Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File:                     ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier:          9LAISvlBYN+x4qaFg6CIBDbC46hf62HXRc7ETJpECFA=
Subject key identifier:   6C:AF:CD:00:8E:4F:77:62:2C:BD:3E:12:E3:03:7E:FE:B2:F9:E3:6D
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer:       /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial:       01962E61E48660E3B87128E33DA8D274270B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
                          2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
                          3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
                          4: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
                          5: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: R+Mo0hTcqb+YC0U5R8htxWlB2gYrT+p1v6hNJlKeO9o=)
                          6: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
                          7: qGjMBqPIGRJHE7hen5oLYlZvunI.roa (hash: tYN0YvNDzfdVUoqabm5wEwnZWZKNLJ2LiXHf0iUoR6A=)
                          8: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:86:60:e3:b8:71:28:e3:3d:a8:d2:74:27:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=6cafcd008e4f77622cbd3e12e3037efeb2f9e36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:83:a2:b9:a1:3d:50:26:72:7c:7a:d8:cf:
                    8e:3c:c3:a5:7b:69:e3:f2:a1:ad:c2:59:a5:d1:57:
                    e7:62:39:14:ac:32:a9:c9:41:01:1d:0d:0b:ec:f8:
                    42:df:53:71:55:7c:9c:7f:50:e6:57:73:30:cd:c9:
                    c1:13:ca:c0:64:6f:72:f7:63:84:a3:db:06:4c:fb:
                    d9:80:2d:20:91:e4:22:5d:b9:70:a9:5c:40:15:04:
                    08:00:a3:5c:af:e4:8c:0c:26:48:1b:4d:74:fc:49:
                    d0:d5:d5:d3:c8:67:e0:72:d1:1f:ea:c2:b1:ea:e6:
                    4e:18:43:59:a1:79:eb:be:64:45:1d:86:46:ee:ab:
                    de:ce:0a:32:29:9f:4e:a9:68:fd:95:e1:25:74:32:
                    40:39:73:a2:f8:24:6d:b8:a2:8e:3b:54:78:2c:d6:
                    66:01:6b:b7:ef:7c:0b:20:2e:6e:b5:9a:03:ab:da:
                    53:40:fb:d4:71:c3:0f:c1:07:3e:ab:f8:83:bb:53:
                    f4:38:44:1d:70:de:b1:32:1c:4b:57:79:19:ef:fd:
                    78:37:b4:57:39:94:bc:d2:7c:81:40:87:ef:d3:1e:
                    3e:88:3f:1f:87:ea:45:ae:66:05:cf:a5:17:66:5c:
                    6a:e2:a8:df:88:e2:68:96:d3:82:94:2d:dc:4c:80:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AF:CD:00:8E:4F:77:62:2C:BD:3E:12:E3:03:7E:FE:B2:F9:E3:6D
            X509v3 Authority Key Identifier:
                keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:30:9b:79:b2:8f:5e:5b:53:5c:c3:bc:35:59:97:f0:9e:8b:
         4a:fe:e1:a2:ab:39:e4:99:ab:6e:1f:40:ef:dd:ba:7d:cb:a8:
         e0:27:fc:34:67:25:7f:f6:f7:ff:b1:f8:74:ef:97:8c:f9:7e:
         3a:ec:e2:5f:e8:67:93:98:cb:ab:7c:bd:24:72:74:fa:0d:bb:
         d7:a7:04:06:53:5d:0a:25:75:d0:b6:b4:87:e4:94:d7:ec:51:
         36:3e:c2:29:60:a0:1e:5f:ca:9c:f0:d1:a1:1f:96:c4:9f:24:
         9a:ea:c0:7a:43:1f:58:14:90:00:3b:29:80:8e:ec:bc:31:1c:
         28:e3:0e:61:64:a1:02:90:14:ed:69:77:47:dc:f5:1d:d6:10:
         9c:db:bb:c5:3d:b9:9a:e3:86:83:78:de:d5:b3:f3:f7:e2:32:
         fa:3b:b2:6c:a6:25:bf:6b:07:7d:81:f2:2a:dd:5b:63:81:89:
         c4:cf:6c:39:d3:e1:86:42:34:50:11:1f:26:3d:3a:57:f4:db:
         2a:d7:b7:ae:b3:1e:59:1c:46:f7:d4:12:82:f7:6d:9e:35:9d:
         83:cb:b3:29:39:21:c8:e6:9a:07:03:ba:c4:35:90:3e:91:35:
         5f:9d:b2:f8:5d:60:e7:bc:66:26:e4:38:89:f1:d8:3c:c2:9c:
         10:9c:de:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeSGYOO4cSjjPajSdCcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx
NTkwNjAwHhcNMjUwNDEzMDkwMTI5WhcNMjUwNDE0MDkwMTI5WjAzMTEwLwYDVQQD
Eyg2Y2FmY2QwMDhlNGY3NzYyMmNiZDNlMTJlMzAzN2VmZWIyZjllMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaCDormhPVAmcnx62M+OPMOle2nj
8qGtwlml0VfnYjkUrDKpyUEBHQ0L7PhC31NxVXycf1DmV3MwzcnBE8rAZG9y92OE
o9sGTPvZgC0gkeQiXblwqVxAFQQIAKNcr+SMDCZIG010/EnQ1dXTyGfgctEf6sKx
6uZOGENZoXnrvmRFHYZG7qvezgoyKZ9OqWj9leEldDJAOXOi+CRtuKKOO1R4LNZm
AWu373wLIC5utZoDq9pTQPvUccMPwQc+q/iDu1P0OEQdcN6xMhxLV3kZ7/14N7RX
OZS80nyBQIfv0x4+iD8fh+pFrmYFz6UXZlxq4qjfiOJoltOClC3cTIDEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyvzQCOT3diLL0+EuMDfv6y+eNtMB8GA1UdIwQY
MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt
YzFkMjk2ZjhmZDA3LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3
LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjCbebKP
XltTXMO8NVmX8J6LSv7hoqs55Jmrbh9A7926fcuo4Cf8NGclf/b3/7H4dO+XjPl+
OuziX+hnk5jLq3y9JHJ0+g2716cEBlNdCiV10La0h+SU1+xRNj7CKWCgHl/KnPDR
oR+WxJ8kmurAekMfWBSQADspgI7svDEcKOMOYWShApAU7Wl3R9z1HdYQnNu7xT25
muOGg3je1bPz9+Iy+juybKYlv2sHfYHyKt1bY4GJxM9sOdPhhkI0UBEfJj06V/Tb
Kte3rrMeWRxG99QSgvdtnjWdg8uzKTkhyOaaBwO6xDWQPpE1X52y+F1g57xmJuQ4
ifHYPMKcEJzehg==
-----END CERTIFICATE-----