Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File:                     ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier:          /N+5MmRRh/K6mKtevE6zK46kJJSArgK5fumilzhD95A=
Subject key identifier:   3E:98:E2:54:BD:06:56:1F:25:F8:DE:8D:7F:BE:FA:87:AD:E6:D2:16
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer:       /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial:       01962FAB39F1CBD828A0DD61CFCB5D7812D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number:          0B44
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: 1k9bGhovCkvG/Cn9OmO81iZ1esgL4hIYk1/ZL7u/X24=)
                          2: kHEeKE6TgxrOJerD-_ZXw-D5vjg.roa (hash: RWbQV5MQo5FT3Cm1pl/JMVADI60RB0vYV0kYhmIAzNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:f1:cb:d8:28:a0:dd:61:cf:cb:5d:78:12:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=3e98e254bd06561f25f8de8d7fbefa87ade6d216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:de:5c:92:b5:64:15:3a:2e:cd:ad:b2:46:
                    42:2c:06:9c:f8:86:0e:91:3f:cb:5d:e9:04:85:ec:
                    a7:0a:f7:3f:b9:91:ab:06:da:bb:ec:8a:32:51:1d:
                    8e:4b:f3:0d:17:6d:fd:a0:7d:70:b8:ed:f4:e1:05:
                    5c:77:33:49:d8:a0:ad:54:dd:5a:6c:0c:8a:19:96:
                    0e:a8:40:54:28:3c:df:8b:e4:6e:9e:9d:20:73:94:
                    31:e1:4e:d2:c7:41:bc:ae:4f:fb:a7:e3:fd:e0:96:
                    1e:04:b7:ca:e5:44:bb:98:c9:b5:13:bd:00:b0:5e:
                    63:49:d9:f7:b3:0e:f3:71:63:4e:3e:3f:73:51:7d:
                    ea:3e:fb:b9:6e:a4:26:78:13:96:2b:b0:b1:81:9d:
                    e8:01:38:ed:ba:d9:ca:e9:9c:75:51:2e:e4:6e:41:
                    af:dc:be:ad:e5:12:27:39:9c:f4:92:7f:00:80:b2:
                    47:07:2d:69:e8:cc:5e:5c:11:79:7b:26:03:08:97:
                    b8:cc:7f:08:10:f9:30:eb:ce:0f:63:46:79:dd:9e:
                    35:16:c6:4c:d8:2f:d4:49:55:4f:80:81:ab:f6:f9:
                    54:55:e4:c2:43:13:38:bd:71:68:5b:85:a1:eb:a1:
                    ed:11:73:6c:35:62:b5:45:25:bd:04:0e:85:00:ea:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:98:E2:54:BD:06:56:1F:25:F8:DE:8D:7F:BE:FA:87:AD:E6:D2:16
            X509v3 Authority Key Identifier:
                keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:4e:08:97:ed:77:ed:ba:6e:10:ed:29:15:30:4f:0d:57:
         d5:3b:c3:d6:ef:f2:13:b5:3f:65:eb:44:94:42:ce:e6:59:98:
         c0:d5:48:8c:75:1e:da:2d:28:60:7e:d9:26:11:b5:12:12:6d:
         eb:ab:b0:b3:70:10:ca:b4:ec:75:de:77:a7:71:df:c4:b0:8f:
         72:bc:95:df:13:6a:b2:1e:aa:07:5f:d7:30:c9:b4:3c:08:43:
         a9:fc:b4:a3:11:e6:61:8e:83:14:38:f1:56:76:94:17:97:18:
         14:fa:a1:5a:94:49:69:b7:ed:20:d6:7b:8c:7c:d1:29:8c:47:
         e8:ff:b5:d1:ac:c7:4f:08:32:93:02:0a:ae:b0:97:6e:29:ae:
         39:0c:0f:b6:5d:f8:29:fb:68:7d:78:5c:db:4b:a3:1c:e0:c5:
         dc:d4:1b:6f:20:b6:ef:bf:b6:74:a5:12:a9:89:69:81:c9:7e:
         4c:be:e3:38:12:4a:4d:7b:5f:d6:94:69:1b:e4:9a:c3:2f:6d:
         3a:e5:d9:54:90:66:dd:3a:9b:15:30:0e:40:5f:ab:6b:af:12:
         0a:ed:3d:5e:7b:10:b2:9e:48:2b:16:ac:b0:85:77:f2:ea:38:
         7a:ac:c4:75:27:ab:2e:1a:cf:d3:36:06:f7:a1:a8:a9:63:df:
         9a:71:a0:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqznxy9gooN1hz8tdeBLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MDFhZGVkYmM5YzhmMWM2Y2YyMzg5ZmM3Zjc0MWVkZjRm
MTlmMmMwHhcNMjUwNDEzMTUwMTEyWhcNMjUwNDE0MTUwMTEyWjAzMTEwLwYDVQQD
EygzZTk4ZTI1NGJkMDY1NjFmMjVmOGRlOGQ3ZmJlZmE4N2FkZTZkMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNbeXJK1ZBU6Ls2tskZCLAac+IYO
kT/LXekEheynCvc/uZGrBtq77IoyUR2OS/MNF239oH1wuO304QVcdzNJ2KCtVN1a
bAyKGZYOqEBUKDzfi+Runp0gc5Qx4U7Sx0G8rk/7p+P94JYeBLfK5US7mMm1E70A
sF5jSdn3sw7zcWNOPj9zUX3qPvu5bqQmeBOWK7CxgZ3oATjtutnK6Zx1US7kbkGv
3L6t5RInOZz0kn8AgLJHBy1p6MxeXBF5eyYDCJe4zH8IEPkw684PY0Z53Z41FsZM
2C/USVVPgIGr9vlUVeTCQxM4vXFoW4Wh66HtEXNsNWK1RSW9BA6FAOo4SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6Y4lS9BlYfJfjejX+++oet5tIWMB8GA1UdIwQY
MBaAFGQBre28nI8cbPI4n8f3Qe308Z8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEt
MzU2YzA5NmJjNmY5LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5
LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVxOCJft
d+26bhDtKRUwTw1X1TvD1u/yE7U/ZetElELO5lmYwNVIjHUe2i0oYH7ZJhG1EhJt
66uws3AQyrTsdd53p3HfxLCPcryV3xNqsh6qB1/XMMm0PAhDqfy0oxHmYY6DFDjx
VnaUF5cYFPqhWpRJabftINZ7jHzRKYxH6P+10azHTwgykwIKrrCXbimuOQwPtl34
KftofXhc20ujHODF3NQbbyC277+2dKUSqYlpgcl+TL7jOBJKTXtf1pRpG+Sawy9t
OuXZVJBm3TqbFTAOQF+ra68SCu09XnsQsp5IKxassIV38uo4eqzEdSerLhrP0zYG
96GoqWPfmnGgIw==
-----END CERTIFICATE-----