Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File:                     Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier:          5SGSbRQ3YFPQOi7JXo9tDvgMhErxgC5chpXZV0jd0/I=
Subject key identifier:   99:58:C3:9E:E7:32:25:96:97:B6:32:FF:1D:2C:8C:33:E5:EF:6F:EA
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer:       /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial:       01962E6172FC88C59CBBB98E4DCA10E30AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
                          2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: o5Z/oI1m9Z7Dwp665wWm2fvnyW6XGJo9ziYQ+OCRf54=)
                          3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:72:fc:88:c5:9c:bb:b9:8e:4d:ca:10:e3:0a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=9958c39ee732259697b632ff1d2c8c33e5ef6fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9b:67:b3:c5:ff:81:47:3f:b2:30:61:b5:a5:
                    e4:03:b1:f8:e3:25:f6:3a:13:ab:8d:ca:47:67:88:
                    d0:c5:a0:51:7e:b4:d7:18:c9:0b:ea:74:31:d3:3d:
                    e9:49:c1:32:d7:3d:02:87:a1:b9:e5:64:f6:cc:07:
                    3e:b1:0a:04:fa:1a:e8:3d:b0:d8:ec:52:c3:6a:d2:
                    cc:ee:82:63:e8:7f:79:75:48:6a:cc:26:8b:0f:cb:
                    07:8e:4a:7e:a4:39:a7:38:2a:d0:c7:16:3e:c9:ab:
                    e0:eb:77:e0:78:f3:af:9e:5a:a2:38:b2:d8:8e:38:
                    c1:b6:e9:37:51:8d:6a:cb:73:34:49:5e:2c:57:34:
                    a3:9b:a8:f7:3e:34:2b:0c:00:55:36:65:5d:ff:1b:
                    06:ac:6d:fb:60:4a:52:e6:95:85:cf:8e:ca:55:e0:
                    9a:71:ae:bb:47:3c:52:46:c2:e3:10:89:01:51:13:
                    a7:f3:94:5a:c1:c6:2f:54:9a:3b:52:54:ed:6c:45:
                    74:df:6e:1e:9c:f1:f4:da:e2:ef:e0:de:2d:c2:10:
                    31:da:f6:3e:b7:1b:e3:f0:48:c7:ff:ed:fd:cd:cb:
                    01:90:db:4a:2a:00:13:8c:0f:70:75:9f:f6:e9:e2:
                    6e:91:2c:cb:eb:6f:08:aa:4f:66:94:5a:b6:af:5e:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:58:C3:9E:E7:32:25:96:97:B6:32:FF:1D:2C:8C:33:E5:EF:6F:EA
            X509v3 Authority Key Identifier:
                keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:36:85:09:b1:58:2d:48:1b:bb:ba:bf:52:96:fc:cd:0a:
         06:6c:33:ce:a8:7b:fb:33:4b:9f:f5:d1:b3:16:ca:e1:b8:d8:
         4f:c0:e8:55:7a:32:62:cc:64:62:e0:32:e7:50:2e:e0:60:08:
         68:5b:69:29:05:ad:d9:0f:e5:78:77:4e:26:7a:ae:3b:33:34:
         0a:76:69:ae:d1:c1:77:20:71:0b:67:25:71:ec:4a:38:7a:a5:
         fe:0a:d4:19:af:2d:6e:85:7c:fc:7c:64:01:94:0c:e4:81:ab:
         c1:9d:c3:a1:9e:b3:ea:bf:c9:1f:4e:55:dc:07:5c:0e:64:ab:
         60:d9:f6:c1:20:77:3a:63:55:67:48:0a:e2:0a:9e:7a:13:c5:
         60:da:bf:17:33:c6:f2:81:6e:14:c0:15:6d:93:ed:65:93:9f:
         ff:4a:7c:dd:c0:db:21:be:c0:17:73:06:c4:42:f7:86:a0:31:
         81:c1:69:d3:b0:53:17:3b:fb:1c:a2:7d:97:ed:f9:7e:3b:5b:
         d2:e6:0d:1e:9f:aa:ed:8a:ab:c3:3e:2c:11:5b:0c:17:44:f7:
         19:11:70:2a:c3:ea:5a:c7:d8:b7:3d:82:87:9c:8e:b0:68:7f:
         ed:6a:53:81:2c:71:ae:65:0f:36:4e:d6:fc:a4:e9:37:07:27:
         3f:3b:8f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXL8iMWcu7mOTcoQ4wqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk
NmE2ZWIwHhcNMjUwNDEzMDkwMTAwWhcNMjUwNDE0MDkwMTAwWjAzMTEwLwYDVQQD
Eyg5OTU4YzM5ZWU3MzIyNTk2OTdiNjMyZmYxZDJjOGMzM2U1ZWY2ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJtns8X/gUc/sjBhtaXkA7H44yX2
OhOrjcpHZ4jQxaBRfrTXGMkL6nQx0z3pScEy1z0Ch6G55WT2zAc+sQoE+hroPbDY
7FLDatLM7oJj6H95dUhqzCaLD8sHjkp+pDmnOCrQxxY+yavg63fgePOvnlqiOLLY
jjjBtuk3UY1qy3M0SV4sVzSjm6j3PjQrDABVNmVd/xsGrG37YEpS5pWFz47KVeCa
ca67RzxSRsLjEIkBUROn85RawcYvVJo7UlTtbEV0324enPH02uLv4N4twhAx2vY+
txvj8EjH/+39zcsBkNtKKgATjA9wdZ/26eJukSzL628Iqk9mlFq2r15AiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlYw57nMiWWl7Yy/x0sjDPl72/qMB8GA1UdIwQY
MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt
ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy
LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1w2hQmx
WC1IG7u6v1KW/M0KBmwzzqh7+zNLn/XRsxbK4bjYT8DoVXoyYsxkYuAy51Au4GAI
aFtpKQWt2Q/leHdOJnquOzM0CnZprtHBdyBxC2clcexKOHql/grUGa8tboV8/Hxk
AZQM5IGrwZ3DoZ6z6r/JH05V3AdcDmSrYNn2wSB3OmNVZ0gK4gqeehPFYNq/FzPG
8oFuFMAVbZPtZZOf/0p83cDbIb7AF3MGxEL3hqAxgcFp07BTFzv7HKJ9l+35fjtb
0uYNHp+q7Yqrwz4sEVsMF0T3GRFwKsPqWsfYtz2Ch5yOsGh/7WpTgSxxrmUPNk7W
/KTpNwcnPzuP9w==
-----END CERTIFICATE-----