Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File:                     B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier:          t71HCapb8op6guuLfmotk7fJTZXznFqbhpmoZIxVB3s=
Subject key identifier:   2C:83:3E:25:A9:27:50:18:B9:E2:2B:5F:A2:67:CD:AB:41:80:5C:DA
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer:       /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial:       01962E998CEBB2D839051CB2A3F4447F1CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number:          0BCD
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: hsPm2kileFXyCrJGWUc8bVC0B/cjzajFI9TetfZH39o=)
                          2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8c:eb:b2:d8:39:05:1c:b2:a3:f4:44:7f:1c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=2c833e25a9275018b9e22b5fa267cdab41805cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:b5:f4:41:29:44:ca:2e:ff:4c:7f:7f:68:
                    ae:af:1c:c7:de:88:e1:f0:e9:bb:04:72:65:ba:fb:
                    10:f8:fa:de:cf:4a:af:9d:be:72:12:a2:d4:16:cf:
                    27:bd:a3:7d:a2:ff:78:c3:9e:fd:82:b9:21:fe:86:
                    fe:90:a7:f1:91:83:82:46:c7:77:5c:81:b8:10:1f:
                    85:84:41:ba:4e:3e:c9:f7:c4:36:9e:cf:82:a9:2f:
                    38:65:7f:1b:f2:17:e6:4d:81:be:24:8a:44:da:47:
                    3b:29:ba:13:79:c2:24:85:69:52:61:ed:2d:32:39:
                    28:80:b8:99:f6:87:59:58:77:e8:11:cf:32:e2:64:
                    3d:fd:8c:e3:df:78:f5:a1:ec:1c:36:2d:62:5c:9e:
                    8e:7e:44:f0:9b:87:f3:b1:87:76:5c:ea:39:c9:ed:
                    f3:55:3e:d1:ee:aa:77:17:65:ea:57:34:91:43:b5:
                    47:65:e0:91:7a:cb:15:5e:d4:ba:5f:38:0b:e4:0a:
                    6b:7d:82:65:55:5e:f4:17:89:1b:58:a2:50:6a:c8:
                    d2:1a:04:22:82:b5:b9:6b:da:fe:f0:d4:2c:ce:7e:
                    ce:8c:2f:bb:7b:91:30:52:2a:20:fd:5f:cd:4d:e7:
                    4b:94:38:c8:14:41:17:aa:13:02:b0:46:63:c8:89:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:3E:25:A9:27:50:18:B9:E2:2B:5F:A2:67:CD:AB:41:80:5C:DA
            X509v3 Authority Key Identifier:
                keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b7:e9:72:49:b2:e7:31:a1:86:28:11:e3:28:81:39:50:1c:
         e4:36:c1:c2:8b:19:37:0a:c2:eb:84:1a:fd:b7:ea:40:1e:40:
         44:60:7d:f5:74:bf:93:c5:97:2c:64:3d:9e:7b:b3:d4:6f:a1:
         df:e1:b1:8c:3a:d5:ef:cf:00:2a:33:2d:a6:8b:0f:bd:6f:8a:
         ea:47:34:c9:84:cb:3c:7c:ea:74:a3:84:23:f8:28:12:3a:67:
         3b:8f:2d:5f:97:42:1c:f3:4d:28:cc:76:6a:9e:f7:bd:85:dc:
         6c:ad:93:42:c5:99:7f:19:75:ca:60:b0:b4:d4:19:bb:af:c1:
         ce:88:2b:5a:81:00:4d:23:9e:e0:89:b2:20:1e:05:d0:f4:88:
         79:57:cc:6e:28:01:05:41:d9:1c:e7:38:a5:61:8e:f1:ef:99:
         04:89:cd:43:06:c0:5d:d3:c0:a5:a4:5e:8b:86:31:d4:fd:52:
         9b:ca:b7:6b:46:3c:56:d1:0b:d9:3a:a9:22:d9:33:d7:62:72:
         84:92:60:9c:b1:e9:dc:16:e0:2f:13:9b:03:3b:06:32:43:4a:
         67:5d:a1:25:5f:8c:a2:97:a0:7c:9c:4a:df:d3:b4:de:82:d4:
         f8:60:9e:44:8c:4d:11:41:6d:04:7d:de:4f:e9:8a:fd:44:6c:
         f6:e5:1d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYzrstg5BRyyo/REfxzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDY0ZGFlZjMzOWU2ZmRhZTY0NGRiMWIyMGJiZjU0ZTY3
ZTVkNjYwHhcNMjUwNDEzMTAwMjE3WhcNMjUwNDE0MTAwMjE3WjAzMTEwLwYDVQQD
EygyYzgzM2UyNWE5Mjc1MDE4YjllMjJiNWZhMjY3Y2RhYjQxODA1Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26G19EEpRMou/0x/f2iurxzH3ojh
8Om7BHJluvsQ+Prez0qvnb5yEqLUFs8nvaN9ov94w579grkh/ob+kKfxkYOCRsd3
XIG4EB+FhEG6Tj7J98Q2ns+CqS84ZX8b8hfmTYG+JIpE2kc7KboTecIkhWlSYe0t
MjkogLiZ9odZWHfoEc8y4mQ9/Yzj33j1oewcNi1iXJ6OfkTwm4fzsYd2XOo5ye3z
VT7R7qp3F2XqVzSRQ7VHZeCRessVXtS6XzgL5AprfYJlVV70F4kbWKJQasjSGgQi
grW5a9r+8NQszn7OjC+7e5EwUiog/V/NTedLlDjIFEEXqhMCsEZjyIknYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyDPiWpJ1AYueIrX6JnzatBgFzaMB8GA1UdIwQY
MBaAFAfWTa7zOeb9rmRNsbILv1Tmfl1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDct
ODI3Zjk2NDhjMDIyLzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDctODI3Zjk2NDhjMDIy
LzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrfpckmy
5zGhhigR4yiBOVAc5DbBwosZNwrC64Qa/bfqQB5ARGB99XS/k8WXLGQ9nnuz1G+h
3+GxjDrV788AKjMtposPvW+K6kc0yYTLPHzqdKOEI/goEjpnO48tX5dCHPNNKMx2
ap73vYXcbK2TQsWZfxl1ymCwtNQZu6/BzogrWoEATSOe4ImyIB4F0PSIeVfMbigB
BUHZHOc4pWGO8e+ZBInNQwbAXdPApaRei4Yx1P1Sm8q3a0Y8VtEL2TqpItkz12Jy
hJJgnLHp3BbgLxObAzsGMkNKZ12hJV+MopegfJxK39O03oLU+GCeRIxNEUFtBH3e
T+mK/URs9uUdrg==
-----END CERTIFICATE-----