Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File:                     zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier:          fTHAkiINape90grqkt2UjAPdALoRwgVIjeOvtwiIOWg=
Subject key identifier:   77:92:A4:DE:BE:E9:41:17:87:1E:F2:50:E3:5B:2B:81:CF:0D:B7:41
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer:       /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial:       01962F3DD0411B481C1DA12195480BA3A624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number:          0AD8
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
                          2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: 8Arhp6sR77KDZ9dVzqEmwNtVZXxrGMNn0Po5zEFuEgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d0:41:1b:48:1c:1d:a1:21:95:48:0b:a3:a6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=7792a4debee94117871ef250e35b2b81cf0db741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:4b:9e:92:b6:75:52:c5:9c:d3:1b:36:ee:
                    b7:41:0c:1f:fd:ce:3e:fa:96:51:7b:e9:ce:d1:d8:
                    9f:1a:8a:31:fa:a8:4c:4b:d0:9b:fa:ee:4c:a7:d0:
                    7d:80:ad:04:c6:68:77:1d:4c:e0:2f:5b:c1:6c:3e:
                    ed:bd:84:98:9b:a6:a6:97:c2:f7:ba:67:76:a6:45:
                    7b:fe:e2:44:bb:07:61:7a:cb:54:86:f3:58:81:a9:
                    7a:cd:6e:5d:9f:09:4e:a9:bd:e8:b1:d2:37:33:c1:
                    f0:da:c5:8f:79:82:97:02:de:e3:2d:30:ef:7a:75:
                    d7:88:10:ed:f1:1b:22:68:43:af:bc:d2:cc:e0:5a:
                    e8:67:81:b7:49:39:2e:73:c3:1e:68:a7:93:11:8f:
                    d7:6a:18:76:aa:c9:36:7e:33:39:82:1c:7d:39:22:
                    93:69:d0:c6:b4:b4:45:85:c4:7f:86:69:84:8c:16:
                    bb:d3:46:a2:67:a0:ae:4e:91:79:c1:96:4d:7c:a5:
                    2a:ab:0b:f8:2a:ca:fc:61:fd:75:9d:d1:87:4c:85:
                    21:a4:fa:98:a1:04:5a:b4:8e:35:0c:df:31:57:e7:
                    86:12:5f:d9:d9:87:cb:68:87:de:9d:d7:ed:b2:f0:
                    6b:dd:b1:49:15:a9:88:17:b7:85:16:a4:9d:49:b6:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:92:A4:DE:BE:E9:41:17:87:1E:F2:50:E3:5B:2B:81:CF:0D:B7:41
            X509v3 Authority Key Identifier:
                keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2c:56:0c:23:77:c3:a9:75:2a:0d:88:57:9a:98:99:a0:4a:
         65:06:b8:af:fa:75:a0:7f:5c:0c:93:c4:26:26:ae:7b:59:81:
         81:6c:20:ae:12:ea:3d:d5:b0:7c:45:e8:ef:94:a3:24:3a:ca:
         db:68:15:22:d9:45:3a:e3:0d:96:bc:3f:4b:ca:37:84:1b:39:
         c3:64:4f:68:54:de:ec:8e:76:3c:f8:a5:06:d1:d9:0b:be:0d:
         ea:cb:9a:ab:c9:5b:da:a5:21:d1:83:00:f7:8f:b3:2b:6c:8d:
         27:e9:85:a3:38:f2:12:32:a9:2c:5a:46:1b:f8:f9:85:ea:19:
         94:ad:c7:f9:75:4b:88:09:28:a5:fc:6e:71:68:4f:af:b0:dd:
         e2:41:21:7e:bf:3a:b5:b2:2c:b4:74:dc:bb:f2:92:4b:42:b5:
         a7:26:26:a5:dc:14:d4:53:af:d6:be:63:b8:7e:58:55:73:e1:
         55:39:f4:be:f2:17:b1:fb:e5:a8:2f:6c:6e:05:4f:fa:37:0d:
         b5:ef:16:e1:1d:8a:cf:4b:3b:6f:93:68:98:10:e0:b6:4b:6c:
         ab:f4:1a:37:f3:06:d6:d2:16:f2:4c:67:e5:00:2c:40:4f:d7:
         b5:19:98:46:a6:db:de:b4:23:87:83:9c:98:8a:35:97:81:97:
         8f:71:2e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdBBG0gcHaEhlUgLo6YkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMjBiY2FmNzIxMjNlMmQ5ZjVlMjc4ODZiMzgzOWI3NDI0
NDEwYjcwHhcNMjUwNDEzMTMwMTQyWhcNMjUwNDE0MTMwMTQyWjAzMTEwLwYDVQQD
Eyg3NzkyYTRkZWJlZTk0MTE3ODcxZWYyNTBlMzViMmI4MWNmMGRiNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjFLnpK2dVLFnNMbNu63QQwf/c4+
+pZRe+nO0difGoox+qhMS9Cb+u5Mp9B9gK0Exmh3HUzgL1vBbD7tvYSYm6aml8L3
umd2pkV7/uJEuwdhestUhvNYgal6zW5dnwlOqb3osdI3M8Hw2sWPeYKXAt7jLTDv
enXXiBDt8RsiaEOvvNLM4FroZ4G3STkuc8MeaKeTEY/Xahh2qsk2fjM5ghx9OSKT
adDGtLRFhcR/hmmEjBa700aiZ6CuTpF5wZZNfKUqqwv4Ksr8Yf11ndGHTIUhpPqY
oQRatI41DN8xV+eGEl/Z2YfLaIfendftsvBr3bFJFamIF7eFFqSdSbYZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeSpN6+6UEXhx7yUONbK4HPDbdBMB8GA1UdIwQY
MBaAFM0gvK9yEj4tn14niGs4ObdCRBC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYt
MGY4MmMxYmExODA2LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYtMGY4MmMxYmExODA2
LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyxWDCN3
w6l1Kg2IV5qYmaBKZQa4r/p1oH9cDJPEJiaue1mBgWwgrhLqPdWwfEXo75SjJDrK
22gVItlFOuMNlrw/S8o3hBs5w2RPaFTe7I52PPilBtHZC74N6suaq8lb2qUh0YMA
94+zK2yNJ+mFozjyEjKpLFpGG/j5heoZlK3H+XVLiAkopfxucWhPr7Dd4kEhfr86
tbIstHTcu/KSS0K1pyYmpdwU1FOv1r5juH5YVXPhVTn0vvIXsfvlqC9sbgVP+jcN
te8W4R2Kz0s7b5NomBDgtktsq/QaN/MG1tIW8kxn5QAsQE/XtRmYRqbb3rQjh4Oc
mIo1l4GXj3EuDQ==
-----END CERTIFICATE-----