Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File:                     ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier:          CbKi4oSizhi8CxgLkNMn6LEwsDc3drdZM4gXBrf3wzg=
Subject key identifier:   F8:F8:BD:D0:FE:3F:2F:E7:33:DA:42:C8:5A:B2:7A:35:89:90:0B:FF
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer:       /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial:       01962DF3CD75D4927D7FD60C9FE28EB8E5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number:          89
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=)
                          2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: sTHXkEuh1Gs1+5y4v3OjvftDDjW0rj/0dD92NbkM7jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cd:75:d4:92:7d:7f:d6:0c:9f:e2:8e:b8:e5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=f8f8bdd0fe3f2fe733da42c85ab27a3589900bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:3a:17:f4:8a:c2:9a:e9:fc:d1:ac:fd:35:
                    24:43:c3:0a:0c:3a:ac:20:ec:f3:09:13:dd:1d:10:
                    d9:0e:9d:73:f6:2b:d5:a8:e7:c2:3a:4c:74:27:14:
                    a8:88:ec:9d:73:a3:e8:9c:d0:9a:11:43:ce:bd:a5:
                    66:3b:1f:5b:84:9b:11:89:e3:08:54:a1:48:ae:2d:
                    b4:23:51:ea:38:9d:ac:e9:69:ec:3a:35:1b:ef:58:
                    4f:e1:c0:e2:e6:12:f1:43:64:aa:92:00:8b:ab:c6:
                    e4:05:af:fb:8f:9a:25:e3:7f:ae:3d:ac:77:94:3a:
                    26:7e:a6:e5:c2:65:c1:1a:48:fb:d6:c8:8b:9f:e8:
                    d7:df:0b:1d:26:89:5a:bb:bb:d8:41:97:7b:f9:e9:
                    71:25:da:25:dd:48:40:4f:01:bb:19:f2:d5:d3:5f:
                    d9:cd:36:8d:ec:9a:bc:ce:c5:b4:15:68:d2:1a:1e:
                    49:2d:5b:11:3a:8e:24:6a:92:cb:2e:a8:c9:d0:58:
                    b5:12:b9:42:d4:89:ee:a9:c1:e2:17:59:c2:61:c2:
                    32:3f:17:2e:18:38:88:f1:1a:7b:16:e2:2c:cc:00:
                    58:e9:53:12:bf:0c:d9:e7:8a:e9:77:5f:2b:9a:60:
                    5e:ad:28:b8:fd:52:87:d3:22:aa:86:4a:d6:50:24:
                    29:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F8:BD:D0:FE:3F:2F:E7:33:DA:42:C8:5A:B2:7A:35:89:90:0B:FF
            X509v3 Authority Key Identifier:
                keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:2c:97:26:f9:22:73:f4:9e:50:3c:50:5e:7e:55:8d:7b:
         c4:af:2c:8a:39:72:97:b9:d2:7d:a6:f7:74:ee:cf:99:8e:2c:
         b3:fa:cf:47:08:e5:aa:8e:bf:35:8c:3e:20:bd:f3:11:59:71:
         cf:90:4e:7c:1d:0a:24:b2:53:43:46:cc:24:a4:56:7f:3d:4e:
         93:71:f5:06:e2:66:f8:c2:1c:1e:2c:24:f0:82:43:de:d1:2f:
         56:99:54:e7:e1:a3:da:e9:f9:35:41:40:80:55:22:bd:4c:4e:
         2b:91:f2:8a:ec:9b:b9:bf:f5:48:1a:dd:03:33:d9:67:4d:1f:
         a2:8a:fa:a2:25:4b:5b:66:a3:a8:67:b2:ca:5a:4b:95:cc:37:
         18:63:8a:78:82:8b:81:08:ec:cf:42:ad:14:a0:2e:11:3c:20:
         03:64:e8:ff:7a:89:55:b2:d3:d5:f5:02:03:fd:90:ce:dc:28:
         32:7f:da:29:25:a8:64:26:f9:ec:2b:f1:e5:8a:9c:1c:bb:f1:
         97:8a:b5:d8:d2:c7:51:d7:eb:43:32:47:93:42:0a:ca:e9:2b:
         d9:19:ce:be:a2:98:45:33:5c:fb:65:4a:63:18:82:a9:11:a5:
         95:f3:5d:5e:fb:24:8e:31:b6:bc:df:83:cd:25:c2:fd:12:1c:
         92:43:26:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88111JJ9f9YMn+KOuOWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NTQ5MDNhYjQ4NWIxNmNjYTg2MmQxNWU2ZDkzZmJhMGU0
ZGRlMDEwHhcNMjUwNDEzMDcwMTE0WhcNMjUwNDE0MDcwMTE0WjAzMTEwLwYDVQQD
EyhmOGY4YmRkMGZlM2YyZmU3MzNkYTQyYzg1YWIyN2EzNTg5OTAwYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukE6F/SKwprp/NGs/TUkQ8MKDDqs
IOzzCRPdHRDZDp1z9ivVqOfCOkx0JxSoiOydc6PonNCaEUPOvaVmOx9bhJsRieMI
VKFIri20I1HqOJ2s6WnsOjUb71hP4cDi5hLxQ2SqkgCLq8bkBa/7j5ol43+uPax3
lDomfqblwmXBGkj71siLn+jX3wsdJolau7vYQZd7+elxJdol3UhATwG7GfLV01/Z
zTaN7Jq8zsW0FWjSGh5JLVsROo4kapLLLqjJ0Fi1ErlC1InuqcHiF1nCYcIyPxcu
GDiI8Rp7FuIszABY6VMSvwzZ54rpd18rmmBerSi4/VKH0yKqhkrWUCQpBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj4vdD+Py/nM9pCyFqyejWJkAv/MB8GA1UdIwQY
MBaAFGRUkDq0hbFsyoYtFebZP7oOTd4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjIt
MDY1NmQwYjM0YjI0LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjItMDY1NmQwYjM0YjI0
LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkMslyb5
InP0nlA8UF5+VY17xK8sijlyl7nSfab3dO7PmY4ss/rPRwjlqo6/NYw+IL3zEVlx
z5BOfB0KJLJTQ0bMJKRWfz1Ok3H1BuJm+MIcHiwk8IJD3tEvVplU5+Gj2un5NUFA
gFUivUxOK5Hyiuybub/1SBrdAzPZZ00foor6oiVLW2ajqGeyylpLlcw3GGOKeIKL
gQjsz0KtFKAuETwgA2To/3qJVbLT1fUCA/2QztwoMn/aKSWoZCb57Cvx5YqcHLvx
l4q12NLHUdfrQzJHk0IKyukr2RnOvqKYRTNc+2VKYxiCqRGllfNdXvskjjG2vN+D
zSXC/RIckkMmgg==
-----END CERTIFICATE-----