Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File:                     Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier:          Qe4rdmQMD2wg8enteyRIP16pAmZ0RvIDCUsUuBfNSZM=
Subject key identifier:   E7:A9:A6:04:13:39:A7:DB:EF:06:0D:06:95:2B:31:7D:F9:0C:34:B5
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer:       /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial:       01962F073D672B052C3EFBB5BED40374F71A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number:          0C0B
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: XC8PST+7z37T6X53oZyOIn7LF5fDCo0Ics4zta4QQuA=)
                          2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3d:67:2b:05:2c:3e:fb:b5:be:d4:03:74:f7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=e7a9a6041339a7dbef060d06952b317df90c34b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:29:f7:c0:d5:c6:82:d6:a7:25:7b:02:75:
                    56:69:e7:bb:b6:8f:3e:aa:49:68:0b:d9:e9:29:d9:
                    b0:e2:74:09:cc:67:71:a1:04:ee:6f:cd:fc:03:ee:
                    ea:1f:f4:5f:38:70:60:cc:d7:21:51:87:e9:eb:5c:
                    52:62:6d:c4:3e:f0:57:c5:ca:2e:e8:b4:f9:a0:8c:
                    b9:94:33:b8:0a:d2:db:54:e0:86:64:1c:29:85:68:
                    21:01:09:ca:85:40:ed:4b:bf:8b:6b:67:a6:86:28:
                    f5:2b:ca:c1:39:a9:72:7b:8f:6e:14:2f:83:89:5e:
                    56:ea:1c:a6:d6:8b:18:1a:5c:5b:66:01:fb:c9:b7:
                    38:b3:2e:52:04:e7:b9:bf:29:9e:52:c7:d8:a5:fa:
                    51:08:a6:1b:90:26:dd:34:10:04:6f:7d:08:de:49:
                    fa:71:3b:9a:56:bf:c6:95:cd:82:33:54:54:3a:8f:
                    69:ea:02:0d:48:67:18:ac:d0:64:11:0a:ea:4a:f8:
                    22:09:5b:d3:95:5e:f6:5d:fc:5f:0a:e4:f5:43:92:
                    a3:e0:eb:ed:98:3a:a2:ea:dc:0d:62:6e:68:cd:86:
                    4b:1b:b8:10:09:b8:cc:03:55:8f:1f:e2:dd:ce:58:
                    c0:32:72:92:ec:22:aa:7d:e2:65:ab:07:86:d9:ef:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:A6:04:13:39:A7:DB:EF:06:0D:06:95:2B:31:7D:F9:0C:34:B5
            X509v3 Authority Key Identifier:
                keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:28:e6:16:8b:23:7e:1b:65:0d:2f:e3:67:19:4e:ce:4e:
         39:08:cb:74:e1:ef:b4:13:27:89:41:9b:73:26:97:5f:ed:2f:
         76:65:52:60:67:af:95:0a:71:36:3c:3d:8b:cf:9a:24:1c:a8:
         1a:7c:fb:07:90:86:b6:64:44:16:d5:69:bd:71:f4:3b:b7:11:
         c2:de:5f:55:b6:fa:dc:49:70:5e:c1:05:50:8f:f7:df:e3:79:
         6c:1b:37:2b:5d:fd:1f:75:8f:91:38:99:49:1f:88:7e:0a:3d:
         79:fe:f0:57:cc:8f:48:e2:98:ac:10:d6:f6:c1:65:ac:ae:73:
         87:eb:24:d0:d4:f9:1b:cc:e3:01:16:f4:5e:4b:68:02:f9:f6:
         98:50:48:74:11:b9:a6:c9:78:9f:3c:d0:17:63:5a:e1:29:2a:
         40:e7:10:31:4e:f3:83:ef:20:7f:2f:fe:ac:7d:96:10:b6:8c:
         a2:02:9b:9b:f3:25:53:e8:a6:8a:6a:e5:10:c0:bc:0f:cb:41:
         61:25:43:36:17:8d:bd:b3:b5:33:7a:63:26:3e:21:6a:98:32:
         f1:48:e7:d4:65:9d:fb:6c:50:5b:b7:5d:2b:af:95:04:ab:e3:
         49:d9:06:00:71:4c:3a:56:a5:b9:2e:94:de:5a:04:e6:96:8b:
         19:77:16:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBz1nKwUsPvu1vtQDdPcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3M2Y4ODc0ZDk3MzFmNjc2ODJhMjEzZTZmZTVlMGIwZGYz
NGU2Y2IwHhcNMjUwNDEzMTIwMjA1WhcNMjUwNDE0MTIwMjA1WjAzMTEwLwYDVQQD
EyhlN2E5YTYwNDEzMzlhN2RiZWYwNjBkMDY5NTJiMzE3ZGY5MGMzNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrMp98DVxoLWpyV7AnVWaee7to8+
qkloC9npKdmw4nQJzGdxoQTub838A+7qH/RfOHBgzNchUYfp61xSYm3EPvBXxcou
6LT5oIy5lDO4CtLbVOCGZBwphWghAQnKhUDtS7+La2emhij1K8rBOalye49uFC+D
iV5W6hym1osYGlxbZgH7ybc4sy5SBOe5vymeUsfYpfpRCKYbkCbdNBAEb30I3kn6
cTuaVr/Glc2CM1RUOo9p6gINSGcYrNBkEQrqSvgiCVvTlV72XfxfCuT1Q5Kj4Ovt
mDqi6twNYm5ozYZLG7gQCbjMA1WPH+LdzljAMnKS7CKqfeJlqweG2e/LHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeppgQTOafb7wYNBpUrMX35DDS1MB8GA1UdIwQY
MBaAFGc/iHTZcx9naCohPm/l4LDfNObLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYt
OTg1MjMxNjM1NDIxLzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYtOTg1MjMxNjM1NDIx
LzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeIo5haL
I34bZQ0v42cZTs5OOQjLdOHvtBMniUGbcyaXX+0vdmVSYGevlQpxNjw9i8+aJByo
Gnz7B5CGtmREFtVpvXH0O7cRwt5fVbb63ElwXsEFUI/33+N5bBs3K139H3WPkTiZ
SR+Ifgo9ef7wV8yPSOKYrBDW9sFlrK5zh+sk0NT5G8zjARb0XktoAvn2mFBIdBG5
psl4nzzQF2Na4SkqQOcQMU7zg+8gfy/+rH2WELaMogKbm/MlU+imimrlEMC8D8tB
YSVDNheNvbO1M3pjJj4hapgy8Ujn1GWd+2xQW7ddK6+VBKvjSdkGAHFMOlaluS6U
3loE5paLGXcWcQ==
-----END CERTIFICATE-----