Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File:                     Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier:          +29Rp9ODuNnJaHK1ZiTKKt5808JL54zxtAlRfsOtc5Y=
Subject key identifier:   25:BF:93:81:5F:A3:A7:69:0C:D3:D8:68:CB:AC:C6:A7:6F:64:10:EF
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer:       /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial:       01962E99D3BF5243EFC9CCCA8EADB171B44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:35 +0000
Files and hashes:         1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
                          2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: 4gMJ2CXYGMHZqqd6bs69pB5tiTTbOKuKP2SLEik1hSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:d3:bf:52:43:ef:c9:cc:ca:8e:ad:b1:71:b4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
        Validity
            Not Before: Apr 13 10:02:35 2025 GMT
            Not After : Apr 14 10:02:35 2025 GMT
        Subject: CN=25bf93815fa3a7690cd3d868cbacc6a76f6410ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:63:0f:45:1c:da:72:bf:e4:23:8a:82:b0:
                    bc:0b:b5:e2:8e:fa:62:84:f9:a6:f4:ff:6c:ba:b7:
                    8b:2f:62:b2:52:ec:9d:78:92:0b:cb:e8:2b:db:65:
                    cd:7c:0f:71:4e:67:81:d0:5e:d4:cb:97:08:73:67:
                    52:1b:f7:d2:fb:25:00:f4:e2:3a:3d:23:fa:72:b6:
                    61:87:c7:a1:ba:71:8f:d3:da:c4:7d:7a:16:ef:74:
                    44:2f:47:7a:fe:d5:0d:50:92:7c:bf:ad:8d:6e:b2:
                    e6:b9:e9:da:cd:10:1e:c6:b0:19:ca:e0:96:98:08:
                    fe:d8:cc:14:2e:f9:1d:1b:0c:31:4f:66:6d:e9:88:
                    40:8f:4e:e0:6c:59:38:30:5d:c8:99:5c:25:92:3d:
                    c4:ec:a9:6d:44:a5:2c:d0:6c:b5:40:0c:8c:6f:86:
                    8a:fe:c3:16:1c:b6:35:b9:bb:de:59:84:b4:57:18:
                    22:b7:02:ab:a5:48:b0:43:89:88:c5:59:d6:72:84:
                    c2:f0:3f:96:9b:bc:62:ef:f8:23:7b:ee:b5:61:92:
                    54:3e:d2:b2:76:b0:e6:37:f6:30:72:c9:39:5d:82:
                    0a:60:30:1a:7d:40:f9:f3:66:06:c0:67:22:48:ed:
                    97:96:4f:d5:fe:26:d9:74:24:ec:d5:b6:7b:0f:d1:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BF:93:81:5F:A3:A7:69:0C:D3:D8:68:CB:AC:C6:A7:6F:64:10:EF
            X509v3 Authority Key Identifier:
                keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:9a:f1:02:4f:7e:03:f4:71:c4:d2:c5:ea:14:ed:7d:ee:
         31:b5:80:a7:cb:58:0f:5f:d4:e9:ff:81:59:66:42:f3:29:d2:
         24:d4:ab:49:7e:f1:ee:4f:f9:9a:18:9c:29:48:91:05:8e:bc:
         2e:53:ba:01:a9:13:a8:ed:ea:9f:15:83:2a:9e:cd:6a:95:09:
         1f:91:68:99:52:57:db:96:ce:94:ca:a6:4d:fb:99:42:19:28:
         77:97:a5:5d:9f:d5:a1:6b:73:89:97:4d:33:ae:3e:af:e1:34:
         16:14:7d:ee:f9:59:b2:94:47:9a:13:94:9a:93:b9:05:c0:da:
         74:de:1b:83:01:f0:91:4c:e8:97:74:48:85:87:62:c0:7f:d8:
         33:47:f8:a5:28:05:97:13:f3:c0:4b:b3:3d:44:b0:5c:5b:37:
         52:4c:fb:8f:9f:1b:e7:36:d3:24:a9:58:e0:4f:eb:aa:d2:0c:
         91:02:05:cb:59:3d:40:5e:48:16:3c:b7:cb:64:9b:57:82:43:
         ce:46:d8:5a:99:c7:6b:60:55:e7:f6:b5:54:d9:93:10:ce:ba:
         05:70:97:d7:49:72:71:f0:7b:a8:13:c2:b6:f2:46:54:89:b8:
         58:91:85:03:fa:0d:ae:4d:cb:02:d5:de:f8:be:19:17:5f:2f:
         db:57:4c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumdO/UkPvyczKjq2xcbRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2Q3ODAzZjQxZmU0OTllODAwNjY0ZTBhYWNhZGVlMTli
NjZkOWQwHhcNMjUwNDEzMTAwMjM1WhcNMjUwNDE0MTAwMjM1WjAzMTEwLwYDVQQD
EygyNWJmOTM4MTVmYTNhNzY5MGNkM2Q4NjhjYmFjYzZhNzZmNjQxMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRFjD0Uc2nK/5COKgrC8C7Xijvpi
hPmm9P9sureLL2KyUuydeJILy+gr22XNfA9xTmeB0F7Uy5cIc2dSG/fS+yUA9OI6
PSP6crZhh8ehunGP09rEfXoW73REL0d6/tUNUJJ8v62NbrLmuenazRAexrAZyuCW
mAj+2MwULvkdGwwxT2Zt6YhAj07gbFk4MF3ImVwlkj3E7KltRKUs0Gy1QAyMb4aK
/sMWHLY1ubveWYS0VxgitwKrpUiwQ4mIxVnWcoTC8D+Wm7xi7/gje+61YZJUPtKy
drDmN/Ywcsk5XYIKYDAafUD582YGwGciSO2Xlk/V/ibZdCTs1bZ7D9GQwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW/k4Ffo6dpDNPYaMusxqdvZBDvMB8GA1UdIwQY
MBaAFGXNeAP0H+SZ6ABmTgqsre4Ztm2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEt
Zjk2YmZiMDRlNjQ1LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEtZjk2YmZiMDRlNjQ1
LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC2a8QJP
fgP0ccTSxeoU7X3uMbWAp8tYD1/U6f+BWWZC8ynSJNSrSX7x7k/5mhicKUiRBY68
LlO6AakTqO3qnxWDKp7NapUJH5FomVJX25bOlMqmTfuZQhkod5elXZ/VoWtziZdN
M64+r+E0FhR97vlZspRHmhOUmpO5BcDadN4bgwHwkUzol3RIhYdiwH/YM0f4pSgF
lxPzwEuzPUSwXFs3Ukz7j58b5zbTJKlY4E/rqtIMkQIFy1k9QF5IFjy3y2SbV4JD
zkbYWpnHa2BV5/a1VNmTEM66BXCX10lycfB7qBPCtvJGVIm4WJGFA/oNrk3LAtXe
+L4ZF18v21dMkg==
-----END CERTIFICATE-----