Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File:                     ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier:          ujV2aLgydrFpByjY1tZ3yBWrRM3Tm6L4HhmVBmVsjEE=
Subject key identifier:   34:1F:FB:54:2D:D2:D1:C7:69:4C:CA:18:6F:5E:28:A4:AF:4A:74:2B
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer:       /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial:       01962F746AFFA243FF8547A6EF7A30963A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
                          2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: c6GHjiQkCg5OF78DiA3q4imL2RK6xM+82nJLjmATM94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6a:ff:a2:43:ff:85:47:a6:ef:7a:30:96:3a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=341ffb542dd2d1c7694cca186f5e28a4af4a742b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:04:24:7c:fa:d1:59:15:92:53:a9:c3:fd:
                    2b:b2:ff:ac:58:03:e4:92:92:4b:3f:24:89:52:15:
                    26:76:f2:bc:91:b3:72:64:33:c2:51:b2:79:c8:0d:
                    eb:d5:23:fb:b6:dd:f4:18:78:fa:c4:bb:b5:07:c2:
                    d7:58:95:de:6b:ed:25:66:6c:2a:8d:ee:b2:a3:d0:
                    bc:00:77:d2:4a:62:7f:f8:a1:d7:de:57:b5:56:05:
                    d8:0d:a4:23:c4:ec:a7:27:4f:a8:23:77:f6:8a:b5:
                    ff:a1:75:2a:d1:51:c4:2d:b3:7c:d8:33:11:81:47:
                    a2:67:c5:34:35:5e:e8:b3:b7:3a:4c:cb:ea:46:f3:
                    2f:20:02:c0:2b:c6:84:6f:dc:8e:10:95:13:4d:f8:
                    e7:56:bc:b7:1e:15:54:fd:59:14:ce:97:15:d4:31:
                    be:58:3b:9f:22:12:e6:69:48:c1:4f:bb:aa:06:b5:
                    a1:27:d0:9b:05:95:63:68:21:51:43:ad:5d:26:90:
                    ac:11:a6:5e:dd:29:96:9f:41:d9:3d:05:b7:20:70:
                    5d:82:da:f8:a2:30:10:d2:58:67:ab:c0:74:eb:67:
                    ac:e2:25:7f:5d:63:f4:c8:64:6f:da:80:1a:31:2c:
                    14:8c:41:4b:c0:e4:3f:f8:4b:06:dc:12:c6:af:fb:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1F:FB:54:2D:D2:D1:C7:69:4C:CA:18:6F:5E:28:A4:AF:4A:74:2B
            X509v3 Authority Key Identifier:
                keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:1f:9f:c3:bb:f9:d0:de:54:cb:bf:d8:be:a5:fe:3b:5b:
         2f:fb:a7:1f:cb:80:6e:b3:1f:f1:e7:6a:26:54:16:44:cf:d7:
         42:e7:89:0b:22:bd:a7:42:dd:4d:4c:64:8f:69:d3:2a:bd:a7:
         fc:a4:36:cd:ba:27:67:10:ef:51:9f:ca:95:b2:c3:42:31:d3:
         74:31:c4:22:b4:3b:19:71:75:89:ef:35:51:f5:2c:b9:16:68:
         65:9f:f7:c1:61:03:d3:97:47:a5:e4:ad:63:b1:bd:6a:d4:29:
         37:1c:5f:b6:09:6a:1d:d4:95:d1:69:47:d2:55:55:a2:1c:59:
         13:de:c1:56:c3:4d:29:ae:87:ef:10:c4:43:3d:8a:bb:8d:5d:
         dd:0f:55:a5:71:1e:e0:51:5e:b9:e0:08:b3:c8:19:b0:55:00:
         60:1b:1d:c9:b9:ef:cc:85:82:79:32:43:bc:31:94:0b:2f:29:
         38:50:54:98:fb:46:28:f5:a7:aa:13:dd:9f:d0:5c:69:90:fa:
         15:16:92:f0:d5:61:f5:27:60:77:be:ea:13:c1:8f:41:49:8a:
         d7:4d:03:bc:4a:6a:a5:36:40:e1:94:dc:e9:d4:be:29:95:be:
         2e:31:31:8e:50:88:90:9e:ad:4d:61:8d:05:a3:c1:3e:a1:88:
         b3:fa:ca:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGr/okP/hUem73owljp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz
MjA3ZmMwHhcNMjUwNDEzMTQwMTIwWhcNMjUwNDE0MTQwMTIwWjAzMTEwLwYDVQQD
EygzNDFmZmI1NDJkZDJkMWM3Njk0Y2NhMTg2ZjVlMjhhNGFmNGE3NDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlgEJHz60VkVklOpw/0rsv+sWAPk
kpJLPySJUhUmdvK8kbNyZDPCUbJ5yA3r1SP7tt30GHj6xLu1B8LXWJXea+0lZmwq
je6yo9C8AHfSSmJ/+KHX3le1VgXYDaQjxOynJ0+oI3f2irX/oXUq0VHELbN82DMR
gUeiZ8U0NV7os7c6TMvqRvMvIALAK8aEb9yOEJUTTfjnVry3HhVU/VkUzpcV1DG+
WDufIhLmaUjBT7uqBrWhJ9CbBZVjaCFRQ61dJpCsEaZe3SmWn0HZPQW3IHBdgtr4
ojAQ0lhnq8B062es4iV/XWP0yGRv2oAaMSwUjEFLwOQ/+EsG3BLGr/spIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQf+1Qt0tHHaUzKGG9eKKSvSnQrMB8GA1UdIwQY
MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt
MDJhYWM4YjU5NmRjLzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj
LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIwfn8O7
+dDeVMu/2L6l/jtbL/unH8uAbrMf8edqJlQWRM/XQueJCyK9p0LdTUxkj2nTKr2n
/KQ2zbonZxDvUZ/KlbLDQjHTdDHEIrQ7GXF1ie81UfUsuRZoZZ/3wWED05dHpeSt
Y7G9atQpNxxftglqHdSV0WlH0lVVohxZE97BVsNNKa6H7xDEQz2Ku41d3Q9VpXEe
4FFeueAIs8gZsFUAYBsdybnvzIWCeTJDvDGUCy8pOFBUmPtGKPWnqhPdn9BcaZD6
FRaS8NVh9Sdgd77qE8GPQUmK100DvEpqpTZA4ZTc6dS+KZW+LjExjlCIkJ6tTWGN
BaPBPqGIs/rKng==
-----END CERTIFICATE-----