Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File:                     ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier:          UFGhZ4i6oGrUn+/Dikri9WPmDsobTHJChlR5UAP6D9A=
Subject key identifier:   67:47:B8:F0:BE:A2:AA:A1:1B:0E:9B:54:11:8E:3E:DE:5E:B2:2F:95
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer:       /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial:       01962E991891561F56D8F64E47FC63C9B40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number:          05D9
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: GVBbBY9mH07Z7cJ0Hel+Jw7nx0Msp72sfQpG/NTSEM4=)
                          2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:91:56:1f:56:d8:f6:4e:47:fc:63:c9:b4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=6747b8f0bea2aaa11b0e9b54118e3ede5eb22f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:5e:f0:19:2a:bf:cc:ef:d6:21:6e:83:a8:
                    ba:08:fe:e5:43:14:4a:95:9e:45:ba:71:cd:94:1d:
                    13:91:bf:9c:24:5e:9a:ce:32:32:96:35:f9:a7:5c:
                    61:f1:1f:21:3a:f8:03:2a:c7:48:5f:d8:83:4b:2d:
                    32:2b:ef:8d:55:04:8a:54:87:ae:9b:9e:85:c8:d1:
                    a3:12:51:51:cb:e0:18:fc:0f:61:ce:19:be:96:c2:
                    75:70:ae:22:3e:fe:3f:31:eb:ea:7e:13:46:0a:a3:
                    e0:d3:1a:d6:6f:b8:d0:b2:3d:f5:44:a7:f2:78:0a:
                    af:47:0f:be:f6:26:21:2c:3d:e7:c8:d7:4d:a6:35:
                    47:fb:6a:3c:71:83:41:e6:d3:81:20:5c:c5:e7:dd:
                    39:1f:dc:17:a3:a0:fa:48:3b:5b:5a:12:91:8e:a7:
                    9f:63:9d:65:e3:3a:45:3f:ab:01:0c:01:9d:01:0e:
                    ec:5f:25:26:25:66:fd:9d:c2:c4:9e:3a:9c:e1:0c:
                    ee:5d:df:96:0e:7e:44:86:f7:e7:2c:d7:5c:80:d5:
                    2f:52:cd:79:5f:f4:b9:04:f7:27:6f:d6:57:c3:63:
                    5c:0e:59:b9:f8:1d:4a:ca:fc:58:cf:da:af:2c:f7:
                    a6:db:eb:47:b9:3c:49:e6:48:2f:79:77:54:07:71:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:B8:F0:BE:A2:AA:A1:1B:0E:9B:54:11:8E:3E:DE:5E:B2:2F:95
            X509v3 Authority Key Identifier:
                keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:c4:90:2f:35:2b:61:ee:c9:b1:92:87:a7:28:a0:9f:9c:
         03:80:09:c9:5c:d7:a3:31:95:be:45:da:51:0a:e5:a7:14:8d:
         0a:35:0d:b6:9f:c1:76:71:89:29:c0:0a:90:b6:40:cf:f8:43:
         96:d2:38:e2:46:69:37:cb:7a:84:88:75:89:33:27:b3:eb:ea:
         07:42:b7:80:e3:13:00:4f:af:25:ab:7c:96:68:60:ee:9f:d5:
         3e:9c:c8:6a:9f:03:23:dd:39:28:83:f3:5a:7e:a6:67:58:9c:
         e4:06:e3:54:32:b6:11:2e:08:33:8e:ad:01:f7:13:de:81:27:
         22:59:ad:83:66:0a:eb:eb:77:75:7e:d4:32:1c:1b:83:f8:6b:
         40:66:17:cc:ff:5f:43:5a:b5:95:83:14:ef:73:ea:77:c8:97:
         08:77:08:4f:65:9b:75:ad:31:48:55:72:99:13:52:38:7d:75:
         26:ee:cd:0f:9d:76:8f:f4:12:cc:9d:14:d6:46:50:d8:0c:b1:
         89:3d:3c:5b:8e:22:4b:98:80:7e:5b:fc:c0:28:0d:63:ee:40:
         d7:33:bf:b3:d2:be:1f:e7:4f:f2:ae:c1:f0:d3:e1:89:ff:56:
         46:c5:94:d6:11:09:4b:08:fa:34:e2:aa:41:f1:bb:23:95:7e:
         7e:60:f4:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRiRVh9W2PZOR/xjybQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz
Yzc1NTYwHhcNMjUwNDEzMTAwMTQ3WhcNMjUwNDE0MTAwMTQ3WjAzMTEwLwYDVQQD
Eyg2NzQ3YjhmMGJlYTJhYWExMWIwZTliNTQxMThlM2VkZTVlYjIyZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Ze8Bkqv8zv1iFug6i6CP7lQxRK
lZ5FunHNlB0Tkb+cJF6azjIyljX5p1xh8R8hOvgDKsdIX9iDSy0yK++NVQSKVIeu
m56FyNGjElFRy+AY/A9hzhm+lsJ1cK4iPv4/MevqfhNGCqPg0xrWb7jQsj31RKfy
eAqvRw++9iYhLD3nyNdNpjVH+2o8cYNB5tOBIFzF5905H9wXo6D6SDtbWhKRjqef
Y51l4zpFP6sBDAGdAQ7sXyUmJWb9ncLEnjqc4QzuXd+WDn5EhvfnLNdcgNUvUs15
X/S5BPcnb9ZXw2NcDlm5+B1KyvxYz9qvLPem2+tHuTxJ5kgveXdUB3GJuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdHuPC+oqqhGw6bVBGOPt5esi+VMB8GA1UdIwQY
MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt
NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw
LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuPEkC81
K2HuybGSh6cooJ+cA4AJyVzXozGVvkXaUQrlpxSNCjUNtp/BdnGJKcAKkLZAz/hD
ltI44kZpN8t6hIh1iTMns+vqB0K3gOMTAE+vJat8lmhg7p/VPpzIap8DI905KIPz
Wn6mZ1ic5AbjVDK2ES4IM46tAfcT3oEnIlmtg2YK6+t3dX7UMhwbg/hrQGYXzP9f
Q1q1lYMU73Pqd8iXCHcIT2Wbda0xSFVymRNSOH11Ju7ND512j/QSzJ0U1kZQ2Ayx
iT08W44iS5iAflv8wCgNY+5A1zO/s9K+H+dP8q7B8NPhif9WRsWU1hEJSwj6NOKq
QfG7I5V+fmD02Q==
-----END CERTIFICATE-----