Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File:                     Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier:          C1qPwVzYUCvRaMTtJ4NIPsZwoSGAJUbqpEfaSv0CVZE=
Subject key identifier:   06:AD:68:82:AC:5D:9B:7B:48:ED:FE:63:2E:30:8A:46:9D:0E:87:4A
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer:       /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial:       01962E98955133C6F360620850B1B928AA9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
                          2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: aWRwqCq83fw8/iW8OdqvW6Gs3cass0wnLLLAqHPte9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:95:51:33:c6:f3:60:62:08:50:b1:b9:28:aa:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=06ad6882ac5d9b7b48edfe632e308a469d0e874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:7a:6c:5f:bf:d5:67:b6:a4:cc:3e:ab:79:
                    9b:6a:79:a8:46:ed:6d:61:e2:4b:12:32:2d:19:08:
                    04:a7:7f:1a:98:7f:5c:5b:be:64:ad:98:bb:c2:91:
                    ed:4f:58:d4:dc:2f:6d:96:76:83:12:fa:a0:99:5c:
                    d9:47:d3:13:39:a2:6f:61:67:50:e9:fc:7e:9a:cd:
                    6d:d4:9a:9b:89:3b:1f:37:ea:d1:20:61:70:0c:43:
                    09:9c:62:b6:1d:71:7f:67:d5:c6:bf:bc:f6:71:ab:
                    99:95:37:af:20:9a:41:1d:e4:e7:73:d1:69:7e:5c:
                    e3:58:44:1e:23:9a:f1:34:42:12:af:bd:d6:03:17:
                    11:29:fd:8c:77:9c:34:dc:d4:2f:f4:40:f9:2e:c8:
                    d7:fd:5e:be:93:5d:89:c2:b7:7c:d5:e1:d6:44:df:
                    da:4e:07:6e:d0:5c:38:3d:6e:8c:fb:48:8d:72:19:
                    fa:89:3c:5d:4f:48:4c:10:8e:27:f6:f5:75:75:a4:
                    67:f8:e9:70:10:c0:21:b0:c0:63:92:70:db:c5:39:
                    16:88:22:a4:a0:c6:ba:28:4c:07:23:63:0d:fb:7e:
                    1b:44:3f:23:ad:2f:7a:a3:15:b1:5e:43:5e:97:45:
                    d6:db:e5:84:61:b9:18:e2:7b:df:16:99:79:85:82:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:68:82:AC:5D:9B:7B:48:ED:FE:63:2E:30:8A:46:9D:0E:87:4A
            X509v3 Authority Key Identifier:
                keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:6e:62:ee:1d:bc:0e:7a:43:66:e3:d0:2a:e1:0b:e1:a6:
         99:14:8c:29:84:41:ef:cb:b6:f5:f8:16:e5:3c:87:ef:3f:97:
         b1:c4:5f:cd:29:c3:5d:ce:5b:93:4b:4f:a9:31:69:29:8e:30:
         0b:9a:ab:84:9a:5d:52:8c:88:df:06:ba:2b:70:c5:d3:4b:c8:
         d9:29:09:3d:f4:08:ab:b5:91:22:b7:7e:1a:c0:20:a3:16:4b:
         52:bd:56:41:e3:53:8b:9f:a2:bb:7d:ba:bf:3a:bd:e8:15:2f:
         94:0e:b6:b2:65:76:9b:9d:92:44:cd:9b:b3:96:9b:a4:b7:86:
         fd:d5:fc:76:a4:4f:99:5e:e2:dd:50:09:a9:ca:b9:88:fa:03:
         05:2f:e5:7f:ce:83:c0:63:d3:5f:4f:44:8e:c4:98:33:a9:57:
         6e:f8:cb:cb:1c:57:96:e6:81:3f:3e:73:89:be:d1:41:13:27:
         e6:ff:ee:e3:43:55:9d:ac:f7:29:84:10:71:54:8c:64:d7:a1:
         47:05:b7:6b:ed:d7:c7:96:4a:ba:8c:4b:ed:5b:9c:bd:a0:a6:
         d1:1e:ea:c9:1a:68:df:a4:35:f3:0f:8b:5e:8e:1d:ca:30:cc:
         93:dd:c7:db:c7:15:4d:c9:37:e5:7f:9b:b8:e1:23:d3:9d:88:
         57:71:e3:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJVRM8bzYGIIULG5KKqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDk3NThiOGM4YzM3MzU4M2MwNTc1MTY2ZDYyMzQzNjAw
YzdmMDEwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
EygwNmFkNjg4MmFjNWQ5YjdiNDhlZGZlNjMyZTMwOGE0NjlkMGU4NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUJ6bF+/1We2pMw+q3mbanmoRu1t
YeJLEjItGQgEp38amH9cW75krZi7wpHtT1jU3C9tlnaDEvqgmVzZR9MTOaJvYWdQ
6fx+ms1t1JqbiTsfN+rRIGFwDEMJnGK2HXF/Z9XGv7z2cauZlTevIJpBHeTnc9Fp
flzjWEQeI5rxNEISr73WAxcRKf2Md5w03NQv9ED5LsjX/V6+k12Jwrd81eHWRN/a
Tgdu0Fw4PW6M+0iNchn6iTxdT0hMEI4n9vV1daRn+OlwEMAhsMBjknDbxTkWiCKk
oMa6KEwHI2MN+34bRD8jrS96oxWxXkNel0XW2+WEYbkY4nvfFpl5hYLSmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAataIKsXZt7SO3+Yy4wikadDodKMB8GA1UdIwQY
MBaAFGbZdYuMjDc1g8BXUWbWI0NgDH8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWIt
ZWU4ODMxOTI0YjMyLzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWItZWU4ODMxOTI0YjMy
LzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYxuYu4d
vA56Q2bj0CrhC+GmmRSMKYRB78u29fgW5TyH7z+XscRfzSnDXc5bk0tPqTFpKY4w
C5qrhJpdUoyI3wa6K3DF00vI2SkJPfQIq7WRIrd+GsAgoxZLUr1WQeNTi5+iu326
vzq96BUvlA62smV2m52SRM2bs5abpLeG/dX8dqRPmV7i3VAJqcq5iPoDBS/lf86D
wGPTX09EjsSYM6lXbvjLyxxXluaBPz5zib7RQRMn5v/u40NVnaz3KYQQcVSMZNeh
RwW3a+3Xx5ZKuoxL7VucvaCm0R7qyRpo36Q18w+LXo4dyjDMk93H28cVTck35X+b
uOEj052IV3HjPA==
-----END CERTIFICATE-----