Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File:                     Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier:          vMUNzQ+WG1NtQL2hIIJ9vibFgTvlPfnbjgQk3onZLEY=
Subject key identifier:   3E:35:8B:9A:3E:4E:2C:4A:A1:50:2A:32:75:C8:49:55:7B:26:06:D2
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer:       /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial:       01962F3DAFB6D7F3F587CFD59858A874AAF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 23FE1oy_BAZmJkd81HCsu1MHa4M.roa (hash: XgMSku4Hr0QiLLVlfP0P+OjcCWijIwZIMflI7dpCQf8=)
                          2: 4dR87DFU1h-_n9gWgjfEcPKRNjQ.roa (hash: 2sOA9bFKi1Li43Qu+cU631T12GoMBvyIUcumh0ZnQK8=)
                          3: LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa (hash: 3vPL4LbfqaoCiLmMXdpcZ0SWEsuh6HbkyOFi9gXwiDM=)
                          4: ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa (hash: rqrMCzYgEY7X02NzXOKY4O8TfCQzErK1najWC4lkNO8=)
                          5: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: APsTq4H009dYq73AABazF7NmSTuqyyO4WjOZ9F8mulM=)
                          6: fyUduA7iLRzPOu8jJXAMIB-HOkE.roa (hash: cIQaQBrp3go+iSKqU55ZO7AX4q6Ht8Tb5+J8gXHDuFM=)
                          7: x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa (hash: 4r2sex74amynzwpK3bDSHVwPPeVxELbxt3yfW0ijSTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:af:b6:d7:f3:f5:87:cf:d5:98:58:a8:74:aa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=3e358b9a3e4e2c4aa1502a3275c849557b2606d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:70:a0:31:eb:60:fd:a2:db:4e:32:da:5e:
                    8d:70:12:62:01:3b:f6:a0:1f:16:45:8f:2d:60:66:
                    81:1e:35:9b:1b:f6:2d:3a:f6:cb:3a:54:84:8e:56:
                    9a:47:91:15:fb:9d:35:b0:65:d8:07:b6:cc:67:c2:
                    65:f8:8e:4e:db:27:09:87:9f:2f:d3:ea:d9:02:cf:
                    28:3b:3b:a0:9d:6c:51:e3:b4:73:90:f0:b8:67:5e:
                    fd:55:88:22:99:08:dd:5b:c4:5c:8f:48:ec:94:72:
                    73:3b:e1:74:27:5b:36:6f:7b:86:93:a7:5f:88:ca:
                    e7:e3:0e:f2:df:7c:75:b3:24:17:0c:c3:d9:18:69:
                    ec:97:3d:d6:c4:d2:ae:d6:e4:3a:3b:f8:6b:ea:25:
                    f4:ab:2c:43:13:49:8f:ad:4e:c7:0a:d0:4a:23:ce:
                    6c:22:bf:39:44:dc:06:cc:87:17:b7:2e:de:0d:92:
                    4d:8c:ce:e0:42:65:67:88:5f:a4:1f:90:ee:87:c6:
                    49:01:7c:82:a4:f0:b6:f9:77:74:97:60:68:a2:f4:
                    e0:70:4e:46:d8:f4:2e:8d:3c:44:7c:a5:ab:b5:4c:
                    12:b0:0c:be:a5:81:f7:a2:d7:35:17:4f:ea:53:a6:
                    97:f6:61:49:71:47:16:ee:61:90:06:c8:b5:6a:02:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:8B:9A:3E:4E:2C:4A:A1:50:2A:32:75:C8:49:55:7B:26:06:D2
            X509v3 Authority Key Identifier:
                keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:46:bd:f7:20:cb:e9:0f:56:f0:dd:e5:9f:db:af:8e:96:06:
         65:c3:1e:19:bb:74:cc:06:04:71:d9:69:41:0a:20:ea:5d:6d:
         88:97:02:51:55:06:4a:e5:53:d9:0f:75:54:e8:b7:72:19:87:
         82:e9:a8:91:35:7b:ee:d8:d9:e2:21:af:d2:53:7f:4c:2f:44:
         e1:68:12:38:69:57:d1:5e:d5:8e:70:40:89:a7:68:df:e8:ad:
         eb:49:48:00:d0:7c:46:7c:53:89:8b:1c:82:54:d3:cf:f1:82:
         d6:9e:fe:51:89:00:2f:31:55:4c:0a:0d:92:e8:96:cb:0f:8e:
         9c:cd:2e:04:10:e1:c0:3c:6e:e9:45:50:bd:d0:6e:55:2f:9a:
         e2:9c:e3:0e:2a:77:cd:2e:a1:dd:7f:0e:46:ab:fc:4c:99:3a:
         76:12:38:c9:89:d4:08:ab:f4:98:0e:e7:d5:a2:25:d4:53:85:
         62:21:2f:bd:46:cc:0f:b4:fb:0e:d5:c6:54:19:2a:38:7c:81:
         49:ab:5f:18:5e:fb:34:c8:b3:16:8b:cb:f6:c2:62:20:32:9b:
         b3:98:47:95:9f:30:89:20:1a:ff:12:20:55:2b:14:4f:52:31:
         a0:56:88:05:7f:ef:f9:ca:6b:3d:d0:c5:ca:eb:42:8e:86:92:
         90:47:ff:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPa+21/P1h8/VmFiodKrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy
ZGFjNjgwHhcNMjUwNDEzMTMwMTMzWhcNMjUwNDE0MTMwMTMzWjAzMTEwLwYDVQQD
EygzZTM1OGI5YTNlNGUyYzRhYTE1MDJhMzI3NWM4NDk1NTdiMjYwNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKdwoDHrYP2i204y2l6NcBJiATv2
oB8WRY8tYGaBHjWbG/YtOvbLOlSEjlaaR5EV+501sGXYB7bMZ8Jl+I5O2ycJh58v
0+rZAs8oOzugnWxR47RzkPC4Z179VYgimQjdW8Rcj0jslHJzO+F0J1s2b3uGk6df
iMrn4w7y33x1syQXDMPZGGnslz3WxNKu1uQ6O/hr6iX0qyxDE0mPrU7HCtBKI85s
Ir85RNwGzIcXty7eDZJNjM7gQmVniF+kH5Duh8ZJAXyCpPC2+Xd0l2BoovTgcE5G
2PQujTxEfKWrtUwSsAy+pYH3otc1F0/qU6aX9mFJcUcW7mGQBsi1agIxSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD41i5o+TixKoVAqMnXISVV7JgbSMB8GA1UdIwQY
MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct
ZjBiOTYyZjUyNDE0LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0
LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEa99yDL
6Q9W8N3ln9uvjpYGZcMeGbt0zAYEcdlpQQog6l1tiJcCUVUGSuVT2Q91VOi3chmH
gumokTV77tjZ4iGv0lN/TC9E4WgSOGlX0V7VjnBAiado3+it60lIANB8RnxTiYsc
glTTz/GC1p7+UYkALzFVTAoNkuiWyw+OnM0uBBDhwDxu6UVQvdBuVS+a4pzjDip3
zS6h3X8ORqv8TJk6dhI4yYnUCKv0mA7n1aIl1FOFYiEvvUbMD7T7DtXGVBkqOHyB
SatfGF77NMizFovL9sJiIDKbs5hHlZ8wiSAa/xIgVSsUT1IxoFaIBX/v+cprPdDF
yutCjoaSkEf/eA==
-----END CERTIFICATE-----