Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
File:                     z3P3vZzZk2geMP7FxZtHVlIroxw.mft (raw, json)
Hash identifier:          2yeNoX4xY7iRfDmO7YOMU8K/5kwj6QgJiYHcFdcybik=
Subject key identifier:   31:CC:EA:25:48:AD:55:ED:8E:1B:B0:D6:B9:98:D4:C3:3A:E7:27:EB
Authority key identifier: CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C
Certificate issuer:       /CN=cf73f7bd9cd993681e30fec5c59b4756522ba31c
Certificate serial:       01962F06ED8FA32D8AC05F7FECA851C1BE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: z3P3vZzZk2geMP7FxZtHVlIroxw.crl (hash: R86VNi+I5KzxEpf1c5EGh1HcfJhzv+36sXZFBquczxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ed:8f:a3:2d:8a:c0:5f:7f:ec:a8:51:c1:be:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf73f7bd9cd993681e30fec5c59b4756522ba31c
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=31ccea2548ad55ed8e1bb0d6b998d4c33ae727eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:fb:77:03:ac:1a:34:7c:9f:ec:94:8c:e2:
                    97:77:d0:be:8e:71:2a:ae:4f:ea:3a:05:e0:1c:bf:
                    97:3c:01:69:81:55:55:86:c5:f7:a4:97:a1:c1:b9:
                    e9:09:dd:22:ff:2e:7d:2f:19:7c:78:be:e7:24:00:
                    01:f1:79:be:13:0b:d1:d8:ff:8d:87:d0:3f:ad:68:
                    2c:b4:f6:e3:8b:92:65:7d:00:f5:61:c0:a7:9a:fe:
                    58:e7:c4:d7:b0:f3:90:5e:e4:85:84:7e:f0:01:5d:
                    7b:21:a8:4b:7e:c1:ba:db:95:96:c4:48:20:a3:2e:
                    30:99:aa:41:94:42:32:a1:a2:69:37:39:fd:ef:36:
                    cb:13:3e:b3:76:a7:ef:a0:59:a3:b2:6d:69:fc:ba:
                    83:36:ef:38:a5:fd:d8:69:17:98:f0:bf:c9:98:aa:
                    63:e1:9b:9a:a9:7c:ec:85:91:aa:3a:c5:d0:2a:d9:
                    88:65:6b:71:a5:93:03:ce:8d:a1:64:eb:8c:c3:f7:
                    19:e0:61:d8:80:b2:d1:f1:f6:ad:b5:6e:58:9a:c5:
                    1f:50:98:1a:95:23:ec:e1:e7:40:49:34:85:ee:ec:
                    cd:35:57:d1:cc:07:f2:13:25:d4:e2:0c:9e:c9:a5:
                    18:3e:62:b7:91:35:39:94:41:8f:fc:dc:62:2e:35:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:EA:25:48:AD:55:ED:8E:1B:B0:D6:B9:98:D4:C3:3A:E7:27:EB
            X509v3 Authority Key Identifier:
                keyid:CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e5:ae:01:68:46:17:c9:13:fc:4e:4b:74:ed:42:92:a1:4b:
         7a:59:5f:df:c9:ef:4f:86:7c:26:03:b3:f4:24:7e:fb:1b:a3:
         ae:fd:b5:03:c0:96:fd:10:9c:32:85:b4:e1:b7:68:e2:be:ba:
         eb:a3:66:e1:7f:f8:89:3f:8d:99:2c:3e:75:c9:f3:41:e5:92:
         f6:56:10:96:b6:a4:3c:fd:9d:c9:91:8f:00:f6:a4:8e:e6:61:
         8e:8a:59:fc:5f:9d:d6:ea:0e:f4:99:68:28:be:f9:c0:9a:2a:
         dd:b7:ca:01:48:62:d6:79:8c:c5:0e:c0:3c:f8:ec:3b:9a:d0:
         ba:b5:62:2a:fe:2d:b0:76:75:25:48:42:07:b7:2a:b1:ba:73:
         47:5f:7e:98:4b:ef:ca:2c:23:24:e6:40:d0:33:f6:89:56:f1:
         fc:74:67:d0:5d:44:c7:73:e4:34:a1:c7:cf:a7:ee:8a:2b:aa:
         9d:c3:79:bb:75:eb:57:f7:9b:af:fd:b3:aa:4e:98:fc:35:87:
         cb:8a:11:51:b0:c7:21:65:30:78:16:90:0c:8d:8e:06:f4:60:
         e3:9d:87:5f:cb:64:6d:48:ad:ed:72:40:93:b7:da:22:ed:7c:
         f5:b0:04:e9:fc:ac:3c:68:f8:05:4a:71:81:38:e6:31:1f:a7:
         d0:9d:3f:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBu2Poy2KwF9/7KhRwb4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzNmN2JkOWNkOTkzNjgxZTMwZmVjNWM1OWI0NzU2NTIy
YmEzMWMwHhcNMjUwNDEzMTIwMTQ1WhcNMjUwNDE0MTIwMTQ1WjAzMTEwLwYDVQQD
EygzMWNjZWEyNTQ4YWQ1NWVkOGUxYmIwZDZiOTk4ZDRjMzNhZTcyN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RD7dwOsGjR8n+yUjOKXd9C+jnEq
rk/qOgXgHL+XPAFpgVVVhsX3pJehwbnpCd0i/y59Lxl8eL7nJAAB8Xm+EwvR2P+N
h9A/rWgstPbji5JlfQD1YcCnmv5Y58TXsPOQXuSFhH7wAV17IahLfsG625WWxEgg
oy4wmapBlEIyoaJpNzn97zbLEz6zdqfvoFmjsm1p/LqDNu84pf3YaReY8L/JmKpj
4ZuaqXzshZGqOsXQKtmIZWtxpZMDzo2hZOuMw/cZ4GHYgLLR8fattW5YmsUfUJga
lSPs4edASTSF7uzNNVfRzAfyEyXU4gyeyaUYPmK3kTU5lEGP/NxiLjWEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHM6iVIrVXtjhuw1rmY1MM65yfrMB8GA1UdIwQY
MBaAFM9z972c2ZNoHjD+xcWbR1ZSK6McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNQM3ZaelprMmdlTVA3RnhadEhWbElyb3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wYjBkN2YtODE5Ni00Mjc1LWE5MTEt
N2E3OTM5OTJmYmEwLzEvejNQM3ZaelprMmdlTVA3RnhadEhWbElyb3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wYjBkN2YtODE5Ni00Mjc1LWE5MTEtN2E3OTM5OTJmYmEw
LzEvejNQM3ZaelprMmdlTVA3RnhadEhWbElyb3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauWuAWhG
F8kT/E5LdO1CkqFLellf38nvT4Z8JgOz9CR++xujrv21A8CW/RCcMoW04bdo4r66
66Nm4X/4iT+NmSw+dcnzQeWS9lYQlrakPP2dyZGPAPakjuZhjopZ/F+d1uoO9Jlo
KL75wJoq3bfKAUhi1nmMxQ7APPjsO5rQurViKv4tsHZ1JUhCB7cqsbpzR19+mEvv
yiwjJOZA0DP2iVbx/HRn0F1Ex3PkNKHHz6fuiiuqncN5u3XrV/ebr/2zqk6Y/DWH
y4oRUbDHIWUweBaQDI2OBvRg452HX8tkbUit7XJAk7faIu189bAE6fysPGj4BUpx
gTjmMR+n0J0/zQ==
-----END CERTIFICATE-----