Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File:                     zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier:          XjZRzaNQvbBGWO1zBht5QNq4YYL8wVqLGzF+xyzpUQE=
Subject key identifier:   AE:00:53:00:10:54:F2:2F:0C:B8:9F:DD:EB:36:E1:92:6D:A4:CF:7A
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer:       /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial:       01962E6215B61B437518264B57DDB6D3CDD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number:          1257
Signing time:             Sun 13 Apr 2025 09:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:42 +0000
Files and hashes:         1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
                          2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: 143Ce4GBvjf1U5PLyAU9F4FvCiN5lcwES2/oXjIZtYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:15:b6:1b:43:75:18:26:4b:57:dd:b6:d3:cd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
        Validity
            Not Before: Apr 13 09:01:42 2025 GMT
            Not After : Apr 14 09:01:42 2025 GMT
        Subject: CN=ae0053001054f22f0cb89fddeb36e1926da4cf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:d5:97:da:79:68:fd:22:5f:19:68:a5:85:
                    a3:ec:29:be:94:8f:08:7f:c3:86:22:f2:af:fc:58:
                    af:17:72:c5:42:ae:c7:d3:0b:7a:65:e5:bf:a3:a4:
                    29:88:49:0c:a0:b4:0d:51:2e:91:28:f1:fe:0e:24:
                    11:e9:c7:bf:16:ee:cf:e2:44:dd:0f:37:ac:7b:88:
                    86:4b:85:af:10:2f:63:20:ac:ee:4d:76:7d:86:40:
                    01:bf:fe:9d:6a:d7:b2:70:06:43:d8:15:83:a0:cd:
                    90:25:43:3f:66:93:2e:0c:55:c3:a8:be:f5:98:ef:
                    dd:e0:ed:b0:65:fe:b7:c3:08:b3:aa:d5:25:3b:7b:
                    5b:19:c1:44:69:6c:9e:e4:14:96:a7:ee:28:de:e5:
                    9f:74:3a:ba:44:9a:49:6a:c9:78:8f:b6:d4:1e:07:
                    70:3a:94:f5:5e:ef:24:51:fb:42:f9:dd:a8:c7:96:
                    47:f0:c3:bb:2a:01:29:73:89:15:5f:dc:42:20:28:
                    59:46:8a:f2:8e:e5:47:24:e2:bd:67:b5:b4:89:55:
                    e1:b2:35:33:43:26:07:c0:0c:f6:2a:0d:c0:94:29:
                    f7:d0:86:40:97:15:64:e7:28:b4:22:ae:1d:13:6d:
                    90:80:8f:94:ae:16:f9:75:b0:25:db:94:ba:93:bc:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:00:53:00:10:54:F2:2F:0C:B8:9F:DD:EB:36:E1:92:6D:A4:CF:7A
            X509v3 Authority Key Identifier:
                keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:23:84:68:71:60:af:47:d3:d5:66:02:5f:35:52:c8:4f:33:
         3d:df:51:02:dd:c5:7d:d3:15:d7:9e:d7:c8:81:7e:46:c9:37:
         a6:d5:7e:c2:8d:92:9d:81:47:99:a4:83:44:5e:2e:40:2d:a0:
         56:08:eb:07:7d:d2:f1:51:b0:e2:f4:50:b2:19:41:fb:f2:92:
         d0:f4:48:e2:98:40:fd:9a:17:ae:fe:01:25:db:f3:03:87:b0:
         16:01:45:02:9d:5e:4c:08:bd:98:a2:be:01:d6:db:2e:8d:c5:
         92:3e:1f:c5:8c:a0:18:13:21:f8:14:a9:e9:a8:3f:20:85:69:
         a2:7f:db:88:63:e6:41:b7:eb:04:6d:b0:2f:c2:7e:29:42:01:
         2e:9e:41:76:58:27:10:42:86:e9:0a:69:59:34:73:cd:ae:7a:
         79:bf:3e:d4:16:08:8f:2e:81:2b:b0:2f:eb:af:21:6d:a9:06:
         89:c9:79:6c:aa:60:6f:45:4e:48:ab:87:88:0e:9f:f2:7f:f3:
         fa:b9:76:b2:99:45:2c:05:29:de:17:1e:53:11:0d:bf:b1:ef:
         bd:ec:31:1b:d0:81:78:09:2e:ac:01:f4:db:63:66:c7:a9:e8:
         79:aa:85:5b:8e:2b:d0:ac:4d:1c:fe:79:ab:86:cd:4e:07:e3:
         38:cf:6d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYhW2G0N1GCZLV922083UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWQ3ZmYwMTZmZmY1ZDAzOWE5Njg5YTQzYzkzZTg0ZmU0
NWRiYzgwHhcNMjUwNDEzMDkwMTQyWhcNMjUwNDE0MDkwMTQyWjAzMTEwLwYDVQQD
EyhhZTAwNTMwMDEwNTRmMjJmMGNiODlmZGRlYjM2ZTE5MjZkYTRjZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/XVl9p5aP0iXxlopYWj7Cm+lI8I
f8OGIvKv/FivF3LFQq7H0wt6ZeW/o6QpiEkMoLQNUS6RKPH+DiQR6ce/Fu7P4kTd
Dzese4iGS4WvEC9jIKzuTXZ9hkABv/6dateycAZD2BWDoM2QJUM/ZpMuDFXDqL71
mO/d4O2wZf63wwizqtUlO3tbGcFEaWye5BSWp+4o3uWfdDq6RJpJasl4j7bUHgdw
OpT1Xu8kUftC+d2ox5ZH8MO7KgEpc4kVX9xCIChZRoryjuVHJOK9Z7W0iVXhsjUz
QyYHwAz2Kg3AlCn30IZAlxVk5yi0Iq4dE22QgI+Urhb5dbAl25S6k7zHZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4AUwAQVPIvDLif3es24ZJtpM96MB8GA1UdIwQY
MBaAFM8df/AW//XQOalomkPJPoT+RdvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAt
NGViMjY5NWE4NjhkLzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAtNGViMjY5NWE4Njhk
LzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriOEaHFg
r0fT1WYCXzVSyE8zPd9RAt3FfdMV157XyIF+Rsk3ptV+wo2SnYFHmaSDRF4uQC2g
VgjrB33S8VGw4vRQshlB+/KS0PRI4phA/ZoXrv4BJdvzA4ewFgFFAp1eTAi9mKK+
AdbbLo3Fkj4fxYygGBMh+BSp6ag/IIVpon/biGPmQbfrBG2wL8J+KUIBLp5Bdlgn
EEKG6QppWTRzza56eb8+1BYIjy6BK7Av668hbakGicl5bKpgb0VOSKuHiA6f8n/z
+rl2splFLAUp3hceUxENv7HvvewxG9CBeAkurAH022Nmx6noeaqFW44r0KxNHP55
q4bNTgfjOM9tWA==
-----END CERTIFICATE-----