Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File:                     zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier:          1vMvPRGNMS8HEz0xJvf60kKC+Ecbw7KEmgdyNcCQkqQ=
Subject key identifier:   37:30:E2:BB:1D:0F:58:54:84:FF:AE:61:38:61:31:8E:CF:FF:2A:3A
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer:       /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial:       01962FAB29E07E210890D58BD8BC56DA9F08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
                          2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: q3r58iXgF2KBTeA4v89qC8P4aNJlhXJdNLgt9W3Md/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:29:e0:7e:21:08:90:d5:8b:d8:bc:56:da:9f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=3730e2bb1d0f585484ffae613861318ecfff2a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:64:c2:5a:08:ef:d4:73:38:7f:71:15:17:
                    26:2a:66:b4:85:fd:23:97:c9:77:fa:04:b2:c4:02:
                    48:90:43:6e:b8:ff:e6:b8:19:2a:69:0a:73:09:fe:
                    70:75:85:94:8f:f8:42:3a:6a:fa:9a:93:78:1d:8e:
                    18:56:4b:7a:da:fe:8f:d1:44:cb:57:24:e6:1f:37:
                    75:d2:20:02:0f:92:96:e9:bf:38:41:6d:f3:4c:a2:
                    29:2c:a1:15:80:8a:39:53:2a:65:18:07:59:1d:fc:
                    62:19:62:53:95:9a:5f:ec:e7:3d:14:f8:ca:11:8f:
                    33:e1:59:19:c2:ad:28:48:e6:82:2a:41:ff:c0:b7:
                    01:b7:8f:a3:40:a7:3a:32:1f:ac:7d:c5:bf:4a:5f:
                    21:a5:56:de:d4:e7:ae:3f:af:90:7b:8c:28:4b:1b:
                    63:56:fe:dd:f7:5f:af:18:03:61:5f:94:a9:3d:0c:
                    4e:65:25:ec:d9:19:b5:cd:5d:71:0f:0c:2b:c1:bf:
                    ff:3e:0b:6f:72:48:d2:81:91:9f:a6:11:f1:12:4e:
                    97:e7:2b:5e:44:ac:65:a3:e4:69:1a:2f:e8:e2:bb:
                    67:a7:36:a6:2e:86:61:38:ce:b1:56:05:bd:17:d7:
                    6e:5f:ed:58:5c:9a:93:ea:64:98:38:2d:31:e4:e2:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:30:E2:BB:1D:0F:58:54:84:FF:AE:61:38:61:31:8E:CF:FF:2A:3A
            X509v3 Authority Key Identifier:
                keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:8a:56:76:fd:61:98:ab:6c:e1:ed:94:b2:89:db:97:7e:
         fa:0f:ab:15:6a:5d:21:3e:3b:d7:e8:33:02:9a:26:08:6d:3b:
         af:ce:ff:a5:e5:e9:c4:61:08:cc:7f:f5:ce:61:61:91:fa:ca:
         59:f4:56:78:3e:7a:44:8f:ce:45:2f:2d:01:2f:04:37:1e:fc:
         a7:d7:a3:a9:dc:cc:17:6e:9f:8f:36:c3:fc:e8:02:79:b8:a2:
         55:ee:4a:2a:ff:63:93:dc:42:5f:fc:53:08:c7:7a:31:c9:d3:
         13:c3:f8:de:e8:ca:78:1c:ee:af:74:b0:b1:e0:d3:a0:2b:8f:
         50:47:e6:cc:23:f1:38:55:69:a2:69:28:34:4b:d8:3b:1a:26:
         be:d3:cc:bc:d1:29:67:86:d6:48:f1:d4:8e:57:56:5f:62:78:
         d3:8e:96:2d:d2:a2:db:46:d7:06:d5:84:fd:39:f4:16:f9:db:
         56:a0:d3:44:01:bc:92:84:51:59:02:3e:8e:cd:e0:f5:2b:1b:
         f3:19:cd:43:db:66:dc:92:94:87:f1:16:d2:ad:15:f5:20:f5:
         0d:e5:b1:cd:d9:b9:a7:dc:76:37:1e:c3:3f:f6:2c:8c:57:d9:
         f7:ab:ee:3a:7a:0b:99:48:2d:ab:da:c4:3e:5e:42:64:a8:1f:
         29:cc:ee:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyngfiEIkNWL2LxW2p8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMGNjN2ZkODg5OGIwZjdkZjRiOWRmMGI5OTMxOWJjYjI5
ZWMyNDMwHhcNMjUwNDEzMTUwMTA4WhcNMjUwNDE0MTUwMTA4WjAzMTEwLwYDVQQD
EygzNzMwZTJiYjFkMGY1ODU0ODRmZmFlNjEzODYxMzE4ZWNmZmYyYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgBkwloI79RzOH9xFRcmKma0hf0j
l8l3+gSyxAJIkENuuP/muBkqaQpzCf5wdYWUj/hCOmr6mpN4HY4YVkt62v6P0UTL
VyTmHzd10iACD5KW6b84QW3zTKIpLKEVgIo5UyplGAdZHfxiGWJTlZpf7Oc9FPjK
EY8z4VkZwq0oSOaCKkH/wLcBt4+jQKc6Mh+sfcW/Sl8hpVbe1OeuP6+Qe4woSxtj
Vv7d91+vGANhX5SpPQxOZSXs2Rm1zV1xDwwrwb//PgtvckjSgZGfphHxEk6X5yte
RKxlo+RpGi/o4rtnpzamLoZhOM6xVgW9F9duX+1YXJqT6mSYOC0x5OLpOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcw4rsdD1hUhP+uYThhMY7P/yo6MB8GA1UdIwQY
MBaAFM0Mx/2ImLD330ud8LmTGbyynsJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEt
YWIwNjM5MzhmMWNlLzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEtYWIwNjM5MzhmMWNl
LzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4SKVnb9
YZirbOHtlLKJ25d++g+rFWpdIT471+gzApomCG07r87/peXpxGEIzH/1zmFhkfrK
WfRWeD56RI/ORS8tAS8ENx78p9ejqdzMF26fjzbD/OgCebiiVe5KKv9jk9xCX/xT
CMd6McnTE8P43ujKeBzur3SwseDToCuPUEfmzCPxOFVpomkoNEvYOxomvtPMvNEp
Z4bWSPHUjldWX2J4046WLdKi20bXBtWE/Tn0FvnbVqDTRAG8koRRWQI+js3g9Ssb
8xnNQ9tm3JKUh/EW0q0V9SD1DeWxzdm5p9x2Nx7DP/YsjFfZ96vuOnoLmUgtq9rE
Pl5CZKgfKczupw==
-----END CERTIFICATE-----