Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File:                     mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier:          Y8pPjkKt/EeCk/WTzJyHc7qDNGpeHFxuyE7hlKFna9Y=
Subject key identifier:   4F:31:7B:1D:C3:2D:F5:3A:6C:47:2B:06:E4:E3:CE:03:1B:51:33:96
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer:       /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial:       01962FAB0ADE1C8F81FDA13C12B96C13D572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: 7TyGUQq5_upn7OI_8rMQkinORFg.roa (hash: KGYsAjI6sTjQq+H3tQWHe4y4uTdeAqiVMRj2OW3ueCg=)
                          2: An6YNgwh93187k654T-zbgMGRlg.roa (hash: nmjx1IvTXJQBFo0I6BDxNzxZSqlRyAfA/ku4fVVGSzU=)
                          3: lCx0H2SpviByt755DhYFFB87u3g.roa (hash: AZWgazLt+yp5aameWZEf9hj1qI2zyq8kEBHr5Xd8xo4=)
                          4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: mDnoerB36oSW/20j0jPTMgpCTvzKSjvsN2U5jgF9Vd0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0a:de:1c:8f:81:fd:a1:3c:12:b9:6c:13:d5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=4f317b1dc32df53a6c472b06e4e3ce031b513396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:2f:e3:e8:c5:2d:cf:a2:85:d1:7d:df:28:
                    31:8b:0a:c6:cd:a0:e1:e6:82:b1:f0:69:66:d1:44:
                    c6:84:08:7a:36:cc:ca:a2:a3:6e:fd:9a:eb:51:ac:
                    5f:1a:21:74:10:91:80:a6:e4:35:1f:32:07:29:4a:
                    87:07:20:fa:53:ca:15:36:ee:c2:ec:63:24:2b:52:
                    5b:1a:d1:0c:6b:34:2f:f7:a0:d8:e1:a9:b8:4b:ee:
                    cc:63:2e:e8:83:74:c1:50:19:e9:4d:d9:42:16:1a:
                    46:8f:4b:ab:7b:c4:40:20:96:7e:c3:85:b8:78:a0:
                    57:2c:aa:24:2c:a9:86:e5:a9:cd:7d:09:02:2e:4b:
                    58:a9:47:7f:a0:b5:af:fb:67:2e:75:ad:81:1d:36:
                    59:60:3e:ef:74:54:8c:79:1e:17:9d:c8:03:a0:e6:
                    4b:61:5e:9a:c4:ea:a2:d2:69:c8:b3:58:63:fa:6a:
                    66:95:80:05:1c:06:bf:2f:d8:7c:f3:f1:b3:a7:71:
                    33:54:ab:7e:b2:8f:4d:dc:1f:28:9e:de:92:37:e5:
                    40:32:81:07:bb:9a:ca:87:0b:c9:03:61:a2:2d:30:
                    c0:25:6e:d7:4c:2c:44:9c:65:bf:d4:c9:fc:6c:af:
                    b1:90:b3:58:84:dc:98:82:80:2d:c0:7d:66:cc:3a:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:31:7B:1D:C3:2D:F5:3A:6C:47:2B:06:E4:E3:CE:03:1B:51:33:96
            X509v3 Authority Key Identifier:
                keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:89:8e:58:6a:06:f0:6c:be:ff:23:29:3b:df:b4:05:0b:6a:
         cf:1e:ae:2a:8e:e0:bc:04:96:08:d3:32:9e:5f:04:56:06:00:
         1f:76:64:94:30:d8:ee:51:81:2e:bd:c5:de:95:41:ba:a8:6a:
         28:6a:45:66:e4:aa:83:c4:71:aa:e6:98:f5:02:fd:45:97:6c:
         8e:38:bc:9b:d8:02:7f:0b:b8:12:dc:8a:c3:f7:11:80:05:ce:
         10:5e:f4:89:96:6d:24:2a:05:36:32:27:24:d5:67:f2:e9:79:
         a0:73:f1:ef:ab:13:37:42:29:f2:8f:cf:68:97:0b:06:22:63:
         fd:13:03:64:0d:4f:77:f7:ad:ec:cb:10:53:d5:50:72:17:c7:
         8d:d3:d7:29:c1:27:81:bc:d7:76:35:37:fd:9e:3b:9a:3d:47:
         e2:f0:53:b9:0b:9e:d0:c7:77:98:6f:0f:97:18:c8:b6:31:ca:
         76:8f:3c:6b:09:b3:e8:2e:c3:dc:ac:58:ae:49:32:6c:45:34:
         15:b5:cd:d0:30:16:09:24:f8:9f:ef:f5:2b:2f:eb:4d:d2:0e:
         b8:d1:f4:6d:f6:9c:d0:94:97:b9:04:f6:0f:42:c6:5e:3b:24:
         4b:52:db:85:33:39:dc:3d:3e:08:f1:b8:02:e5:74:79:db:e1:
         d4:e1:96:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwreHI+B/aE8ErlsE9VyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi
Yzk5OTEwHhcNMjUwNDEzMTUwMTAwWhcNMjUwNDE0MTUwMTAwWjAzMTEwLwYDVQQD
Eyg0ZjMxN2IxZGMzMmRmNTNhNmM0NzJiMDZlNGUzY2UwMzFiNTEzMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwUv4+jFLc+ihdF93ygxiwrGzaDh
5oKx8Glm0UTGhAh6NszKoqNu/ZrrUaxfGiF0EJGApuQ1HzIHKUqHByD6U8oVNu7C
7GMkK1JbGtEMazQv96DY4am4S+7MYy7og3TBUBnpTdlCFhpGj0ure8RAIJZ+w4W4
eKBXLKokLKmG5anNfQkCLktYqUd/oLWv+2cuda2BHTZZYD7vdFSMeR4XncgDoOZL
YV6axOqi0mnIs1hj+mpmlYAFHAa/L9h88/Gzp3EzVKt+so9N3B8ont6SN+VAMoEH
u5rKhwvJA2GiLTDAJW7XTCxEnGW/1Mn8bK+xkLNYhNyYgoAtwH1mzDqk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8xex3DLfU6bEcrBuTjzgMbUTOWMB8GA1UdIwQY
MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt
ZTNhYjkwODdkNDAzLzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz
LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYmOWGoG
8Gy+/yMpO9+0BQtqzx6uKo7gvASWCNMynl8EVgYAH3ZklDDY7lGBLr3F3pVBuqhq
KGpFZuSqg8RxquaY9QL9RZdsjji8m9gCfwu4EtyKw/cRgAXOEF70iZZtJCoFNjIn
JNVn8ul5oHPx76sTN0Ip8o/PaJcLBiJj/RMDZA1Pd/et7MsQU9VQchfHjdPXKcEn
gbzXdjU3/Z47mj1H4vBTuQue0Md3mG8PlxjItjHKdo88awmz6C7D3KxYrkkybEU0
FbXN0DAWCST4n+/1Ky/rTdIOuNH0bfac0JSXuQT2D0LGXjskS1LbhTM53D0+CPG4
AuV0edvh1OGWUA==
-----END CERTIFICATE-----