Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          BxCzqhGXzwY5esUo0bfpcxvqCJVZqibq5J5+AReYQu4=
Subject key identifier:   B5:CB:A0:A1:0D:4A:D0:AF:DC:81:D5:3E:C7:73:2B:62:E2:9B:13:E8
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       01962E9919702A3C9D78521597DF62DD6462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          12B5
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: rBmdlJnVFEyX3O2b9x6PevOLhVKL3gTZMgDRqIt3Hpo=)
                          2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:19:70:2a:3c:9d:78:52:15:97:df:62:dd:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=b5cba0a10d4ad0afdc81d53ec7732b62e29b13e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:3e:45:06:69:1d:55:c9:51:e2:82:d8:1e:
                    bf:df:7c:68:93:b5:80:e6:05:7a:31:bc:a4:b9:04:
                    0d:b7:88:b2:a7:73:7e:94:cd:21:43:89:1e:95:11:
                    52:53:0b:e7:7e:15:20:44:e0:05:27:1c:0a:3a:bf:
                    84:30:72:56:7a:5f:29:3d:3f:f5:56:cc:9f:2b:65:
                    d2:a9:28:4f:7e:2c:d2:ec:63:09:d5:64:62:5e:5b:
                    20:4d:4a:fb:49:40:0e:4e:84:65:2f:b2:fd:02:ab:
                    89:62:ca:cd:b5:5c:2a:38:78:c0:83:a5:6c:27:cb:
                    ff:4f:4e:9e:44:c2:21:f4:81:26:c6:b4:60:27:84:
                    8b:6d:e2:b7:88:1c:39:d4:1b:c6:2a:0f:fe:ed:1c:
                    42:70:a0:d9:01:db:93:6c:0e:72:13:67:b5:dc:9e:
                    83:e1:07:fd:bb:1b:3d:73:54:9b:ef:83:af:2a:20:
                    4c:96:d2:ba:20:a9:36:79:16:40:84:96:96:6a:95:
                    a8:d3:04:ff:20:2c:6f:ef:71:03:4e:30:65:3e:73:
                    13:f7:91:c1:ac:f5:9a:4c:d2:22:21:cd:9a:94:b7:
                    5e:46:41:cb:2c:57:66:30:bd:c4:3b:13:ad:10:99:
                    61:7a:e1:68:4f:73:98:78:f6:06:d2:b3:86:e9:f4:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:A0:A1:0D:4A:D0:AF:DC:81:D5:3E:C7:73:2B:62:E2:9B:13:E8
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:15:01:8c:65:32:3c:52:eb:30:8f:d7:63:2e:e3:b9:28:
         e8:e6:73:3e:03:74:40:c7:a2:8d:8f:a8:91:9e:e5:ae:69:d9:
         97:ac:18:1f:61:47:c8:29:e3:cf:b4:0f:ca:0a:4b:f5:b4:80:
         64:15:24:d9:21:30:dc:7b:a3:ff:89:61:37:2d:e7:73:3d:73:
         af:77:c6:86:69:08:f6:25:8d:06:52:01:92:74:35:4e:58:10:
         40:3f:9d:e2:22:20:87:4d:71:52:e9:1f:b5:20:cd:15:3c:15:
         d1:fa:25:9b:1c:9f:d2:0e:be:e8:e1:14:32:3b:4b:62:b4:ff:
         52:c5:b6:04:ef:77:7c:bb:3b:da:ee:83:ef:7c:b7:dd:69:84:
         61:27:02:de:2e:83:8a:44:18:28:1e:fd:39:d7:e0:f7:2c:a2:
         44:d9:c0:6b:2a:17:82:31:68:1c:ad:98:4a:c2:c1:76:15:11:
         e1:00:3f:86:90:b7:c3:ea:3d:72:51:bc:65:dd:b0:5c:e6:7d:
         b0:1e:7d:cc:93:b9:ce:2e:83:28:04:ec:c7:22:86:d2:b0:a0:
         0e:bf:fc:81:fc:8f:6c:8b:2d:e0:b6:40:a1:57:a1:d0:dc:01:
         44:97:f3:b3:09:d8:f3:18:08:c7:3e:61:d6:5c:ed:ff:f2:20:
         75:0b:1b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRlwKjydeFIVl99i3WRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjUwNDEzMTAwMTQ3WhcNMjUwNDE0MTAwMTQ3WjAzMTEwLwYDVQQD
EyhiNWNiYTBhMTBkNGFkMGFmZGM4MWQ1M2VjNzczMmI2MmUyOWIxM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhg+RQZpHVXJUeKC2B6/33xok7WA
5gV6MbykuQQNt4iyp3N+lM0hQ4kelRFSUwvnfhUgROAFJxwKOr+EMHJWel8pPT/1
VsyfK2XSqShPfizS7GMJ1WRiXlsgTUr7SUAOToRlL7L9AquJYsrNtVwqOHjAg6Vs
J8v/T06eRMIh9IEmxrRgJ4SLbeK3iBw51BvGKg/+7RxCcKDZAduTbA5yE2e13J6D
4Qf9uxs9c1Sb74OvKiBMltK6IKk2eRZAhJaWapWo0wT/ICxv73EDTjBlPnMT95HB
rPWaTNIiIc2alLdeRkHLLFdmML3EOxOtEJlheuFoT3OYePYG0rOG6fSkuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXLoKENStCv3IHVPsdzK2LimxPoMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo8VAYxl
MjxS6zCP12Mu47ko6OZzPgN0QMeijY+okZ7lrmnZl6wYH2FHyCnjz7QPygpL9bSA
ZBUk2SEw3Huj/4lhNy3ncz1zr3fGhmkI9iWNBlIBknQ1TlgQQD+d4iIgh01xUukf
tSDNFTwV0folmxyf0g6+6OEUMjtLYrT/UsW2BO93fLs72u6D73y33WmEYScC3i6D
ikQYKB79Odfg9yyiRNnAayoXgjFoHK2YSsLBdhUR4QA/hpC3w+o9clG8Zd2wXOZ9
sB59zJO5zi6DKATsxyKG0rCgDr/8gfyPbIst4LZAoVeh0NwBRJfzswnY8xgIxz5h
1lzt//IgdQsbAA==
-----END CERTIFICATE-----