Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File:                     Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier:          3WzqOqStCCaDQlONepFZif1/IprQEZUffJThDmNS2DY=
Subject key identifier:   2A:2E:52:8F:4E:91:C4:69:9D:33:C7:EF:7D:89:B6:24:00:C9:55:87
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer:       /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial:       01962ECFDC1E032725B75E13CE33719D5B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number:          1161
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=)
                          2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: PkCgDvk280KTY938geUakTecXKd5uAmayxP9N6ljx7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dc:1e:03:27:25:b7:5e:13:ce:33:71:9d:5b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=2a2e528f4e91c4699d33c7ef7d89b62400c95587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:5a:bb:ba:9b:b5:1d:7c:69:44:d9:a2:a4:
                    b8:68:c5:1b:c3:dd:de:ea:a3:b3:3a:78:68:a8:f4:
                    74:1c:0a:dd:39:17:70:09:bf:15:78:90:44:8c:a4:
                    dd:9c:f2:71:27:7a:fe:be:94:39:bc:29:e8:b5:b6:
                    08:e6:50:1a:80:03:06:83:55:6e:b4:a4:4b:f4:22:
                    a6:a4:3b:66:73:9c:17:35:69:71:09:6c:ef:a8:3c:
                    fc:45:0a:4e:b4:69:2f:f1:8a:84:34:3e:5f:5a:b9:
                    30:c6:d9:2d:a8:b3:3d:e1:2f:da:69:b5:9a:f0:4c:
                    36:0d:14:af:e0:83:ac:13:c8:6c:57:9a:7d:e2:2f:
                    a3:f7:c4:e2:d6:66:e9:b0:e8:5f:09:a2:c8:d5:91:
                    f0:95:16:b5:c2:94:88:65:28:d2:6a:5d:f3:fa:17:
                    64:9e:ce:34:1b:da:ba:7c:09:8c:84:71:f1:ae:80:
                    9f:2b:10:e3:34:e3:c0:ca:d8:b8:54:a5:e9:94:24:
                    40:ef:72:d4:99:4b:db:a3:42:ec:70:06:6c:f8:98:
                    5a:69:a9:4c:a6:2e:53:37:88:ed:79:58:b7:e9:80:
                    95:64:6e:f9:ee:1f:46:9c:d8:0f:be:d6:36:6d:59:
                    2a:07:c3:de:fa:e4:90:48:be:f7:95:81:37:bb:97:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2E:52:8F:4E:91:C4:69:9D:33:C7:EF:7D:89:B6:24:00:C9:55:87
            X509v3 Authority Key Identifier:
                keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:f0:45:b9:15:5f:84:ad:63:63:f1:29:7c:0b:15:05:39:
         69:f2:dc:b5:e1:45:fd:f9:3b:a1:f4:a4:68:97:34:4a:11:05:
         16:1f:8b:70:22:8e:fc:45:2f:ea:af:ea:2c:00:cf:74:95:f9:
         eb:ae:ed:97:e0:ad:ee:bd:8c:cd:45:38:33:cd:6f:f9:29:a0:
         8c:89:14:8d:80:d5:da:cb:cb:a5:6d:58:66:6f:93:1d:96:5d:
         da:65:7b:18:61:1c:c1:1d:23:bf:0d:b2:98:88:5b:33:7d:80:
         cd:e8:0d:bb:3b:34:f8:c2:f5:26:22:a1:be:3a:33:a0:a9:e0:
         33:ad:39:5a:7d:4d:53:72:d9:63:3e:49:e2:e0:7a:c4:c7:d3:
         cf:f2:70:93:46:0b:a7:68:82:4f:58:02:5f:89:ae:81:e9:a9:
         ce:b2:59:ee:27:88:98:53:f7:a5:c2:33:2e:39:10:7e:87:ec:
         5f:ca:17:cb:92:fd:89:0e:97:ea:e5:32:2e:cf:f6:19:72:07:
         ce:2c:8a:4c:8a:64:f2:a0:f7:bd:86:f7:aa:82:90:b8:76:79:
         cb:66:fe:bd:8c:a9:74:1e:ec:40:33:60:72:a8:66:4c:30:41:
         66:f7:3b:9e:71:ee:61:84:b3:f5:99:3e:f9:cd:78:5b:cf:1e:
         36:42:b6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9weAyclt14TzjNxnVuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2MzYTUyM2JlYTIyNGE3NGJjOTZhNGFmNDE2NGMyNDc4
NmI4MmUwHhcNMjUwNDEzMTEwMTM2WhcNMjUwNDE0MTEwMTM2WjAzMTEwLwYDVQQD
EygyYTJlNTI4ZjRlOTFjNDY5OWQzM2M3ZWY3ZDg5YjYyNDAwYzk1NTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVNau7qbtR18aUTZoqS4aMUbw93e
6qOzOnhoqPR0HArdORdwCb8VeJBEjKTdnPJxJ3r+vpQ5vCnotbYI5lAagAMGg1Vu
tKRL9CKmpDtmc5wXNWlxCWzvqDz8RQpOtGkv8YqEND5fWrkwxtktqLM94S/aabWa
8Ew2DRSv4IOsE8hsV5p94i+j98Ti1mbpsOhfCaLI1ZHwlRa1wpSIZSjSal3z+hdk
ns40G9q6fAmMhHHxroCfKxDjNOPAyti4VKXplCRA73LUmUvbo0LscAZs+JhaaalM
pi5TN4jteVi36YCVZG757h9GnNgPvtY2bVkqB8Pe+uSQSL73lYE3u5dBzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCouUo9OkcRpnTPH732JtiQAyVWHMB8GA1UdIwQY
MBaAFGfMOlI76iJKdLyWpK9BZMJHhrguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEt
N2NmYjE5ZjZlMTMzLzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEtN2NmYjE5ZjZlMTMz
LzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMczwRbkV
X4StY2PxKXwLFQU5afLcteFF/fk7ofSkaJc0ShEFFh+LcCKO/EUv6q/qLADPdJX5
667tl+Ct7r2MzUU4M81v+SmgjIkUjYDV2svLpW1YZm+THZZd2mV7GGEcwR0jvw2y
mIhbM32AzegNuzs0+ML1JiKhvjozoKngM605Wn1NU3LZYz5J4uB6xMfTz/Jwk0YL
p2iCT1gCX4mugempzrJZ7ieImFP3pcIzLjkQfofsX8oXy5L9iQ6X6uUyLs/2GXIH
ziyKTIpk8qD3vYb3qoKQuHZ5y2b+vYypdB7sQDNgcqhmTDBBZvc7nnHuYYSz9Zk+
+c14W88eNkK2+g==
-----END CERTIFICATE-----