Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File:                     ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier:          suaIhRuxPvRzSJJBQg6V9mc1+puxSc7HX6UWnM8bw24=
Subject key identifier:   5C:9A:EA:F1:9F:E7:C0:7B:63:29:CA:99:13:40:12:56:47:44:9A:CD
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer:       /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial:       01962E61B33A3CD6B211CB77F1FC901F101B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number:          11A4
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
                          2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: OSp4obDg8GSuudbVcnrDqnYVB/o/O6IYQfHL0Q/r83I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:3a:3c:d6:b2:11:cb:77:f1:fc:90:1f:10:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=5c9aeaf19fe7c07b6329ca991340125647449acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:c5:aa:6b:6b:54:b8:55:fd:70:40:5c:18:
                    0f:72:ad:e8:06:71:f3:01:e6:c2:64:3d:fc:e7:f8:
                    64:76:7a:f9:15:b5:49:63:28:54:8d:47:fc:b0:16:
                    f6:56:ae:cc:4e:6b:49:d1:60:1f:dc:57:25:37:62:
                    08:0f:a1:f6:fa:07:51:a4:1e:41:20:a1:4b:1e:56:
                    29:1a:05:74:90:65:66:3c:f5:0b:27:40:6c:56:e0:
                    80:46:eb:51:26:40:e9:a9:90:18:ad:52:fe:32:73:
                    22:56:e9:84:23:33:34:9e:d0:1c:e1:34:ed:82:53:
                    1f:f3:4d:18:63:61:ee:ad:1d:d8:a5:c5:4e:20:68:
                    d7:06:ab:da:1d:c0:e8:84:4f:a1:c4:41:81:39:cb:
                    be:b1:42:29:82:ae:6b:49:7a:95:70:a7:9b:00:45:
                    60:b2:54:23:5e:b2:56:96:ad:ab:5c:39:64:18:84:
                    9b:84:e2:1f:96:54:dc:35:ce:60:8a:32:bb:e8:57:
                    a6:c9:26:a3:e8:d4:29:0b:9f:2d:25:76:bb:7e:3e:
                    0f:99:73:47:3a:97:71:ab:bd:39:b0:aa:34:c4:9e:
                    7d:81:43:48:c5:b7:f4:cc:4a:73:f2:9c:a9:1b:4c:
                    b9:63:1e:22:97:61:52:6a:a8:ca:d7:10:09:c2:c3:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9A:EA:F1:9F:E7:C0:7B:63:29:CA:99:13:40:12:56:47:44:9A:CD
            X509v3 Authority Key Identifier:
                keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:df:cb:d5:b9:a7:80:00:9e:b7:b9:c9:38:22:0f:e3:51:4f:
         a1:75:10:23:b4:34:f4:77:2c:a9:8a:5c:4b:dc:f7:a0:e1:ea:
         d4:cd:0a:72:a1:b5:9f:62:26:1f:8e:b7:57:15:af:4d:07:82:
         a8:34:9d:2a:62:fc:6a:9a:32:a0:8a:f7:0d:52:29:ae:cb:88:
         44:1a:7a:e6:ed:51:50:00:63:a3:88:51:0b:90:a7:fb:ca:8d:
         8d:4b:55:46:65:eb:88:05:b9:f9:35:ed:7e:d2:f8:af:90:d5:
         e4:53:cc:98:63:60:41:a7:ed:59:2c:87:21:f1:69:2f:9f:a5:
         42:e3:b6:71:4c:a3:1e:1d:d8:29:ca:6e:5c:78:be:58:c4:d2:
         f2:1c:1d:cc:72:e9:e9:c6:15:6b:79:7b:32:57:db:61:8b:df:
         12:07:7f:f8:92:b3:d0:01:77:f2:db:34:a0:2e:0b:82:a2:ce:
         ce:f0:e5:1d:ed:4d:1c:ad:43:58:30:9d:5e:91:63:bd:a1:8e:
         2d:d1:84:bc:dc:10:7b:a9:f9:20:4d:e4:69:81:94:c1:1a:1f:
         2a:a4:a7:45:c5:d7:fe:13:54:02:7e:d0:bb:a7:1a:ea:91:f8:
         79:97:38:59:59:a4:dd:e1:71:35:1e:25:e0:34:03:c2:2e:a4:
         60:21:bb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbM6PNayEct38fyQHxAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjVlY2Q2MTVmM2E2YzU2MzljNTFlOWUzMTk3NjczMTUy
MDc4YjgwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
Eyg1YzlhZWFmMTlmZTdjMDdiNjMyOWNhOTkxMzQwMTI1NjQ3NDQ5YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCDFqmtrVLhV/XBAXBgPcq3oBnHz
AebCZD385/hkdnr5FbVJYyhUjUf8sBb2Vq7MTmtJ0WAf3FclN2IID6H2+gdRpB5B
IKFLHlYpGgV0kGVmPPULJ0BsVuCARutRJkDpqZAYrVL+MnMiVumEIzM0ntAc4TTt
glMf800YY2HurR3YpcVOIGjXBqvaHcDohE+hxEGBOcu+sUIpgq5rSXqVcKebAEVg
slQjXrJWlq2rXDlkGISbhOIfllTcNc5gijK76FemySaj6NQpC58tJXa7fj4PmXNH
Opdxq705sKo0xJ59gUNIxbf0zEpz8pypG0y5Yx4il2FSaqjK1xAJwsOexwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFya6vGf58B7YynKmRNAElZHRJrNMB8GA1UdIwQY
MBaAFGRl7NYV86bFY5xR6eMZdnMVIHi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMt
NTRjN2M0ZWU1YmI1LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMtNTRjN2M0ZWU1YmI1
LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN/L1bmn
gACet7nJOCIP41FPoXUQI7Q09HcsqYpcS9z3oOHq1M0KcqG1n2ImH463VxWvTQeC
qDSdKmL8apoyoIr3DVIprsuIRBp65u1RUABjo4hRC5Cn+8qNjUtVRmXriAW5+TXt
ftL4r5DV5FPMmGNgQaftWSyHIfFpL5+lQuO2cUyjHh3YKcpuXHi+WMTS8hwdzHLp
6cYVa3l7MlfbYYvfEgd/+JKz0AF38ts0oC4LgqLOzvDlHe1NHK1DWDCdXpFjvaGO
LdGEvNwQe6n5IE3kaYGUwRofKqSnRcXX/hNUAn7Qu6ca6pH4eZc4WVmk3eFxNR4l
4DQDwi6kYCG7Ig==
-----END CERTIFICATE-----