Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
File:                     LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json)
Hash identifier:          nImdXqryx7I23uYQZnebwuTdcz0WTS+nAlzkn99yZ8Q=
Subject key identifier:   DB:23:16:67:20:A1:1C:80:E3:98:C6:FE:B0:6A:97:22:22:29:7F:77
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       01962F74E61C5698ACCBE7B90A18D9BEA93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
Manifest number:          1032
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: 2zzUP42PSDjYPPlHV41sNEGuQm8.roa (hash: 3WYS30ATIqzOFvG4XYkxeuJlriDYGMdvapCa66rATak=)
                          2: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: gvTCDrVe0dwJMSz9U9Lz0zs3XSfs2wfIb7cslV7sSTY=)
                          3: NXdlMjppFlDgpqvrpd1dUCT0Nd4.roa (hash: vFfItKSvE8cyKCuMsk2TF0b+TYLCK752KcmEvCAy640=)
                          4: a-yoqKKM2_VTyMIpYk7of2SsSkg.roa (hash: tkjvrZdB0sy56VknBMzLGgv8ID+xT8Z3KrJT0me2WLI=)
                          5: g-jIWTGusT1Pd0EzYCYJPlo_V10.roa (hash: rU4QB22UKJ/f6i1fM6bnIKFFo0DzgyOmLtH9gDvBjBM=)
                          6: ru2syxCTFSkcHXzvmaT8k_sSwdE.roa (hash: cb/4JPWzlbHrciybJdWfxGFnExQb99fweCf16u1aJnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e6:1c:56:98:ac:cb:e7:b9:0a:18:d9:be:a9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=db23166720a11c80e398c6feb06a972222297f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:80:50:90:a3:93:0f:5c:f8:d5:8f:a8:06:1f:
                    a8:fa:bf:93:68:f3:6c:04:a2:00:5f:f3:8a:0c:69:
                    2b:58:c9:3e:85:92:61:06:3d:81:a2:ba:27:d5:14:
                    90:ec:83:4d:6a:a7:b7:96:3d:39:97:52:95:77:4d:
                    3f:46:d1:97:17:2a:88:86:3d:96:c3:70:ce:3e:35:
                    e7:16:b2:34:3c:92:c4:47:75:8f:8f:83:48:94:6c:
                    48:92:0a:10:f0:d5:fc:1e:5e:e7:dd:c5:36:36:7e:
                    46:b5:53:2d:f2:9c:6a:eb:59:58:a8:5d:ef:0c:22:
                    61:29:f5:99:27:03:bf:52:b5:5f:ad:c3:96:7a:aa:
                    2c:b3:77:32:82:e8:2a:97:36:87:4a:0d:36:e6:94:
                    99:d0:42:c1:cd:4e:8b:39:80:88:fa:b1:4f:bd:83:
                    9b:1f:70:f8:50:da:e0:53:e7:25:86:19:f6:d4:f7:
                    c1:95:b0:29:b4:87:2e:ca:9a:ac:f4:02:3e:72:34:
                    1e:ff:98:dd:c8:f4:cf:a1:6d:f5:89:a4:2f:8f:b4:
                    82:cc:59:52:10:87:9f:61:8d:ec:f3:e7:a3:96:9e:
                    c1:9b:a9:96:44:9a:5a:5a:c8:d5:6f:0d:47:cc:85:
                    1c:24:3c:08:88:66:d1:b7:04:6b:5c:9e:fd:3c:99:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:23:16:67:20:A1:1C:80:E3:98:C6:FE:B0:6A:97:22:22:29:7F:77
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:b5:53:de:a4:ff:37:15:ca:39:3a:fa:dc:08:90:42:f9:
         9e:7d:ec:d6:28:40:b8:b3:d8:49:03:1c:58:a4:7e:29:bb:f0:
         e5:a2:56:f9:e0:23:c4:47:03:cb:1c:82:db:bd:ce:76:5c:4d:
         39:35:14:83:40:88:9f:5e:0a:b5:ad:ee:c6:9e:a2:19:94:fb:
         f1:72:18:6e:d8:b4:5d:7f:0a:a3:90:9b:9f:0b:91:a3:37:d9:
         60:93:f3:65:8f:82:11:02:c2:13:be:e3:e6:87:01:08:a8:62:
         e6:dc:e0:c6:70:b3:30:c8:e2:1b:86:88:76:dc:45:5d:79:35:
         39:44:ac:48:30:14:7f:9e:1c:e4:f3:85:8e:da:bd:26:36:72:
         44:0d:b8:e6:0a:5f:c8:2f:c1:57:7c:4c:de:69:ed:c9:4a:5a:
         96:5e:94:5d:37:3c:04:a1:eb:75:72:36:a4:2c:ad:80:f3:c8:
         72:69:a9:8d:cb:89:01:0b:77:94:ea:21:9e:76:0b:ad:8b:30:
         51:95:dc:18:be:4c:a8:98:6a:7e:df:a8:69:3e:86:c1:92:a9:
         86:4b:0c:e4:de:53:7c:27:33:e1:ff:7c:87:02:73:c1:9a:d4:
         88:2a:b0:e5:8c:1e:2d:46:f6:3f:51:31:d5:b6:d8:ad:a0:f8:
         c7:07:bc:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOYcVpisy+e5ChjZvqk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNTY2NGUwMjkzNmNiNWI1NDU0ZDU5NWM1MzgyYjdlN2Ew
Yzc5NDQwHhcNMjUwNDEzMTQwMTUyWhcNMjUwNDE0MTQwMTUyWjAzMTEwLwYDVQQD
EyhkYjIzMTY2NzIwYTExYzgwZTM5OGM2ZmViMDZhOTcyMjIyMjk3Zjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IBQkKOTD1z41Y+oBh+o+r+TaPNs
BKIAX/OKDGkrWMk+hZJhBj2Boron1RSQ7INNaqe3lj05l1KVd00/RtGXFyqIhj2W
w3DOPjXnFrI0PJLER3WPj4NIlGxIkgoQ8NX8Hl7n3cU2Nn5GtVMt8pxq61lYqF3v
DCJhKfWZJwO/UrVfrcOWeqoss3cygugqlzaHSg025pSZ0ELBzU6LOYCI+rFPvYOb
H3D4UNrgU+clhhn21PfBlbAptIcuypqs9AI+cjQe/5jdyPTPoW31iaQvj7SCzFlS
EIefYY3s8+ejlp7Bm6mWRJpaWsjVbw1HzIUcJDwIiGbRtwRrXJ79PJkjjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsjFmcgoRyA45jG/rBqlyIiKX93MB8GA1UdIwQY
MBaAFC5WZOApNstbVFTVlcU4K356DHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMt
ZWY4MWZjYTYzMDI5LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMtZWY4MWZjYTYzMDI5
LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFu1U96k
/zcVyjk6+twIkEL5nn3s1ihAuLPYSQMcWKR+Kbvw5aJW+eAjxEcDyxyC273OdlxN
OTUUg0CIn14Kta3uxp6iGZT78XIYbti0XX8Ko5CbnwuRozfZYJPzZY+CEQLCE77j
5ocBCKhi5tzgxnCzMMjiG4aIdtxFXXk1OUSsSDAUf54c5POFjtq9JjZyRA245gpf
yC/BV3xM3mntyUpall6UXTc8BKHrdXI2pCytgPPIcmmpjcuJAQt3lOohnnYLrYsw
UZXcGL5MqJhqft+oaT6GwZKphksM5N5TfCcz4f98hwJzwZrUiCqw5YweLUb2P1Ex
1bbYraD4xwe8Qw==
-----END CERTIFICATE-----