Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File:                     p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier:          VAnxSQHvc3zuW6ysvMEnwHIoGIr+fNklSRzIFPepzR0=
Subject key identifier:   E8:85:E0:7F:8C:63:6A:65:67:A9:7F:D9:42:FD:BF:2D:05:FA:60:56
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer:       /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial:       01962E2B21B1D2AEFE21F2E9DA6F520CF86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number:          106D
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
                          2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: 805JOIQeEPssy9rZCJ8MiKMiQh01Ty0v/IlzrjagNcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:21:b1:d2:ae:fe:21:f2:e9:da:6f:52:0c:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=e885e07f8c636a6567a97fd942fdbf2d05fa6056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:c3:a0:19:57:6f:72:b0:47:61:f0:c8:18:
                    1f:eb:50:e5:94:95:59:d5:66:de:01:19:dd:c7:5b:
                    cc:01:55:f1:b2:7d:7b:44:01:e3:99:16:38:81:08:
                    3b:98:f0:8d:f6:36:50:55:35:99:e6:08:1d:88:f6:
                    b0:d3:a7:3d:b5:b7:71:f9:a7:d9:85:37:cd:c1:28:
                    b7:1a:73:46:3f:90:7d:f6:a6:65:ba:11:e8:00:f6:
                    2c:ec:8f:b0:d5:48:3b:1e:4c:8b:2b:84:1e:7f:16:
                    ba:0e:59:fb:78:be:b7:23:7a:c5:98:3b:d3:a4:b0:
                    89:41:7b:b0:e0:70:8d:37:68:4e:b0:d4:a8:f1:8c:
                    81:fc:e2:7e:e0:67:a2:7e:c5:95:3d:06:ca:79:66:
                    be:c7:44:cd:2d:a4:78:d9:22:77:af:61:b8:ea:6c:
                    77:59:e9:2f:c4:54:12:80:7f:bc:3d:ce:7d:78:48:
                    d9:56:83:bd:6e:66:ef:82:7e:ce:52:21:d4:1f:06:
                    27:82:05:27:93:54:4e:ce:be:d2:77:0a:62:b8:05:
                    5c:b3:f0:19:8a:22:75:bf:d6:da:48:fb:18:14:08:
                    51:a2:a9:be:4f:e8:2a:9c:55:f7:f0:a7:f9:f0:51:
                    20:95:8b:ab:fc:41:2d:2d:60:9d:76:08:6a:e4:15:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:E0:7F:8C:63:6A:65:67:A9:7F:D9:42:FD:BF:2D:05:FA:60:56
            X509v3 Authority Key Identifier:
                keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:81:a4:0c:8f:ac:90:2b:9a:9e:91:a0:1f:77:6c:a0:df:f7:
         ed:f1:21:90:d5:40:36:2f:90:11:d3:af:04:99:f7:8d:33:35:
         76:ca:7d:dc:24:39:5b:c0:2b:82:d6:87:ed:1c:0a:4d:0e:a0:
         b6:b4:75:65:01:80:22:fd:c4:16:21:54:b2:3e:53:2a:56:32:
         4f:51:ff:a1:18:49:88:36:2b:a3:9d:71:d5:76:b0:97:4e:1e:
         aa:d8:a7:78:f2:6c:84:ab:71:62:08:47:93:1f:9c:d0:bb:ca:
         66:ce:34:12:91:64:d0:0b:40:7a:4f:a3:f1:59:b2:5c:4e:11:
         29:74:42:db:ad:2c:5f:b6:ee:66:c5:00:7f:c3:7d:74:79:c7:
         e0:71:86:d5:21:01:c7:fc:24:e4:d5:c1:e8:ff:6a:31:23:06:
         1b:bc:33:80:a3:af:bf:21:59:67:39:a2:53:dd:21:70:ad:2d:
         e6:f3:41:b8:0e:1b:e4:d9:25:46:8a:01:b0:a1:76:4b:b9:59:
         c6:08:aa:8e:bc:17:9a:ab:96:6c:54:db:0b:1f:fe:91:b3:91:
         ed:70:0f:e2:37:18:8c:48:c9:6d:a1:80:82:b2:4e:00:e1:0c:
         00:e2:ad:9a:91:f9:1a:6f:35:32:b8:1c:d9:35:af:84:f8:a1:
         59:a5:ab:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKyGx0q7+IfLp2m9SDPhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjY2NTIyZjQwM2Q4Yzk5NGE0ODQ2ODI4NzA3OTk0MTdj
ZTFlODEwHhcNMjUwNDEzMDgwMTQwWhcNMjUwNDE0MDgwMTQwWjAzMTEwLwYDVQQD
EyhlODg1ZTA3ZjhjNjM2YTY1NjdhOTdmZDk0MmZkYmYyZDA1ZmE2MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e3DoBlXb3KwR2HwyBgf61DllJVZ
1WbeARndx1vMAVXxsn17RAHjmRY4gQg7mPCN9jZQVTWZ5ggdiPaw06c9tbdx+afZ
hTfNwSi3GnNGP5B99qZluhHoAPYs7I+w1Ug7HkyLK4Qefxa6Dln7eL63I3rFmDvT
pLCJQXuw4HCNN2hOsNSo8YyB/OJ+4GeifsWVPQbKeWa+x0TNLaR42SJ3r2G46mx3
WekvxFQSgH+8Pc59eEjZVoO9bmbvgn7OUiHUHwYnggUnk1ROzr7SdwpiuAVcs/AZ
iiJ1v9baSPsYFAhRoqm+T+gqnFX38Kf58FEglYur/EEtLWCddghq5BWREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiF4H+MY2plZ6l/2UL9vy0F+mBWMB8GA1UdIwQY
MBaAFKf2ZSL0A9jJlKSEaChweZQXzh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMt
YzVkMzYwZmNkZjBlLzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMtYzVkMzYwZmNkZjBl
LzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4GkDI+s
kCuanpGgH3dsoN/37fEhkNVANi+QEdOvBJn3jTM1dsp93CQ5W8ArgtaH7RwKTQ6g
trR1ZQGAIv3EFiFUsj5TKlYyT1H/oRhJiDYro51x1Xawl04eqtinePJshKtxYghH
kx+c0LvKZs40EpFk0AtAek+j8VmyXE4RKXRC260sX7buZsUAf8N9dHnH4HGG1SEB
x/wk5NXB6P9qMSMGG7wzgKOvvyFZZzmiU90hcK0t5vNBuA4b5NklRooBsKF2S7lZ
xgiqjrwXmquWbFTbCx/+kbOR7XAP4jcYjEjJbaGAgrJOAOEMAOKtmpH5Gm81Mrgc
2TWvhPihWaWrgQ==
-----END CERTIFICATE-----