Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File:                     TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier:          UW9gj7VRDxOLvZee1bxiOVjbPW2CZw9wJBiYYC0hHb4=
Subject key identifier:   70:3B:E2:C4:0A:71:B0:18:CE:DC:D8:A6:FF:A5:3C:7F:E9:C2:CD:BF
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer:       /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial:       01962E61A7116495D6D29EB9A10D31AB5C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number:          0766
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: SHR73/J2tZbnfG4dApGvH8O69eVwNorFzcKFx7e+DrA=)
                          2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a7:11:64:95:d6:d2:9e:b9:a1:0d:31:ab:5c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=703be2c40a71b018cedcd8a6ffa53c7fe9c2cdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:df:3f:cc:72:48:3a:d7:fe:09:00:4b:dd:
                    36:25:96:c2:7e:f5:f1:24:90:3b:fa:20:6c:bd:46:
                    5c:23:3b:67:79:4b:60:65:a5:5b:1f:d6:3f:7b:30:
                    54:c2:17:27:57:6d:fd:1a:27:d7:a7:9c:ac:be:79:
                    71:47:1c:29:2e:97:f3:73:15:3a:fb:77:b2:e8:68:
                    13:45:fd:95:e2:75:01:17:92:85:f0:6e:9b:1d:16:
                    31:38:c7:fb:e4:bb:04:e8:83:53:f4:df:09:89:7f:
                    28:dc:78:f7:f6:b4:02:5b:9b:f4:6d:94:6f:9d:e8:
                    b2:7c:a1:55:ad:20:2e:f3:05:2c:df:0c:bc:15:85:
                    c4:70:db:50:ca:67:3d:3d:a9:c3:73:7a:3b:b1:c7:
                    e9:68:93:c1:c7:f8:37:c1:0b:00:fb:e4:5d:7f:86:
                    a8:d0:01:c4:09:9a:2c:8c:7b:c5:9c:c8:7b:a4:26:
                    05:d6:0d:45:a4:02:7b:23:ee:19:cb:f7:e3:9e:85:
                    e0:04:0b:d8:ad:98:b5:27:73:cc:64:67:fb:f0:0a:
                    70:a0:fa:32:22:e8:03:53:20:41:5e:e0:d0:27:d9:
                    86:23:a1:e9:5b:c3:3a:88:b4:a2:23:cd:b7:0a:21:
                    a8:c8:88:ec:e5:06:49:54:16:57:76:36:8f:3b:95:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3B:E2:C4:0A:71:B0:18:CE:DC:D8:A6:FF:A5:3C:7F:E9:C2:CD:BF
            X509v3 Authority Key Identifier:
                keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:96:56:89:f4:9d:5b:84:e1:87:6b:b5:9e:a3:11:9f:e6:6c:
         e9:02:73:e7:61:f1:40:0d:b7:9f:3c:46:12:ad:9b:f1:49:fe:
         ac:72:4b:6c:61:7b:20:56:59:d5:31:9d:2b:7f:a0:14:1c:51:
         e5:36:01:31:8f:87:7c:86:2b:07:99:49:06:c2:7d:b9:79:03:
         46:07:87:6e:fc:40:be:4e:24:b2:63:0a:da:f3:44:a9:4e:a2:
         f4:d2:ba:98:55:20:fb:a6:bd:b9:dd:cb:af:86:6e:7c:6c:47:
         40:dc:04:5c:4e:64:2f:56:a2:e3:8e:e8:d5:2f:ab:15:1e:17:
         cc:1c:6d:94:71:44:ef:e5:69:9c:75:45:43:54:10:55:cf:ef:
         af:7f:8a:0b:97:20:79:4d:ae:e8:bb:3f:25:a1:23:47:74:60:
         d5:f2:4d:29:c9:8b:76:bd:8c:84:37:0d:26:eb:47:69:b8:37:
         68:a6:d4:5a:68:1c:5e:39:2c:32:e8:a4:90:7e:ed:01:fa:c1:
         cd:8c:06:a7:05:ff:4c:78:90:bb:88:eb:d3:a0:bb:04:ee:1a:
         74:56:45:47:55:2b:b8:22:72:b7:0a:58:9f:0c:32:8d:85:53:
         f9:f6:12:00:93:8a:16:24:27:e9:83:40:4f:dc:42:46:6f:d9:
         c3:ab:ce:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYacRZJXW0p65oQ0xq1xqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl
MDdkNWUwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
Eyg3MDNiZTJjNDBhNzFiMDE4Y2VkY2Q4YTZmZmE1M2M3ZmU5YzJjZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF3fP8xySDrX/gkAS902JZbCfvXx
JJA7+iBsvUZcIztneUtgZaVbH9Y/ezBUwhcnV239GifXp5ysvnlxRxwpLpfzcxU6
+3ey6GgTRf2V4nUBF5KF8G6bHRYxOMf75LsE6INT9N8JiX8o3Hj39rQCW5v0bZRv
neiyfKFVrSAu8wUs3wy8FYXEcNtQymc9PanDc3o7scfpaJPBx/g3wQsA++Rdf4ao
0AHECZosjHvFnMh7pCYF1g1FpAJ7I+4Zy/fjnoXgBAvYrZi1J3PMZGf78ApwoPoy
IugDUyBBXuDQJ9mGI6HpW8M6iLSiI823CiGoyIjs5QZJVBZXdjaPO5WJKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA74sQKcbAYztzYpv+lPH/pws2/MB8GA1UdIwQY
MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt
NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh
LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZZWifSd
W4Thh2u1nqMRn+Zs6QJz52HxQA23nzxGEq2b8Un+rHJLbGF7IFZZ1TGdK3+gFBxR
5TYBMY+HfIYrB5lJBsJ9uXkDRgeHbvxAvk4ksmMK2vNEqU6i9NK6mFUg+6a9ud3L
r4ZufGxHQNwEXE5kL1ai447o1S+rFR4XzBxtlHFE7+VpnHVFQ1QQVc/vr3+KC5cg
eU2u6Ls/JaEjR3Rg1fJNKcmLdr2MhDcNJutHabg3aKbUWmgcXjksMuikkH7tAfrB
zYwGpwX/THiQu4jr06C7BO4adFZFR1UruCJytwpYnwwyjYVT+fYSAJOKFiQn6YNA
T9xCRm/Zw6vOvQ==
-----END CERTIFICATE-----