Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File:                     ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier:          XEmHpc1vB+ZjVpNYc5DCfKakSprvjNS3+HOx0//m48c=
Subject key identifier:   19:32:92:E3:4D:4B:65:AF:A1:04:11:73:10:4D:6D:B0:21:AD:28:5E
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer:       /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial:       01962E61B68226FE54C2757207675CCEBCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number:          0D9F
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
                          2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
                          3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: bsz7NUbe4R7FpZZpXKhyp4hHg3N+Mk6VxO6t4McH7XU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b6:82:26:fe:54:c2:75:72:07:67:5c:ce:bc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=193292e34d4b65afa1041173104d6db021ad285e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:02:48:bd:5f:f1:13:a5:c1:65:47:a2:01:
                    f3:8b:30:f9:6e:34:1c:e1:d4:af:c6:5d:5a:57:53:
                    2f:27:24:d1:94:18:e0:82:ce:d4:4d:d8:c7:d8:9e:
                    38:63:68:4d:e6:1b:51:ae:64:f3:58:16:a6:94:94:
                    da:b0:2f:87:7a:23:cc:59:75:65:ae:4b:10:41:29:
                    59:7d:b9:0b:b2:86:7a:a7:07:1e:a0:8a:0f:4c:fe:
                    ec:5a:32:62:bb:69:08:53:c9:da:4f:a0:21:f5:dd:
                    e0:78:05:ef:dd:e5:47:ad:98:a0:d4:06:d6:67:e8:
                    57:36:7f:bd:07:12:d5:99:67:c2:98:a7:3c:6e:9f:
                    74:26:5a:7d:3c:fe:7c:b4:59:4a:06:f9:98:2e:1f:
                    9e:c5:80:4b:49:a3:a7:fe:5d:45:28:cb:b9:d8:f3:
                    d5:9e:54:9c:b9:50:d1:56:42:2e:c0:a3:fe:48:b6:
                    ce:13:cc:30:e2:0e:96:ba:1a:e3:aa:01:cd:d1:9d:
                    2b:61:95:6f:f1:ce:92:f0:63:e6:7d:74:50:fb:1f:
                    79:5e:1f:dd:cb:39:72:93:63:7d:82:1b:71:1b:d8:
                    f0:9b:83:54:bb:06:79:c5:72:8e:19:e5:23:84:8e:
                    1b:40:31:21:32:b8:72:d6:ff:a9:4e:fb:97:8d:79:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:32:92:E3:4D:4B:65:AF:A1:04:11:73:10:4D:6D:B0:21:AD:28:5E
            X509v3 Authority Key Identifier:
                keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8b:a1:84:1a:b6:71:b6:d3:1d:8a:04:b3:ed:97:18:85:3a:
         91:bd:a4:ac:d0:3a:42:3b:1c:ca:c5:d4:65:73:21:81:95:8a:
         85:f5:ea:d0:f5:61:b2:73:1b:0f:71:38:4d:37:02:c8:35:cd:
         89:21:c6:07:c6:b0:d2:3e:d1:82:e0:73:65:db:2a:f1:66:a9:
         7a:09:cc:f8:82:93:e4:8b:30:0a:32:92:a4:db:d8:85:f8:22:
         15:be:23:7b:aa:9a:55:35:b0:f7:f3:6c:77:96:70:27:10:26:
         fc:d9:83:5b:84:7b:79:cb:8c:73:d9:d1:a8:18:4f:7f:24:38:
         24:f5:f9:99:09:d7:92:a9:e9:a1:e6:06:e0:a5:43:24:be:46:
         2a:2a:1b:b5:b5:73:23:08:ec:5f:6d:8e:13:93:48:79:37:91:
         a6:2f:bc:79:cc:c3:04:71:04:af:de:64:d6:ef:9b:02:ca:11:
         d8:38:f3:62:23:f0:43:ef:0d:b0:45:ab:92:0d:03:8b:48:38:
         44:30:9c:38:5f:be:d9:53:13:c7:59:65:62:6b:35:2b:69:23:
         4d:eb:ed:2b:a2:e0:d3:84:ab:0a:25:63:a3:76:cf:da:89:ca:
         c8:98:3e:5c:e7:ec:58:46:06:24:ab:10:42:1e:c7:75:8c:be:
         ce:1e:35:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbaCJv5UwnVyB2dczrz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk
OWRjYzgwHhcNMjUwNDEzMDkwMTE3WhcNMjUwNDE0MDkwMTE3WjAzMTEwLwYDVQQD
EygxOTMyOTJlMzRkNGI2NWFmYTEwNDExNzMxMDRkNmRiMDIxYWQyODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGwCSL1f8ROlwWVHogHzizD5bjQc
4dSvxl1aV1MvJyTRlBjggs7UTdjH2J44Y2hN5htRrmTzWBamlJTasC+HeiPMWXVl
rksQQSlZfbkLsoZ6pwceoIoPTP7sWjJiu2kIU8naT6Ah9d3geAXv3eVHrZig1AbW
Z+hXNn+9BxLVmWfCmKc8bp90Jlp9PP58tFlKBvmYLh+exYBLSaOn/l1FKMu52PPV
nlScuVDRVkIuwKP+SLbOE8ww4g6WuhrjqgHN0Z0rYZVv8c6S8GPmfXRQ+x95Xh/d
yzlyk2N9ghtxG9jwm4NUuwZ5xXKOGeUjhI4bQDEhMrhy1v+pTvuXjXkOrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkykuNNS2WvoQQRcxBNbbAhrSheMB8GA1UdIwQY
MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut
NmQyZTExZmUwOGNkLzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk
LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIuhhBq2
cbbTHYoEs+2XGIU6kb2krNA6QjscysXUZXMhgZWKhfXq0PVhsnMbD3E4TTcCyDXN
iSHGB8aw0j7RguBzZdsq8WapegnM+IKT5IswCjKSpNvYhfgiFb4je6qaVTWw9/Ns
d5ZwJxAm/NmDW4R7ecuMc9nRqBhPfyQ4JPX5mQnXkqnpoeYG4KVDJL5GKiobtbVz
IwjsX22OE5NIeTeRpi+8eczDBHEEr95k1u+bAsoR2DjzYiPwQ+8NsEWrkg0Di0g4
RDCcOF++2VMTx1llYms1K2kjTevtK6Lg04SrCiVjo3bP2onKyJg+XOfsWEYGJKsQ
Qh7HdYy+zh41xQ==
-----END CERTIFICATE-----