Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File:                     Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier:          zMACTWq9QRqx1UXgHqZriTbY6F22qsMLiSJUfCb8BwM=
Subject key identifier:   EB:05:A9:4C:12:8E:3E:94:0A:0D:F8:E1:DD:C9:24:6B:42:83:9D:02
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer:       /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial:       01962E98BD63773E8A919D59F451E333603F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 21cAYiN5jMpqkJRdEkHSMeQVgkY.roa (hash: KwzUXQv1pIgCUyqyYd3vxndo9n20A9iWRxEC49c1pqI=)
                          2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: 8mQhEz9AfmKGDMPyDmh0l1AQwDZvP81lkhzDnMeqF/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:63:77:3e:8a:91:9d:59:f4:51:e3:33:60:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=eb05a94c128e3e940a0df8e1ddc9246b42839d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:6a:bb:7c:73:fb:5a:cf:f5:78:de:93:91:
                    eb:71:9e:a4:ad:7a:48:02:5f:ee:9e:86:c0:0d:6e:
                    56:ef:34:42:52:47:93:df:ab:db:ac:ec:ed:40:7d:
                    1d:00:55:52:fa:a0:1f:7e:be:3f:97:67:11:bf:be:
                    6c:cb:71:17:d3:27:14:f0:dd:ee:36:d2:40:7c:4b:
                    5e:cd:fd:2b:05:8f:fb:3e:30:41:a3:cc:22:83:a8:
                    15:dc:fc:60:32:56:e8:4a:7b:e2:c9:d9:ab:49:9b:
                    32:ef:41:3d:47:76:2e:d4:d1:14:91:17:33:41:e6:
                    75:03:1e:61:80:99:bd:ed:90:fe:15:18:a3:bd:39:
                    19:cc:3c:00:0c:08:8c:60:18:f3:71:28:17:ef:61:
                    fe:24:e5:b2:dd:ac:0e:58:c2:90:6c:bb:80:28:15:
                    dc:5f:91:fe:44:3e:71:af:83:c1:ab:d8:23:74:ef:
                    da:a7:11:6b:8e:07:6f:00:bc:9e:4f:10:01:40:62:
                    21:8c:8d:a5:62:3f:99:b5:3e:fb:12:33:af:a6:a5:
                    13:7b:5d:0f:f1:eb:41:b2:35:f6:ed:a5:c2:ae:80:
                    ad:f4:a4:da:20:f8:26:78:02:36:cd:29:f6:00:0d:
                    5c:de:31:d7:58:81:aa:e0:9b:6e:20:9d:32:86:4a:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:05:A9:4C:12:8E:3E:94:0A:0D:F8:E1:DD:C9:24:6B:42:83:9D:02
            X509v3 Authority Key Identifier:
                keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:c3:06:38:95:5c:33:19:19:4e:6d:74:36:51:5a:71:0f:
         fc:fd:be:a7:81:29:8c:38:0a:f5:e9:97:12:ec:6d:af:76:07:
         64:64:09:2e:11:df:49:42:fd:3f:86:3b:6c:10:4e:29:a5:b7:
         ab:6e:eb:ca:b3:58:9a:cc:3a:bf:a4:62:00:7c:3c:1c:cb:7e:
         f3:de:a4:89:e6:32:71:5b:ec:20:72:a5:32:e4:da:a7:1c:da:
         c2:9a:88:fa:34:23:ff:66:49:6f:18:35:04:55:7f:0e:29:28:
         66:c8:1c:50:f3:1a:2c:12:80:e8:ec:6d:2c:0c:14:67:df:e8:
         45:4a:50:27:79:6c:57:a8:89:a2:90:4b:b2:d7:2f:e5:8e:8f:
         37:e9:b5:0c:8f:3e:94:bd:66:87:08:44:48:b1:e3:f7:21:a9:
         8c:6b:7d:e8:b7:cc:c8:b9:fa:42:85:5f:ac:9f:3b:70:1b:78:
         be:e8:a2:c8:ad:2e:89:40:16:e5:dd:60:c9:c8:9c:42:4a:01:
         e3:81:8d:46:43:b7:d3:4b:82:c2:3c:85:ee:48:43:8d:7d:e7:
         d8:06:e0:dd:1d:86:19:13:f7:80:d7:04:5a:e3:95:a7:f4:02:
         cd:03:03:13:cc:5a:28:5d:7d:e6:bc:c5:76:68:c8:e3:36:59:
         a1:19:d9:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumL1jdz6KkZ1Z9FHjM2A/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjI0NGRlMDE5MGE2ZGQ1YTg5OWEyYjM3YjAwMmI5YWU2
MzJjODYwHhcNMjUwNDEzMTAwMTIzWhcNMjUwNDE0MTAwMTIzWjAzMTEwLwYDVQQD
EyhlYjA1YTk0YzEyOGUzZTk0MGEwZGY4ZTFkZGM5MjQ2YjQyODM5ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt5qu3xz+1rP9Xjek5HrcZ6krXpI
Al/unobADW5W7zRCUkeT36vbrOztQH0dAFVS+qAffr4/l2cRv75sy3EX0ycU8N3u
NtJAfEtezf0rBY/7PjBBo8wig6gV3PxgMlboSnviydmrSZsy70E9R3Yu1NEUkRcz
QeZ1Ax5hgJm97ZD+FRijvTkZzDwADAiMYBjzcSgX72H+JOWy3awOWMKQbLuAKBXc
X5H+RD5xr4PBq9gjdO/apxFrjgdvALyeTxABQGIhjI2lYj+ZtT77EjOvpqUTe10P
8etBsjX27aXCroCt9KTaIPgmeAI2zSn2AA1c3jHXWIGq4JtuIJ0yhkpZ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsFqUwSjj6UCg344d3JJGtCg50CMB8GA1UdIwQY
MBaAFGdiRN4BkKbdWomaKzewArmuYyyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYt
Y2UzMmQ2NmYzMGE4LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYtY2UzMmQ2NmYzMGE4
LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE3DBjiV
XDMZGU5tdDZRWnEP/P2+p4EpjDgK9emXEuxtr3YHZGQJLhHfSUL9P4Y7bBBOKaW3
q27ryrNYmsw6v6RiAHw8HMt+896kieYycVvsIHKlMuTapxzawpqI+jQj/2ZJbxg1
BFV/DikoZsgcUPMaLBKA6OxtLAwUZ9/oRUpQJ3lsV6iJopBLstcv5Y6PN+m1DI8+
lL1mhwhESLHj9yGpjGt96LfMyLn6QoVfrJ87cBt4vuiiyK0uiUAW5d1gycicQkoB
44GNRkO300uCwjyF7khDjX3n2Abg3R2GGRP3gNcEWuOVp/QCzQMDE8xaKF195rzF
dmjI4zZZoRnZmw==
-----END CERTIFICATE-----