Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File:                     zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier:          SVn8EvWWo2+F6gH6rPYLVDHQ9/zDEByDslblUGF1tYc=
Subject key identifier:   88:33:D9:B0:11:39:E9:AE:3B:38:03:01:7F:1A:B5:19:6B:48:FB:C4
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer:       /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial:       01962F06920DD889535BC43DAD7144054251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number:          9F
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
                          2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: X2DgcluWW78SI6n99k2I4Y9U9XaZhFkE/xMNw+pkY3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:0d:d8:89:53:5b:c4:3d:ad:71:44:05:42:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=8833d9b01139e9ae3b3803017f1ab5196b48fbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:c3:d4:3b:5e:f0:23:45:d3:76:d8:67:65:
                    66:8c:1a:13:1b:f9:ce:c6:b7:05:7c:af:6c:08:33:
                    25:b0:f8:42:84:c4:42:3d:1a:4b:cf:c9:a2:10:80:
                    5d:52:f1:2e:8b:ab:12:b9:a3:00:52:f5:7c:19:26:
                    9f:b6:1a:68:4e:20:d2:06:a2:fa:d2:d6:d4:46:b8:
                    c6:e5:e8:2e:28:c4:9b:25:b7:4a:ee:e8:75:48:3d:
                    bd:0c:50:93:f8:71:2b:24:9d:dd:42:1b:11:85:57:
                    b0:a6:a9:f8:1b:3f:3a:52:54:e1:a6:88:01:9b:47:
                    83:17:e3:58:f8:e6:36:5e:a5:e6:18:eb:c4:bc:59:
                    c4:70:6a:0e:aa:a7:f7:ac:96:fd:f3:a5:cb:ef:da:
                    50:3c:8b:c7:56:6f:73:4d:9a:6b:17:72:b7:75:28:
                    84:52:32:de:c1:d9:b4:a0:e3:00:b2:b5:02:26:b9:
                    74:3a:20:45:83:c1:98:55:8e:a4:a3:94:39:f6:c4:
                    f5:4c:05:f9:e6:7f:c6:6a:3b:17:33:ab:1e:c2:a7:
                    14:bd:ef:27:87:32:38:af:e7:84:4c:10:46:a5:90:
                    70:97:95:94:a7:77:fa:50:db:cf:92:74:a8:68:2a:
                    44:f3:db:11:04:74:03:c0:e4:f2:50:63:f8:19:bb:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:D9:B0:11:39:E9:AE:3B:38:03:01:7F:1A:B5:19:6B:48:FB:C4
            X509v3 Authority Key Identifier:
                keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:44:5f:c7:cb:12:c2:23:a9:9c:4e:ac:07:a1:c6:30:6d:
         36:af:77:b1:2c:95:87:dd:2c:82:b3:98:e0:f7:19:f4:4f:c9:
         bb:48:b9:b6:a1:f8:b7:ea:17:fe:e2:b6:ea:f1:db:6c:ec:ed:
         57:46:19:6d:b9:09:4b:55:e4:63:2e:0a:3e:d2:87:e2:97:28:
         b5:5d:eb:14:9b:02:0b:2f:58:85:6d:54:be:3d:89:1e:e9:84:
         3c:94:20:d4:af:db:ed:9f:c5:b9:04:37:e4:e2:0d:ac:ad:b0:
         a4:f8:08:88:83:b0:db:2d:74:57:3e:b5:01:23:1d:a1:f1:74:
         87:b3:1a:3f:fc:aa:66:51:47:bd:ca:a9:f2:7e:71:bb:1a:ad:
         dc:2f:f4:85:ec:64:da:98:94:20:16:d6:ce:3c:ae:5a:97:a8:
         e4:f0:36:cd:6a:53:74:e7:90:77:4c:73:b7:ad:aa:62:a3:15:
         bf:84:fb:91:b3:48:7e:5d:f2:b6:35:88:b2:63:61:12:3e:3d:
         71:56:13:01:5b:a1:ec:59:e5:dc:17:d5:dc:39:a1:07:a5:b5:
         10:e9:7e:23:c1:b2:0b:13:98:23:97:94:ed:70:56:a6:7b:04:
         d3:0d:71:7f:9e:0a:74:87:cf:af:41:bc:3e:aa:80:0f:fa:78:
         68:40:be:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpIN2IlTW8Q9rXFEBUJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDJkYzRmMzhmOTZiNmQ0Nzc5Njk4OGVjZGRmMGM2ZDBj
NGU4MzIwHhcNMjUwNDEzMTIwMTIxWhcNMjUwNDE0MTIwMTIxWjAzMTEwLwYDVQQD
Eyg4ODMzZDliMDExMzllOWFlM2IzODAzMDE3ZjFhYjUxOTZiNDhmYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIPD1Dte8CNF03bYZ2VmjBoTG/nO
xrcFfK9sCDMlsPhChMRCPRpLz8miEIBdUvEui6sSuaMAUvV8GSafthpoTiDSBqL6
0tbURrjG5eguKMSbJbdK7uh1SD29DFCT+HErJJ3dQhsRhVewpqn4Gz86UlThpogB
m0eDF+NY+OY2XqXmGOvEvFnEcGoOqqf3rJb986XL79pQPIvHVm9zTZprF3K3dSiE
UjLewdm0oOMAsrUCJrl0OiBFg8GYVY6ko5Q59sT1TAX55n/GajsXM6sewqcUve8n
hzI4r+eETBBGpZBwl5WUp3f6UNvPknSoaCpE89sRBHQDwOTyUGP4Gbuv8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgz2bAROemuOzgDAX8atRlrSPvEMB8GA1UdIwQY
MBaAFMzS3E84+WttR3lpiOzd8MbQxOgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTIt
NDYwYzg5YjM5MmIzLzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTItNDYwYzg5YjM5MmIz
LzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpxEX8fL
EsIjqZxOrAehxjBtNq93sSyVh90sgrOY4PcZ9E/Ju0i5tqH4t+oX/uK26vHbbOzt
V0YZbbkJS1XkYy4KPtKH4pcotV3rFJsCCy9YhW1Uvj2JHumEPJQg1K/b7Z/FuQQ3
5OINrK2wpPgIiIOw2y10Vz61ASMdofF0h7MaP/yqZlFHvcqp8n5xuxqt3C/0hexk
2piUIBbWzjyuWpeo5PA2zWpTdOeQd0xzt62qYqMVv4T7kbNIfl3ytjWIsmNhEj49
cVYTAVuh7Fnl3BfV3DmhB6W1EOl+I8GyCxOYI5eU7XBWpnsE0w1xf54KdIfPr0G8
PqqAD/p4aEC+WA==
-----END CERTIFICATE-----