Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
File:                     Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft (raw, json)
Hash identifier:          mWHlk3Z8N5MS1cCiNo7ResTPkXOOmi47x6lBSQCasAk=
Subject key identifier:   A1:79:86:27:D3:B3:7A:67:E2:44:88:25:5B:22:0B:F0:FD:9B:65:EE
Authority key identifier: 67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
Certificate issuer:       /CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Certificate serial:       01962DF3F4B98532EEAB3A4EB7A5E4F7B2D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
Manifest number:          D6
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl (hash: 98tJ4dESuXsJ1JAyL2qVGkFAk+YFpTjWj2FEprA9WDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f4:b9:85:32:ee:ab:3a:4e:b7:a5:e4:f7:b2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=a1798627d3b37a67e24488255b220bf0fd9b65ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:15:ac:f8:77:08:0a:2a:3f:54:39:99:51:
                    89:5a:2e:3e:19:59:98:0e:a4:b6:33:eb:96:4d:e0:
                    01:fe:57:0e:a5:13:48:2b:0a:8b:5e:e6:c8:87:85:
                    e9:db:76:43:4e:2c:92:92:bb:b4:61:6a:a0:d5:83:
                    6e:40:1e:d2:67:4c:ad:00:a9:eb:9a:53:d9:a9:9b:
                    3e:fa:d4:89:50:f9:70:d3:f3:af:54:e9:92:a4:2c:
                    9e:ba:8c:b3:b3:04:94:31:7f:64:7a:08:25:98:64:
                    1d:49:eb:01:18:3a:c2:41:11:ba:9f:f0:37:2e:00:
                    65:20:ee:3a:6c:cf:6c:bc:a1:af:b9:8d:18:42:85:
                    44:2b:d0:f7:3b:cf:c3:5b:ea:17:ad:59:2b:d0:24:
                    63:30:e2:30:f8:3c:74:2f:f8:31:c4:b9:90:fe:80:
                    f3:ed:59:d5:90:f8:f8:14:7c:db:20:85:24:14:10:
                    dc:39:cf:19:11:d0:a1:4f:95:85:b0:00:ff:ca:1f:
                    1d:5b:18:81:a0:39:c8:2e:8a:c9:34:5a:89:d8:2c:
                    8d:8a:9e:76:68:fb:df:55:83:fd:41:c2:4d:0c:70:
                    7d:35:72:43:45:84:96:a3:c2:0d:fb:b7:57:00:51:
                    de:f5:20:87:d1:1d:2d:47:bd:25:46:d1:f8:09:ed:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:79:86:27:D3:B3:7A:67:E2:44:88:25:5B:22:0B:F0:FD:9B:65:EE
            X509v3 Authority Key Identifier:
                keyid:67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d5:3d:ce:40:4a:1c:87:cb:38:5d:0f:e1:53:0c:76:fb:3c:
         1b:c3:59:c3:40:3d:de:9d:50:17:aa:2d:14:b1:6e:c8:e4:0a:
         60:7b:8e:ee:79:68:39:9f:a4:a0:a1:d2:30:63:71:7f:37:0e:
         e4:f5:1a:d8:85:e5:a5:e8:16:54:4c:bb:7e:fe:d9:23:75:4d:
         b2:03:e1:63:ad:21:e6:27:3a:dd:e4:6f:f4:ed:e3:b7:cc:7d:
         91:cb:57:83:08:2b:db:5c:51:6a:2f:ca:b6:7c:89:b5:9b:c5:
         cc:f7:4c:c1:b5:82:da:29:7f:b1:d0:54:07:88:54:21:e4:07:
         39:10:44:cd:d1:e9:ef:73:7b:9b:c4:7f:d2:91:1d:34:04:71:
         e9:a0:92:4e:3d:64:1d:d7:51:3e:de:4e:aa:a9:f1:65:5d:ab:
         a4:99:01:a6:71:be:39:66:82:25:6c:94:9a:0b:1d:3c:ac:08:
         63:c7:2f:a4:55:99:82:a3:78:8d:4c:35:58:0d:bb:a2:70:62:
         68:38:d8:e4:37:95:00:8e:77:e5:f5:db:ff:30:a4:7c:34:1c:
         1e:1a:04:0b:25:a1:bd:9b:2e:99:a2:e6:b9:23:e1:ac:b8:f0:
         57:7d:2f:6d:9d:06:a2:86:4a:fa:ae:5d:71:5c:c1:e2:80:cd:
         45:ef:34:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/S5hTLuqzpOt6Xk97LYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YTk3OTU0NzY4N2U3ZjljZDA3YzE2MGE1NDljMGRmM2Iz
Y2MwZGYwHhcNMjUwNDEzMDcwMTI0WhcNMjUwNDE0MDcwMTI0WjAzMTEwLwYDVQQD
EyhhMTc5ODYyN2QzYjM3YTY3ZTI0NDg4MjU1YjIyMGJmMGZkOWI2NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrYVrPh3CAoqP1Q5mVGJWi4+GVmY
DqS2M+uWTeAB/lcOpRNIKwqLXubIh4Xp23ZDTiySkru0YWqg1YNuQB7SZ0ytAKnr
mlPZqZs++tSJUPlw0/OvVOmSpCyeuoyzswSUMX9kegglmGQdSesBGDrCQRG6n/A3
LgBlIO46bM9svKGvuY0YQoVEK9D3O8/DW+oXrVkr0CRjMOIw+Dx0L/gxxLmQ/oDz
7VnVkPj4FHzbIIUkFBDcOc8ZEdChT5WFsAD/yh8dWxiBoDnILorJNFqJ2CyNip52
aPvfVYP9QcJNDHB9NXJDRYSWo8IN+7dXAFHe9SCH0R0tR70lRtH4Ce303wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF5hifTs3pn4kSIJVsiC/D9m2XuMB8GA1UdIwQY
MBaAFGepeVR2h+f5zQfBYKVJwN87PMDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjZsNVZIYUg1X25OQjhGZ3BVbkEzenM4d044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMDhjZGMtYTNkNC00OTBiLThhMmIt
ZDljM2RmOGU5MmU3LzEvWjZsNVZIYUg1X25OQjhGZ3BVbkEzenM4d044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lMDhjZGMtYTNkNC00OTBiLThhMmItZDljM2RmOGU5MmU3
LzEvWjZsNVZIYUg1X25OQjhGZ3BVbkEzenM4d044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9U9zkBK
HIfLOF0P4VMMdvs8G8NZw0A93p1QF6otFLFuyOQKYHuO7nloOZ+koKHSMGNxfzcO
5PUa2IXlpegWVEy7fv7ZI3VNsgPhY60h5ic63eRv9O3jt8x9kctXgwgr21xRai/K
tnyJtZvFzPdMwbWC2il/sdBUB4hUIeQHORBEzdHp73N7m8R/0pEdNARx6aCSTj1k
HddRPt5OqqnxZV2rpJkBpnG+OWaCJWyUmgsdPKwIY8cvpFWZgqN4jUw1WA27onBi
aDjY5DeVAI535fXb/zCkfDQcHhoECyWhvZsumaLmuSPhrLjwV30vbZ0GooZK+q5d
cVzB4oDNRe80tA==
-----END CERTIFICATE-----