Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File:                     zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier:          T5R1T3BzgFphuh4F2OyGxmTghiYgICaJfcrYJACZoV4=
Subject key identifier:   E2:64:76:2C:2F:D5:BA:8E:4A:24:82:FC:99:B3:F8:4F:A7:28:60:42
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer:       /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial:       01962F3D5795BB94344F397AC806F7274231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
                          2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: hiz8J27Kl+Fumd3PdkvqLgekU/ACTNYOzL2jMtCGoKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:57:95:bb:94:34:4f:39:7a:c8:06:f7:27:42:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=e264762c2fd5ba8e4a2482fc99b3f84fa7286042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:87:89:7a:53:8e:59:1b:bc:71:98:fb:9f:
                    f3:4c:79:d3:62:1a:24:1b:30:51:bb:63:62:07:ec:
                    7f:54:5c:32:3b:0b:a4:a3:90:f2:6f:e1:7e:c2:4f:
                    2c:8c:c1:ea:d8:b8:8a:08:35:ca:02:e9:16:9f:c5:
                    bb:25:dc:c3:4e:91:2b:fa:cc:33:4b:83:99:a3:87:
                    88:dd:69:3e:80:24:97:f2:02:f9:ac:94:f9:0b:55:
                    b4:2f:01:05:ad:fd:f3:d6:e0:10:0b:ce:e3:b2:0b:
                    97:21:7b:47:22:86:5d:aa:3c:72:c4:2a:ab:53:7d:
                    45:99:57:8d:22:f6:ae:13:0b:95:b2:59:8c:2e:56:
                    70:b1:3c:ae:9a:96:0a:8a:d3:f9:e0:0f:65:17:4b:
                    f9:a9:cb:c5:a8:53:7d:4d:fc:cb:76:0d:21:c8:fa:
                    3b:6e:0f:a3:bf:7b:3b:c0:f1:9c:fa:3c:43:68:3b:
                    42:95:64:e1:b7:39:2e:a5:02:f3:98:82:34:46:b4:
                    60:b6:49:a1:df:fe:57:c9:48:6f:56:71:f2:83:10:
                    f1:cc:3f:c9:67:04:e5:d0:32:2e:b4:c8:4f:d8:83:
                    8b:62:7e:f0:aa:18:ea:7f:3b:51:da:1f:f8:f2:a0:
                    eb:99:73:7a:31:e3:e2:31:38:55:54:24:fa:eb:71:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:64:76:2C:2F:D5:BA:8E:4A:24:82:FC:99:B3:F8:4F:A7:28:60:42
            X509v3 Authority Key Identifier:
                keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:57:ca:38:b4:5e:d4:30:6a:ae:80:b4:17:cf:20:26:8a:4e:
         a1:96:54:24:8c:f6:f2:e8:2e:cc:40:90:d9:c8:34:5c:98:1b:
         cc:10:37:20:2a:48:00:c4:fb:37:b4:50:c6:57:5d:06:59:e8:
         14:f1:14:74:c0:cb:28:1c:4b:c8:6a:30:22:22:5c:ee:bf:72:
         1f:a0:6c:66:00:b8:60:96:81:d0:09:ab:60:6d:b6:4c:5a:60:
         95:ed:8d:be:d9:e6:53:9b:7b:05:6b:26:e5:e2:f8:0d:84:7f:
         7d:98:b4:e0:c8:31:74:1e:bc:af:64:0a:c5:44:3e:e9:d0:52:
         72:5c:64:4a:ba:ed:94:f6:d7:51:48:d9:92:5f:38:a9:55:f5:
         e7:74:d9:36:f4:2d:9e:f2:64:88:b5:61:0d:af:85:01:34:f7:
         88:ec:1a:51:dc:b5:59:2a:db:5f:70:53:2a:94:48:70:c7:7a:
         9e:86:bc:ff:be:34:df:9d:c3:7c:e8:d3:e0:86:42:c6:c5:e7:
         52:5e:00:8f:00:ed:da:1d:fe:da:c0:1f:58:9d:7b:84:75:fd:
         d2:6d:3e:f5:0c:d9:ec:70:e2:00:9a:f6:ca:63:84:b1:f7:ca:
         0d:85:9f:a6:9f:03:27:a5:9b:10:3e:46:7f:3b:a0:fd:e1:76:
         7c:12:9c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVeVu5Q0Tzl6yAb3J0IxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNmNhMDVjNGNiNjFkOWUyMzI5Mjk4ZDM1NGMyYTc2OWJk
ZDA1ZDMwHhcNMjUwNDEzMTMwMTExWhcNMjUwNDE0MTMwMTExWjAzMTEwLwYDVQQD
EyhlMjY0NzYyYzJmZDViYThlNGEyNDgyZmM5OWIzZjg0ZmE3Mjg2MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+GHiXpTjlkbvHGY+5/zTHnTYhok
GzBRu2NiB+x/VFwyOwuko5Dyb+F+wk8sjMHq2LiKCDXKAukWn8W7JdzDTpEr+swz
S4OZo4eI3Wk+gCSX8gL5rJT5C1W0LwEFrf3z1uAQC87jsguXIXtHIoZdqjxyxCqr
U31FmVeNIvauEwuVslmMLlZwsTyumpYKitP54A9lF0v5qcvFqFN9TfzLdg0hyPo7
bg+jv3s7wPGc+jxDaDtClWThtzkupQLzmII0RrRgtkmh3/5XyUhvVnHygxDxzD/J
ZwTl0DIutMhP2IOLYn7wqhjqfztR2h/48qDrmXN6MePiMThVVCT663G2FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJkdiwv1bqOSiSC/Jmz+E+nKGBCMB8GA1UdIwQY
MBaAFMxsoFxMth2eIykpjTVMKnab3QXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQt
YWZjNjAyNzE0ZTEzLzEvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQtYWZjNjAyNzE0ZTEz
LzEvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlfKOLRe
1DBqroC0F88gJopOoZZUJIz28uguzECQ2cg0XJgbzBA3ICpIAMT7N7RQxlddBlno
FPEUdMDLKBxLyGowIiJc7r9yH6BsZgC4YJaB0AmrYG22TFpgle2NvtnmU5t7BWsm
5eL4DYR/fZi04MgxdB68r2QKxUQ+6dBSclxkSrrtlPbXUUjZkl84qVX153TZNvQt
nvJkiLVhDa+FATT3iOwaUdy1WSrbX3BTKpRIcMd6noa8/740353DfOjT4IZCxsXn
Ul4AjwDt2h3+2sAfWJ17hHX90m0+9QzZ7HDiAJr2ymOEsffKDYWfpp8DJ6WbED5G
fzug/eF2fBKcLQ==
-----END CERTIFICATE-----