Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File:                     M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier:          Y+pxXUJddN2yr4PjEQexBmcp2KXr1pwqn+3qiuKHh2Q=
Subject key identifier:   0F:D6:87:9C:A7:75:1A:94:96:A8:DC:CF:CE:30:8F:AD:B3:80:EB:F1
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer:       /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial:       01962F067D8F6D84BE83C0368A10DB0DFC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number:          0101
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (hash: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=)
                          2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: cX7m+7NkTRthNaaUnUwW+9/Pe4+KUT1lKZfDVyBbSD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7d:8f:6d:84:be:83:c0:36:8a:10:db:0d:fc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=0fd6879ca7751a9496a8dccfce308fadb380ebf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:88:75:cd:d9:54:6c:8e:58:26:3b:21:91:
                    00:ed:38:b7:d8:df:fb:62:59:a7:f1:af:53:66:25:
                    78:3a:50:c5:9a:90:32:c7:42:d2:60:e7:ba:0d:a8:
                    ef:78:e0:6f:d8:bb:10:f3:e1:97:cb:44:14:a6:b1:
                    87:9f:aa:5a:2c:a7:fa:c3:64:c1:ea:2f:1e:a1:13:
                    d8:54:de:79:4b:f8:78:f7:76:16:4c:76:8a:f7:8a:
                    4b:97:7d:dd:2a:45:3c:70:8b:dc:2c:f4:d1:63:ad:
                    fe:ed:46:cd:69:fe:2c:c1:b1:9c:75:97:7e:e4:f6:
                    5c:5d:49:24:7a:40:34:ea:b6:3a:3f:e7:10:45:88:
                    17:48:4d:04:b8:8d:d5:63:b5:49:93:13:bd:2f:e0:
                    d1:72:d0:49:e1:95:70:7f:be:f7:c4:e3:2d:a4:79:
                    c1:a9:27:6b:89:96:6f:7e:b1:7b:da:f5:ed:77:14:
                    dc:11:0f:1a:17:f5:c4:dd:19:f7:ef:f7:6a:ee:b6:
                    ca:87:92:77:8a:3b:48:d5:55:c6:d5:96:8d:5c:8f:
                    d8:8d:7a:6b:f3:72:80:0d:04:95:58:9f:02:87:4d:
                    6f:fc:1c:77:fd:f2:f8:e2:65:55:47:60:f8:23:47:
                    16:67:07:ac:62:62:3e:31:7d:86:09:f6:b2:ae:5b:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:87:9C:A7:75:1A:94:96:A8:DC:CF:CE:30:8F:AD:B3:80:EB:F1
            X509v3 Authority Key Identifier:
                keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:92:80:6b:b8:0c:85:a1:98:0b:6f:5d:67:d8:99:ed:ee:
         07:b0:b4:45:a6:93:17:f2:0a:d7:85:cc:28:44:99:ed:a9:04:
         e9:e1:4b:55:20:67:8d:75:94:41:cb:fb:9d:bf:11:1b:2b:14:
         3b:24:b6:89:79:f7:0c:e8:d5:e8:78:f4:09:c4:aa:e3:50:c2:
         b8:8f:39:75:38:25:0d:d9:47:f7:6a:dc:6c:49:e9:ab:72:61:
         39:67:59:f7:1d:db:72:8c:a5:a4:f4:a7:ac:15:7a:ad:fa:67:
         2e:99:00:60:44:e0:46:d4:ec:b2:9b:ab:74:b7:d8:ab:5a:9d:
         2d:55:47:bf:9a:93:a1:77:ce:88:f1:b5:df:22:63:50:db:06:
         3d:6e:36:00:ee:5a:64:da:e9:d3:04:a3:1f:bb:a9:cd:b6:94:
         4b:ca:43:de:3a:25:0e:e7:9c:0b:ac:cd:ae:21:10:e5:69:ab:
         a8:81:0a:8d:71:79:9f:37:d2:bc:5e:3d:28:13:2b:1d:2a:41:
         e6:ee:63:d9:53:c6:6c:2a:e9:98:8c:17:34:75:64:13:49:34:
         14:70:b5:7f:33:03:18:95:d8:ee:61:f8:ca:ac:56:3b:7f:d1:
         cc:6c:b5:65:64:71:99:88:77:79:a9:fa:ce:9f:dd:04:cf:ae:
         a5:1f:bc:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBn2PbYS+g8A2ihDbDfxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjY1YThiYWViYTRmZjYyMTQ5MmViZWU2ZmMxZTg4YWRi
MjFiMDMwHhcNMjUwNDEzMTIwMTE2WhcNMjUwNDE0MTIwMTE2WjAzMTEwLwYDVQQD
EygwZmQ2ODc5Y2E3NzUxYTk0OTZhOGRjY2ZjZTMwOGZhZGIzODBlYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbWIdc3ZVGyOWCY7IZEA7Ti32N/7
Ylmn8a9TZiV4OlDFmpAyx0LSYOe6DajveOBv2LsQ8+GXy0QUprGHn6paLKf6w2TB
6i8eoRPYVN55S/h493YWTHaK94pLl33dKkU8cIvcLPTRY63+7UbNaf4swbGcdZd+
5PZcXUkkekA06rY6P+cQRYgXSE0EuI3VY7VJkxO9L+DRctBJ4ZVwf773xOMtpHnB
qSdriZZvfrF72vXtdxTcEQ8aF/XE3Rn37/dq7rbKh5J3ijtI1VXG1ZaNXI/YjXpr
83KADQSVWJ8Ch01v/Bx3/fL44mVVR2D4I0cWZwesYmI+MX2GCfayrlsAAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/Wh5yndRqUlqjcz84wj62zgOvxMB8GA1UdIwQY
MBaAFDO2Wouuuk/2IUkuvub8HoitshsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0Njkt
ZDU0NzE4NTUxMmRlLzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0NjktZDU0NzE4NTUxMmRl
LzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4KSgGu4
DIWhmAtvXWfYme3uB7C0RaaTF/IK14XMKESZ7akE6eFLVSBnjXWUQcv7nb8RGysU
OyS2iXn3DOjV6Hj0CcSq41DCuI85dTglDdlH92rcbEnpq3JhOWdZ9x3bcoylpPSn
rBV6rfpnLpkAYETgRtTsspurdLfYq1qdLVVHv5qToXfOiPG13yJjUNsGPW42AO5a
ZNrp0wSjH7upzbaUS8pD3jolDuecC6zNriEQ5WmrqIEKjXF5nzfSvF49KBMrHSpB
5u5j2VPGbCrpmIwXNHVkE0k0FHC1fzMDGJXY7mH4yqxWO3/RzGy1ZWRxmYh3ean6
zp/dBM+upR+8CQ==
-----END CERTIFICATE-----