Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File:                     zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier:          opbgWlnD03D1p9KD4EmDAdHs/3UQIQi5Flxu0b9Zwgg=
Subject key identifier:   DB:2D:20:AF:A6:BF:B2:9E:15:4E:10:23:66:94:7C:04:49:37:07:54
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer:       /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial:       01962F74A5A3D29D91D3E8AA217937544867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: 35AP/+Sc17j5ARM6QNnBrv/ldWuhHRNAEHZXiiktVlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a5:a3:d2:9d:91:d3:e8:aa:21:79:37:54:48:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=db2d20afa6bfb29e154e102366947c0449370754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:d2:0f:67:5b:ce:63:72:95:ce:bb:98:ec:
                    25:18:6a:9f:74:1e:fb:67:4c:0f:c5:e3:18:f0:47:
                    4c:12:c6:2f:73:45:b2:80:04:e8:18:4c:33:f1:a1:
                    e9:71:a5:29:8d:b3:7f:f4:42:2c:8d:c1:da:1f:e2:
                    4e:4b:27:25:b6:06:f6:41:c4:40:c8:bd:4e:a0:d5:
                    be:69:dd:cb:23:99:ec:85:89:54:49:fd:1d:d0:ee:
                    7b:6c:91:6e:9e:81:b7:ec:86:69:46:4a:2f:aa:ea:
                    6a:91:7d:2c:20:41:f5:d1:cb:c1:a8:63:f7:57:e7:
                    93:82:49:b1:40:f4:07:d4:69:8c:b3:6f:14:27:c8:
                    c7:92:f1:30:56:7a:6c:60:f2:27:09:8c:a7:be:e4:
                    c0:e0:ea:54:bf:24:85:cd:de:1f:98:0a:0d:74:fe:
                    e8:21:8e:b1:db:5f:32:5d:0a:bc:ee:c4:c0:49:85:
                    2d:5b:a5:34:19:d8:43:ae:19:b7:f6:92:c4:3d:82:
                    71:e7:d7:70:16:33:dd:7e:81:21:37:15:fe:9b:ea:
                    4c:14:7b:2d:40:9d:d5:0a:41:46:0b:2e:86:6a:37:
                    29:13:f6:74:e1:c2:c6:48:60:71:93:c9:49:b4:97:
                    e1:24:48:9f:90:08:e4:55:65:dc:54:0c:3f:76:60:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2D:20:AF:A6:BF:B2:9E:15:4E:10:23:66:94:7C:04:49:37:07:54
            X509v3 Authority Key Identifier:
                keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:66:39:aa:79:20:a1:84:c3:ef:f5:06:a8:a7:84:e7:c8:
         60:35:7b:ab:be:c4:2f:56:a3:b0:42:7d:82:f7:e4:f2:79:36:
         12:d8:ce:b6:fc:40:ff:4c:61:b9:99:33:ea:ee:e7:65:74:f9:
         d0:29:4c:1e:60:c4:5e:c1:55:f9:82:09:d7:1c:ae:c6:72:30:
         32:2f:21:6a:04:c1:f2:71:58:7a:ec:a2:5d:63:30:d6:1a:45:
         60:ba:1f:1d:b1:ab:74:57:5b:68:09:9e:d9:9d:2c:38:eb:15:
         1a:4f:2a:de:94:e4:6f:5d:5d:fe:be:84:00:05:5a:1d:f8:d7:
         11:8b:25:f8:ea:0c:54:f6:f2:10:89:bf:18:86:b1:02:41:be:
         58:df:01:82:15:34:2e:31:a4:8f:e4:a3:8f:ed:36:25:df:52:
         b2:72:cd:1d:57:9c:13:db:aa:8c:6a:d7:70:ca:fa:90:2c:72:
         2f:b2:79:a8:60:ad:fe:4d:55:7a:65:10:c9:65:3f:ae:23:c6:
         2d:7d:53:f7:78:f4:eb:7e:14:44:97:e1:ea:49:42:b0:ca:fe:
         c6:c7:98:2d:8d:61:90:1a:4e:13:24:c4:08:0e:b4:85:50:c1:
         4e:7a:54:be:96:0f:48:f1:34:36:73:33:e4:e5:81:a7:32:8f:
         b1:12:8b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKWj0p2R0+iqIXk3VEhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzg0MDgyYmU5NmU2MDlkOWRlOTgwOGZiYzM3ODY2ZmVi
NGM1NGIwHhcNMjUwNDEzMTQwMTM1WhcNMjUwNDE0MTQwMTM1WjAzMTEwLwYDVQQD
EyhkYjJkMjBhZmE2YmZiMjllMTU0ZTEwMjM2Njk0N2MwNDQ5MzcwNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2LSD2dbzmNylc67mOwlGGqfdB77
Z0wPxeMY8EdMEsYvc0WygAToGEwz8aHpcaUpjbN/9EIsjcHaH+JOSycltgb2QcRA
yL1OoNW+ad3LI5nshYlUSf0d0O57bJFunoG37IZpRkovqupqkX0sIEH10cvBqGP3
V+eTgkmxQPQH1GmMs28UJ8jHkvEwVnpsYPInCYynvuTA4OpUvySFzd4fmAoNdP7o
IY6x218yXQq87sTASYUtW6U0GdhDrhm39pLEPYJx59dwFjPdfoEhNxX+m+pMFHst
QJ3VCkFGCy6GajcpE/Z04cLGSGBxk8lJtJfhJEifkAjkVWXcVAw/dmAJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNstIK+mv7KeFU4QI2aUfARJNwdUMB8GA1UdIwQY
MBaAFM3IQIK+luYJ2d6YCPvDeGb+tMVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMt
Y2JmMTY0ZThiZTAxLzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMtY2JmMTY0ZThiZTAx
LzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKBmOap5
IKGEw+/1BqinhOfIYDV7q77EL1ajsEJ9gvfk8nk2EtjOtvxA/0xhuZkz6u7nZXT5
0ClMHmDEXsFV+YIJ1xyuxnIwMi8hagTB8nFYeuyiXWMw1hpFYLofHbGrdFdbaAme
2Z0sOOsVGk8q3pTkb11d/r6EAAVaHfjXEYsl+OoMVPbyEIm/GIaxAkG+WN8BghU0
LjGkj+Sjj+02Jd9SsnLNHVecE9uqjGrXcMr6kCxyL7J5qGCt/k1VemUQyWU/riPG
LX1T93j0634URJfh6klCsMr+xseYLY1hkBpOEyTECA60hVDBTnpUvpYPSPE0NnMz
5OWBpzKPsRKLMg==
-----END CERTIFICATE-----