Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File:                     Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier:          lToVJHt53pHjOpQyySjxPdD97f6n7+oCIhL3LqOl1s0=
Subject key identifier:   CB:36:A8:9B:C4:15:21:8A:A8:6F:82:EB:7D:F7:6E:FE:76:BB:A1:4E
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer:       /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial:       01962E98636AABC7F8B46D32E9E8AF27F9CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number:          1230
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: T+Ocv8aSbkWG9jO2MQr8EaXbkachg1zLWOUCBXmxfvU=)
                          2: dz91I1-yBDomZKCgnJMlIXc6mMw.roa (hash: h+SuLfN4t/LWieY/Z49TQKPFTs4jfsQZc0478UGGyK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:63:6a:ab:c7:f8:b4:6d:32:e9:e8:af:27:f9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=cb36a89bc415218aa86f82eb7df76efe76bba14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:49:33:62:e7:5a:8a:92:5b:01:cf:86:e0:
                    dd:a8:c5:2f:6a:ac:dc:fe:fa:31:5f:b1:51:1b:a9:
                    1e:a7:2a:e3:d1:ea:ca:b0:77:ec:60:80:ba:6d:66:
                    76:5f:66:22:c7:91:58:b9:89:73:58:55:6c:4e:57:
                    26:a1:8a:00:62:cc:14:2f:b5:a8:6c:26:1d:b6:90:
                    f4:74:c2:fd:2a:e0:e2:2f:14:e9:64:3f:3f:8f:8d:
                    52:26:6f:98:95:5c:6b:72:b1:f2:bb:62:b4:ff:a1:
                    3d:1f:38:9d:d2:d5:22:17:e6:a9:e7:4b:7f:15:ea:
                    36:0e:79:cb:f8:fb:fc:2f:90:08:d0:ce:ce:ef:19:
                    fb:48:91:c2:cb:87:47:50:e2:9e:f7:94:15:f3:27:
                    20:5e:ed:19:f5:53:0c:41:d8:2e:0b:13:d6:63:94:
                    c1:59:e1:34:59:3f:39:fb:a9:16:23:34:c4:ad:11:
                    64:30:77:aa:c1:bb:ef:ca:f1:06:05:d1:f1:c3:b1:
                    27:d3:b0:92:a8:cd:f1:f0:5e:58:a1:2e:61:39:6b:
                    d2:30:09:6c:43:7d:26:57:db:0d:d0:ff:b6:b6:dd:
                    70:9a:b5:33:48:e0:52:0b:c7:fa:14:91:87:c0:96:
                    a4:64:48:25:19:9c:c0:7d:63:54:ca:c4:05:4f:42:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:A8:9B:C4:15:21:8A:A8:6F:82:EB:7D:F7:6E:FE:76:BB:A1:4E
            X509v3 Authority Key Identifier:
                keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:39:e3:01:62:aa:9a:6e:17:20:47:0a:b1:e6:32:be:df:2a:
         9f:bb:52:7f:bb:a7:a8:f1:75:f4:58:d6:e9:36:68:92:2c:54:
         40:60:d5:a1:b5:75:45:08:33:07:95:05:7c:d8:af:e6:2b:48:
         a0:ed:54:72:75:3a:2f:8f:48:ec:ab:85:66:a0:98:24:df:1f:
         64:43:ab:43:05:33:6e:34:ba:79:ba:3c:c5:d1:a8:05:15:5c:
         d5:71:50:7f:6c:ce:82:54:6e:7f:2a:c1:ec:56:ec:63:be:cf:
         09:fc:d9:95:71:8c:56:e5:8b:61:1e:09:14:a6:f8:be:75:aa:
         60:f9:dd:ec:f8:e2:11:cf:c6:dd:4d:76:f3:55:95:38:36:84:
         eb:6d:2a:05:1c:47:e6:ac:f3:e8:09:41:18:ef:e7:40:cf:45:
         2a:e3:8d:6a:50:d3:05:24:d4:20:bb:7c:be:39:d5:a9:99:74:
         e6:83:f4:d7:77:1d:8a:1c:4a:d5:0f:8e:9c:3b:92:bd:79:dd:
         73:f8:dc:64:a8:8a:6e:16:1e:b3:14:85:cf:91:e8:64:09:cb:
         00:4e:ef:a8:41:4a:b5:f5:23:36:fb:cc:43:4e:73:80:52:9c:
         c2:3c:45:73:48:c6:06:e3:87:db:76:87:5c:f3:38:6b:57:eb:
         ed:77:38:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumGNqq8f4tG0y6eivJ/nPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmY1NWQzNzcxMjdmMjhjZTI2Yjc4ZmQ4M2JlY2Y0MWJl
Y2FkNGIwHhcNMjUwNDEzMTAwMTAwWhcNMjUwNDE0MTAwMTAwWjAzMTEwLwYDVQQD
EyhjYjM2YTg5YmM0MTUyMThhYTg2ZjgyZWI3ZGY3NmVmZTc2YmJhMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiBJM2LnWoqSWwHPhuDdqMUvaqzc
/voxX7FRG6kepyrj0erKsHfsYIC6bWZ2X2Yix5FYuYlzWFVsTlcmoYoAYswUL7Wo
bCYdtpD0dML9KuDiLxTpZD8/j41SJm+YlVxrcrHyu2K0/6E9Hzid0tUiF+ap50t/
Feo2DnnL+Pv8L5AI0M7O7xn7SJHCy4dHUOKe95QV8ycgXu0Z9VMMQdguCxPWY5TB
WeE0WT85+6kWIzTErRFkMHeqwbvvyvEGBdHxw7En07CSqM3x8F5YoS5hOWvSMAls
Q30mV9sN0P+2tt1wmrUzSOBSC8f6FJGHwJakZEglGZzAfWNUysQFT0K/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs2qJvEFSGKqG+C6333bv52u6FOMB8GA1UdIwQY
MBaAFGYvVdN3En8ozia3j9g77PQb7K1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgt
OGJlMTQ2MjUzMzU2LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgtOGJlMTQ2MjUzMzU2
LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATnjAWKq
mm4XIEcKseYyvt8qn7tSf7unqPF19FjW6TZokixUQGDVobV1RQgzB5UFfNiv5itI
oO1UcnU6L49I7KuFZqCYJN8fZEOrQwUzbjS6ebo8xdGoBRVc1XFQf2zOglRufyrB
7FbsY77PCfzZlXGMVuWLYR4JFKb4vnWqYPnd7PjiEc/G3U1281WVODaE620qBRxH
5qzz6AlBGO/nQM9FKuONalDTBSTUILt8vjnVqZl05oP013cdihxK1Q+OnDuSvXnd
c/jcZKiKbhYesxSFz5HoZAnLAE7vqEFKtfUjNvvMQ05zgFKcwjxFc0jGBuOH23aH
XPM4a1fr7Xc45w==
-----END CERTIFICATE-----