Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          Fu4HWmuqZxok0ZL7+PJV0HP34FfEL6pCvH9jIRsCNig=
Subject key identifier:   89:8F:A1:2E:8B:26:9E:09:E0:00:89:ED:71:7F:41:6B:2B:58:2B:56
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       01962E990F96ADAFF5710E32E06D3B01D127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          0445
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: bzVu5Bz8u4OYT6EV8++/c88YBVVpGi+i6Spj760Sax4=)
                          2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:96:ad:af:f5:71:0e:32:e0:6d:3b:01:d1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=898fa12e8b269e09e00089ed717f416b2b582b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:79:dd:4f:1f:ff:b2:7d:ae:8b:af:5d:64:
                    84:be:5d:25:5f:5d:8d:cb:4d:47:40:e4:fe:8b:a4:
                    2c:1a:b5:be:1c:32:e8:54:20:5b:04:a5:89:fa:7c:
                    24:74:8b:d6:b9:aa:92:56:d4:99:d6:35:9c:c7:97:
                    7a:c4:b3:a2:71:21:81:d4:41:3b:ca:72:cd:9e:dc:
                    05:f7:0c:c0:8f:f0:cd:86:40:bd:70:91:9d:69:21:
                    b5:1b:8e:05:4d:54:d5:78:1c:98:80:50:c8:ba:df:
                    d7:d2:d5:56:79:66:55:ee:2f:76:39:1f:ed:10:ff:
                    bd:74:13:7e:45:d2:f3:b0:24:f2:23:6a:0f:40:47:
                    da:67:5e:38:dd:c4:ce:2f:d4:40:22:3a:05:6d:2a:
                    1d:f7:3a:f2:a6:0e:4f:79:e0:05:3d:57:44:98:5c:
                    86:cd:a0:bd:8e:8f:07:a4:6c:6a:0f:db:07:50:af:
                    5f:56:af:9e:d0:c6:ec:1e:b4:30:31:ce:b8:50:2f:
                    93:31:c6:44:cb:8b:6a:ec:4c:64:d0:1a:e0:d5:c0:
                    d0:85:6b:3f:3f:52:86:26:b3:73:ef:f6:5a:27:00:
                    70:04:dc:c3:10:c3:ba:97:af:a5:b6:66:c7:11:6a:
                    7d:91:79:74:92:ca:8f:78:42:cb:c0:4c:2a:80:f8:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8F:A1:2E:8B:26:9E:09:E0:00:89:ED:71:7F:41:6B:2B:58:2B:56
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:a8:8a:60:b1:96:da:4d:2b:54:9e:30:67:00:2e:4e:30:
         a4:c8:e8:a5:b7:75:de:b3:b0:35:ca:76:74:3f:48:53:a4:92:
         13:b5:b1:e7:b8:a0:1d:4e:ed:ee:3f:07:f9:ca:78:76:6d:ac:
         15:ad:a0:67:52:3a:94:69:0d:94:7d:b8:5a:50:7e:85:6c:cc:
         1b:37:0e:0d:0c:cf:df:94:39:f1:e2:d0:a3:1b:b8:3e:ab:1e:
         a3:e3:00:fa:07:31:18:d0:68:10:23:d6:b8:12:d6:ae:0f:d9:
         a2:57:83:67:88:f9:f9:f7:3f:f9:18:0b:94:50:c1:1e:f0:f6:
         a7:f8:61:3f:d3:76:68:9e:69:fa:b6:0e:3b:d3:02:5b:cb:0f:
         80:da:48:3a:80:92:fc:6f:a7:76:43:1d:f3:19:9e:aa:59:d9:
         66:cf:7d:98:74:03:6c:78:b8:98:4d:14:27:96:5b:56:97:ca:
         8a:b4:90:ca:51:c2:8c:c9:28:5f:11:75:75:8d:a1:29:6e:7a:
         24:5e:29:9d:21:34:28:21:3f:08:f2:d3:85:f8:7b:7c:89:9b:
         77:55:71:3e:94:85:fc:3b:7a:33:81:a1:38:7e:15:00:fc:08:
         5c:51:aa:21:af:61:2a:ac:d2:92:7a:ba:18:54:6d:c5:ff:7c:
         f8:5d:dd:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQ+Wra/1cQ4y4G07AdEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NGM1MDdhMGNkYjUzMTM3NDQzN2ViZjQ2ZGQ1OWE2YmQw
NzQ4NmMwHhcNMjUwNDEzMTAwMTQ0WhcNMjUwNDE0MTAwMTQ0WjAzMTEwLwYDVQQD
Eyg4OThmYTEyZThiMjY5ZTA5ZTAwMDg5ZWQ3MTdmNDE2YjJiNTgyYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6d53U8f/7J9rouvXWSEvl0lX12N
y01HQOT+i6QsGrW+HDLoVCBbBKWJ+nwkdIvWuaqSVtSZ1jWcx5d6xLOicSGB1EE7
ynLNntwF9wzAj/DNhkC9cJGdaSG1G44FTVTVeByYgFDIut/X0tVWeWZV7i92OR/t
EP+9dBN+RdLzsCTyI2oPQEfaZ1443cTOL9RAIjoFbSod9zrypg5PeeAFPVdEmFyG
zaC9jo8HpGxqD9sHUK9fVq+e0MbsHrQwMc64UC+TMcZEy4tq7Exk0Brg1cDQhWs/
P1KGJrNz7/ZaJwBwBNzDEMO6l6+ltmbHEWp9kXl0ksqPeELLwEwqgPjoRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImPoS6LJp4J4ACJ7XF/QWsrWCtWMB8GA1UdIwQY
MBaAFGdMUHoM21MTdEN+v0bdWaa9B0hsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2Ut
NGIzNWFkNzBjYzFhLzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2UtNGIzNWFkNzBjYzFh
LzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc2oimCx
ltpNK1SeMGcALk4wpMjopbd13rOwNcp2dD9IU6SSE7Wx57igHU7t7j8H+cp4dm2s
Fa2gZ1I6lGkNlH24WlB+hWzMGzcODQzP35Q58eLQoxu4Pqseo+MA+gcxGNBoECPW
uBLWrg/ZoleDZ4j5+fc/+RgLlFDBHvD2p/hhP9N2aJ5p+rYOO9MCW8sPgNpIOoCS
/G+ndkMd8xmeqlnZZs99mHQDbHi4mE0UJ5ZbVpfKirSQylHCjMkoXxF1dY2hKW56
JF4pnSE0KCE/CPLThfh7fImbd1VxPpSF/Dt6M4GhOH4VAPwIXFGqIa9hKqzSknq6
GFRtxf98+F3dtg==
-----END CERTIFICATE-----