Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File:                     CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier:          fFmndpTQZVOFsBkJozH28L0ZGKZgiFsyqOddSFpULSs=
Subject key identifier:   EC:0A:65:A5:75:6F:A7:30:2A:89:19:25:9B:08:5A:98:DA:4B:76:22
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer:       /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial:       01962F747BCF8A7B841FDD943C7197F1A0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: 95aHhPyetnNjU9Ss6OESgnJpDdUHMfp3NlWOoURT/kM=)
                          2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:cf:8a:7b:84:1f:dd:94:3c:71:97:f1:a0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=ec0a65a5756fa7302a8919259b085a98da4b7622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:24:27:8f:22:0b:69:49:8b:cb:18:c5:00:
                    36:38:bb:cd:a8:d3:2f:72:1c:4d:b0:ec:10:4b:04:
                    c5:2f:56:8f:65:88:16:68:41:35:7f:25:74:90:e9:
                    46:ef:0c:9e:2d:fe:2e:46:ac:22:1f:a6:4b:85:c0:
                    bc:0a:13:7c:27:85:d7:d9:7a:80:5a:3d:31:2e:23:
                    cd:57:a2:3d:f9:07:ea:d1:fc:47:c3:ad:e8:f1:35:
                    e3:83:48:bf:08:77:aa:d8:8b:ef:a1:08:39:c1:2b:
                    5d:7e:52:d2:f3:39:ad:bd:7e:b6:c6:e6:ae:a5:c3:
                    38:21:74:19:81:fa:4e:2a:7b:b8:17:77:7d:5b:7d:
                    03:46:af:62:46:9a:42:11:ef:9b:78:62:1c:f4:72:
                    ca:99:87:ba:d9:11:24:1d:ea:09:74:d1:a0:d2:6d:
                    49:a9:0d:ff:92:09:05:bf:5e:e1:30:60:4d:fc:7d:
                    6a:1b:5b:71:a5:75:fa:7e:7d:47:ac:57:dd:e0:0a:
                    64:aa:fb:4f:1d:63:63:20:b1:af:de:9e:a2:86:9f:
                    d3:20:cf:ed:ba:da:d2:be:cc:3b:d7:7c:23:cc:ea:
                    0f:dd:ac:13:ce:b6:87:0a:d4:9b:ce:e2:40:00:3f:
                    f3:aa:e3:9a:28:c5:6e:7c:70:29:22:0e:65:d9:f1:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:65:A5:75:6F:A7:30:2A:89:19:25:9B:08:5A:98:DA:4B:76:22
            X509v3 Authority Key Identifier:
                keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:8a:82:2c:4f:35:c6:75:5b:09:bb:b2:33:33:50:cd:7d:
         10:45:4b:05:6e:e4:d5:ca:7c:39:f2:f4:9b:d2:d4:db:e7:ea:
         94:a3:fe:d2:fe:82:82:3f:5d:eb:f2:90:7f:6e:21:f9:2b:59:
         d8:29:17:25:49:27:e9:8c:39:fa:78:38:78:56:6c:ea:b0:c0:
         72:ac:b4:0d:73:00:25:24:16:a4:35:2f:e7:4e:f9:f3:03:b1:
         f6:58:5a:5f:04:32:78:a3:d1:28:54:57:d4:3a:2c:a3:0d:aa:
         6a:88:3c:ff:5c:bf:5a:c5:ac:8c:82:02:6d:9d:86:be:ab:97:
         37:40:c3:90:a1:99:75:60:13:31:4f:02:b1:90:c1:08:c3:a0:
         1c:b0:b3:45:2b:9a:65:16:e6:34:6e:64:c5:6b:53:66:bc:de:
         ae:7e:ff:1a:53:94:2e:f1:09:20:20:9e:c8:41:56:6b:29:e3:
         ac:7b:d1:af:5a:34:4a:3b:ff:62:8f:fd:1e:fc:fa:79:32:83:
         6f:44:17:95:59:54:dd:98:49:1f:80:07:f7:ae:19:5f:25:71:
         81:f6:d1:5d:32:a2:95:5a:84:d7:4d:09:d0:87:af:f6:cc:2a:
         83:e4:68:e0:9f:e7:06:e5:1e:6c:3e:39:8f:bf:f9:82:ec:4e:
         17:d1:87:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHvPinuEH92UPHGX8aDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh
ZDQ4YTEwHhcNMjUwNDEzMTQwMTI1WhcNMjUwNDE0MTQwMTI1WjAzMTEwLwYDVQQD
EyhlYzBhNjVhNTc1NmZhNzMwMmE4OTE5MjU5YjA4NWE5OGRhNGI3NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSIkJ48iC2lJi8sYxQA2OLvNqNMv
chxNsOwQSwTFL1aPZYgWaEE1fyV0kOlG7wyeLf4uRqwiH6ZLhcC8ChN8J4XX2XqA
Wj0xLiPNV6I9+Qfq0fxHw63o8TXjg0i/CHeq2IvvoQg5wStdflLS8zmtvX62xuau
pcM4IXQZgfpOKnu4F3d9W30DRq9iRppCEe+beGIc9HLKmYe62REkHeoJdNGg0m1J
qQ3/kgkFv17hMGBN/H1qG1txpXX6fn1HrFfd4ApkqvtPHWNjILGv3p6ihp/TIM/t
utrSvsw713wjzOoP3awTzraHCtSbzuJAAD/zquOaKMVufHApIg5l2fHOaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwKZaV1b6cwKokZJZsIWpjaS3YiMB8GA1UdIwQY
MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt
NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5
LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDuKgixP
NcZ1Wwm7sjMzUM19EEVLBW7k1cp8OfL0m9LU2+fqlKP+0v6Cgj9d6/KQf24h+StZ
2CkXJUkn6Yw5+ng4eFZs6rDAcqy0DXMAJSQWpDUv50758wOx9lhaXwQyeKPRKFRX
1Dosow2qaog8/1y/WsWsjIICbZ2GvquXN0DDkKGZdWATMU8CsZDBCMOgHLCzRSua
ZRbmNG5kxWtTZrzern7/GlOULvEJICCeyEFWaynjrHvRr1o0Sjv/Yo/9Hvz6eTKD
b0QXlVlU3ZhJH4AH964ZXyVxgfbRXTKilVqE100J0Iev9swqg+Ro4J/nBuUebD45
j7/5guxOF9GHhw==
-----END CERTIFICATE-----