4YzdiYjJkZGU1MmJlYzFlMmZkOGU3YWYx
M2IxZGQwHhcNMjUwNDEzMDgwMTQ5WhcNMjUwNDE0MDgwMTQ5WjAzMTEwLwYDVQQD
Eyg2MzViZGYwOTFhMjgyNmMzZTU5NGJhZTRlZTdkMmVjMzJlMTczMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cO61ZDGoGWVSYYbsWXFkYljer7N
I8FBjAm0C42z5zlOwohZC8k6sqsX9Dxt2/7gLadkDkuZhPsYqDlRe7gAEgky/ajb
dklDJEqIBcPhZzpiz+jM+TSYvxkWXYQw/8dPfebhpevac/t+zPAOLZBgHqNdqyJH
kUbHqdswYabIrkIMZJg3W1wOmksbRt55JSY6dDzH4gp29wJH/xbAHVWduE/GLzVe
dJLjj6ypQBgaZvMzpR52GJRz9DLNdTi1C2brA6VLg0WUOtL6aVWk3JerHaH28Ov4
YrVfD8NZ4ewOjPe7TOyKtDtv+Sg6BAMviWNp5GC9sDdcoGRM/w19iZRgnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNb3wkaKCbD5ZS65O59LsMuFzIEMB8GA1UdIwQY
MBaAFGThFE7cjHuy3eUr7B4v2OevE7HdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYt
ODVkZWFhYjUwOTI3LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYtODVkZWFhYjUwOTI3
LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3y+8oca
fQIy1u+g1ixxp3s8DUeR+ZRBwaYAcUGlR4XJF3NverwEqU20lIqX8EOpmUSxeZu/
dR2Tk+wPDFg6uppJIZs+nlz2VZfmlzQv6zDZ6vP7xuX6ILO4nGjrpcaUhW+Y4S+e
8Tq1KW/RTZIima+VIhfuAjMQSF/QhuoUUnRqIhuEB2DX5IiGsqSuL3OHq2/apXFw
EvHMkQgxSNwrFa/+F0/9U10IcwH6J86MoeVkKLsR7+FYw7sGys5OV7MkBpuaQJnY
2Mh7tKUQ0PYhBfG6d5M5Ge6Uq6N2thr6ukd2lD9hunPFT0mpUlmmDm94/5nDdhxs
ybaVofFulWuBNw==
-----END CERTIFICATE-----