Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File:                     S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier:          65Sy1HsGx+U1zOdADxf49wLXSrax4imH9SxRg2h5CW8=
Subject key identifier:   62:10:8D:EF:E9:D7:BF:4A:99:EC:6B:F5:C3:98:0D:D8:5E:0C:BC:DE
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer:       /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial:       01962E992D4EB49648D590E0607509E65A9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: 4uYq1+Mz8AxZ5O2AY30XRwfLCH1bi8PtbZzEokbanuk=)
                          2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2d:4e:b4:96:48:d5:90:e0:60:75:09:e6:5a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=62108defe9d7bf4a99ec6bf5c3980dd85e0cbcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:ac:2c:fe:c9:b7:08:5f:36:45:2f:61:de:
                    d8:1a:94:35:37:ac:5f:84:7e:3f:d5:40:60:41:35:
                    43:21:9f:85:ac:2f:53:0e:78:79:e2:54:0c:23:57:
                    1b:4d:6f:2f:49:a3:a9:c0:63:ab:a6:a8:22:4e:06:
                    06:63:01:dd:8e:22:c4:dc:8b:27:2b:46:db:92:d8:
                    a2:6a:99:ff:e0:6a:78:eb:72:fa:b1:1d:f4:f4:dc:
                    80:d6:bf:4e:a6:9e:61:2c:51:2a:0a:13:2a:c5:d0:
                    c3:45:9c:df:d7:0b:2e:4a:d6:c9:75:6a:b9:ef:39:
                    03:b8:8b:11:eb:2c:e4:20:5a:63:e7:38:24:1c:42:
                    f2:aa:94:ed:b0:c1:27:27:39:81:4a:8a:1f:1a:16:
                    b0:57:5e:40:26:82:68:66:0d:f4:7f:99:eb:63:da:
                    f5:14:cf:d0:2d:3b:4c:7e:4a:c2:9d:7f:fc:28:59:
                    24:58:ee:a5:28:8f:de:fc:51:a6:19:89:54:52:89:
                    af:90:79:9e:9b:9b:20:b3:a3:e0:a4:0b:6b:44:c8:
                    9a:19:d6:b0:a0:7c:0c:be:ac:c9:7e:29:37:70:36:
                    64:af:68:c9:be:d7:c8:e3:dd:71:d8:69:83:e7:39:
                    8e:26:16:b8:eb:a1:11:ef:92:24:84:91:cf:b6:78:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:10:8D:EF:E9:D7:BF:4A:99:EC:6B:F5:C3:98:0D:D8:5E:0C:BC:DE
            X509v3 Authority Key Identifier:
                keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e8:84:d7:67:f5:89:11:96:59:f6:ad:5f:65:32:0a:a7:eb:
         d9:b1:6b:d2:b5:c3:c4:09:fa:f6:bd:fd:cc:02:d6:74:93:0b:
         a3:66:96:fa:d3:77:87:52:15:6d:ad:0e:c6:84:c3:a0:e8:a0:
         8d:68:5b:b8:86:63:b2:2e:85:ff:e2:60:40:39:b4:8f:0d:1f:
         6a:de:80:67:66:04:19:94:fa:8b:0b:d6:4a:6f:29:9b:a3:f8:
         f7:48:37:b7:89:fe:9b:8d:fb:5f:4a:89:63:e8:a7:c4:3a:72:
         28:5d:4c:2e:87:ee:12:80:9e:1b:71:42:d5:6a:58:b6:cc:94:
         5e:f4:76:4a:9c:b1:c7:83:61:6e:61:09:92:b7:8c:3d:37:47:
         b3:33:c4:26:d8:23:98:84:4e:4e:39:38:a2:68:66:b7:b0:5c:
         4c:5c:25:24:a5:72:9c:b4:58:d3:88:ed:72:62:12:86:a7:c0:
         bc:01:1a:9d:0b:46:ba:8e:96:35:28:e4:76:98:0c:65:80:91:
         35:12:33:a7:24:08:b9:16:53:87:5c:37:1b:1e:29:26:da:e8:
         08:5d:3c:7a:c5:6d:73:b3:43:50:5e:09:a2:53:84:36:26:c3:
         82:08:e7:fb:7c:b7:73:e9:40:e4:b8:45:a5:15:ef:bf:d9:a6:
         18:a4:2d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumS1OtJZI1ZDgYHUJ5lqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy
MTI1NTAwHhcNMjUwNDEzMTAwMTUyWhcNMjUwNDE0MTAwMTUyWjAzMTEwLwYDVQQD
Eyg2MjEwOGRlZmU5ZDdiZjRhOTllYzZiZjVjMzk4MGRkODVlMGNiY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7OsLP7JtwhfNkUvYd7YGpQ1N6xf
hH4/1UBgQTVDIZ+FrC9TDnh54lQMI1cbTW8vSaOpwGOrpqgiTgYGYwHdjiLE3Isn
K0bbktiiapn/4Gp463L6sR309NyA1r9Opp5hLFEqChMqxdDDRZzf1wsuStbJdWq5
7zkDuIsR6yzkIFpj5zgkHELyqpTtsMEnJzmBSoofGhawV15AJoJoZg30f5nrY9r1
FM/QLTtMfkrCnX/8KFkkWO6lKI/e/FGmGYlUUomvkHmem5sgs6PgpAtrRMiaGdaw
oHwMvqzJfik3cDZkr2jJvtfI491x2GmD5zmOJha466ER75IkhJHPtnhb1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIQje/p179Kmexr9cOYDdheDLzeMB8GA1UdIwQY
MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt
YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw
LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAweiE12f1
iRGWWfatX2UyCqfr2bFr0rXDxAn69r39zALWdJMLo2aW+tN3h1IVba0OxoTDoOig
jWhbuIZjsi6F/+JgQDm0jw0fat6AZ2YEGZT6iwvWSm8pm6P490g3t4n+m437X0qJ
Y+inxDpyKF1MLofuEoCeG3FC1WpYtsyUXvR2Spyxx4NhbmEJkreMPTdHszPEJtgj
mIROTjk4omhmt7BcTFwlJKVynLRY04jtcmIShqfAvAEanQtGuo6WNSjkdpgMZYCR
NRIzpyQIuRZTh1w3Gx4pJtroCF08esVtc7NDUF4JolOENibDggjn+3y3c+lA5LhF
pRXvv9mmGKQtcQ==
-----END CERTIFICATE-----