Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File:                     ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier:          e9xBTfZ297gepWCK2zz+pyCwHxN2NCi1nc9Pvvlnu10=
Subject key identifier:   78:8B:67:3F:6C:02:DC:7D:B6:82:EF:7D:8D:20:89:43:28:72:F6:B6
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer:       /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial:       01962E99BA0C912A970A0CF3DA484B356873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number:          0B04
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
                          2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: 9e+XJLRu+Rd8kGY28pmwxTZs1qM4vyGgfwfUjhn+cyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ba:0c:91:2a:97:0a:0c:f3:da:48:4b:35:68:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=788b673f6c02dc7db682ef7d8d2089432872f6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:53:31:07:c5:0c:4e:e5:7f:a2:4c:ad:81:
                    ba:e1:57:1b:3b:c6:97:38:e6:7b:1d:72:67:ef:f7:
                    d4:d8:17:f6:70:15:be:43:63:8d:a6:f8:aa:14:1f:
                    62:b1:65:fa:60:4f:d4:7b:27:de:47:54:37:f2:90:
                    85:bf:eb:24:7c:e4:b1:aa:4c:61:0f:a2:e2:d0:f1:
                    14:14:11:cf:b8:70:e6:8f:2b:a7:db:c4:25:07:79:
                    83:58:0a:95:d0:52:55:b6:b8:1a:7e:de:2a:69:0e:
                    9a:5c:4e:63:b1:0a:ac:4a:41:f7:00:1f:8a:e3:b5:
                    88:1a:3e:64:d8:28:29:bf:ae:54:02:71:42:c7:5d:
                    31:ba:9f:38:5d:a5:2d:ed:be:08:b8:50:72:c8:8b:
                    4e:ed:26:a8:84:b9:5b:24:4d:0e:35:23:d4:f8:82:
                    22:16:dd:20:fe:66:0e:58:5b:cc:77:cc:40:b3:5d:
                    aa:c0:01:e0:2e:93:b5:e4:8b:56:12:b4:ab:f5:93:
                    11:dc:19:76:1c:6c:36:d6:ee:58:f2:19:3a:3c:59:
                    25:7c:83:6e:b1:67:a3:86:37:c9:38:67:19:e3:a5:
                    7e:a6:50:88:bf:eb:e0:dd:8d:09:9d:f8:7f:5e:37:
                    1e:7e:20:ce:8d:a1:1b:4b:83:46:24:dd:7b:2c:a0:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:67:3F:6C:02:DC:7D:B6:82:EF:7D:8D:20:89:43:28:72:F6:B6
            X509v3 Authority Key Identifier:
                keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:dc:97:9d:21:c2:d8:dd:cc:2e:8b:84:68:7e:cd:f2:a9:
         91:c9:f6:64:b9:a1:04:14:c0:30:92:71:66:9c:83:be:58:43:
         d2:d4:04:dc:15:1a:ea:32:98:ef:d8:dc:e1:f6:34:42:ac:c8:
         e6:f9:04:8d:ed:96:7d:fd:c0:a3:29:3f:d0:70:68:fb:1e:6e:
         2d:7e:b3:9d:9c:18:7d:62:9e:33:38:0c:93:5f:38:59:76:c6:
         35:dc:bf:cb:6c:93:c8:a0:9d:2c:b6:88:e1:f0:ec:5b:56:83:
         97:51:32:99:2c:00:b3:00:c2:08:27:e6:ac:8f:54:c7:0c:f4:
         a6:c2:b4:0b:09:83:7c:7f:36:dd:9b:8e:12:d9:1c:d8:e7:5e:
         64:88:cd:e3:76:cd:d7:b9:1e:ac:83:43:38:d5:ee:ff:b1:01:
         a1:0a:63:51:c2:ce:35:90:f5:09:05:31:82:78:2f:83:71:5f:
         91:32:44:81:dc:c8:ad:07:64:17:f0:6c:0a:b1:cf:76:83:78:
         2c:d3:66:cf:c8:30:59:a2:28:d6:4f:06:9f:f3:50:c5:f4:f7:
         ff:d2:18:0b:ab:0d:b8:e7:14:e2:af:da:41:95:2b:56:9b:d1:
         7c:23:61:fc:0b:5d:65:19:bc:a5:02:be:da:ca:bd:b2:72:7d:
         6f:4c:1d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumboMkSqXCgzz2khLNWhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjAxMjljMjIxZjdhNDc4MTI4ODVhNjQ4MzhiMTJlZTZi
MTVlZDUwHhcNMjUwNDEzMTAwMjI4WhcNMjUwNDE0MTAwMjI4WjAzMTEwLwYDVQQD
Eyg3ODhiNjczZjZjMDJkYzdkYjY4MmVmN2Q4ZDIwODk0MzI4NzJmNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqRTMQfFDE7lf6JMrYG64VcbO8aX
OOZ7HXJn7/fU2Bf2cBW+Q2ONpviqFB9isWX6YE/UeyfeR1Q38pCFv+skfOSxqkxh
D6Li0PEUFBHPuHDmjyun28QlB3mDWAqV0FJVtrgaft4qaQ6aXE5jsQqsSkH3AB+K
47WIGj5k2Cgpv65UAnFCx10xup84XaUt7b4IuFByyItO7SaohLlbJE0ONSPU+IIi
Ft0g/mYOWFvMd8xAs12qwAHgLpO15ItWErSr9ZMR3Bl2HGw21u5Y8hk6PFklfINu
sWejhjfJOGcZ46V+plCIv+vg3Y0Jnfh/XjcefiDOjaEbS4NGJN17LKA/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiLZz9sAtx9toLvfY0giUMocva2MB8GA1UdIwQY
MBaAFGRgEpwiH3pHgSiFpkg4sS7msV7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hNjQ2YWYtZTYxZC00OGI2LTg5ZDIt
ZWJhOTg4YTU0OGU3LzEvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hNjQ2YWYtZTYxZC00OGI2LTg5ZDItZWJhOTg4YTU0OGU3
LzEvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlfcl50h
wtjdzC6LhGh+zfKpkcn2ZLmhBBTAMJJxZpyDvlhD0tQE3BUa6jKY79jc4fY0QqzI
5vkEje2Wff3Aoyk/0HBo+x5uLX6znZwYfWKeMzgMk184WXbGNdy/y2yTyKCdLLaI
4fDsW1aDl1EymSwAswDCCCfmrI9Uxwz0psK0CwmDfH823ZuOEtkc2OdeZIjN43bN
17kerINDONXu/7EBoQpjUcLONZD1CQUxgngvg3FfkTJEgdzIrQdkF/BsCrHPdoN4
LNNmz8gwWaIo1k8Gn/NQxfT3/9IYC6sNuOcU4q/aQZUrVpvRfCNh/AtdZRm8pQK+
2sq9snJ9b0wdUg==
-----END CERTIFICATE-----