Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File:                     tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier:          u62Pf/TYkPhf6pQd3FUWu7gMNMK5oOWr/bAszPLJFVY=
Subject key identifier:   2B:A7:1C:D2:2D:10:64:03:2A:B2:A9:94:86:77:2D:9A:A8:C3:CC:B7
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer:       /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial:       01962DF43C8AEC80569B41076C41E5A4960C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number:          1038
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=)
                          2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: P+7Ao4a+R/s2YGnkUvwlE/EE88KpweU/T+uw9WEqMyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:8a:ec:80:56:9b:41:07:6c:41:e5:a4:96:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=2ba71cd22d1064032ab2a99486772d9aa8c3ccb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:ed:52:85:bf:89:43:71:b6:32:70:cd:40:
                    bb:8f:7a:cb:c6:5f:3c:29:2e:d9:a8:8e:1d:26:63:
                    be:09:58:42:2b:60:90:d9:1c:dd:72:f3:f9:46:0c:
                    e0:2b:7b:88:1c:c9:c3:b4:a3:35:79:fd:d7:dc:07:
                    4a:9a:19:63:59:3f:be:79:53:56:79:10:01:27:7c:
                    e2:2f:75:77:21:14:04:12:c1:57:30:b6:b3:c2:19:
                    aa:69:48:33:a5:16:18:6a:60:9c:26:cc:52:22:63:
                    e8:18:39:39:37:27:f0:75:ec:ae:7f:7d:5f:ac:b3:
                    db:5c:85:f1:2e:77:2f:e3:54:45:8d:4a:88:54:af:
                    e8:a6:34:b5:a6:c8:cd:26:b9:c9:ab:1c:1e:9d:79:
                    71:46:84:42:1c:5e:1b:ce:1a:6c:92:1e:8e:cf:06:
                    3e:04:6a:da:44:a2:e2:31:ac:8a:41:e1:f6:3e:10:
                    5c:c9:f7:d1:da:42:27:0f:51:a5:eb:7b:23:2d:ca:
                    40:17:c4:b3:11:9d:50:aa:c2:df:15:6f:05:c9:58:
                    71:36:8f:fb:85:74:7b:d3:34:0f:fe:39:06:ce:b7:
                    f7:95:24:ea:ef:0c:ca:df:8b:eb:29:fe:70:d7:01:
                    1b:07:a4:fd:91:d5:11:01:22:93:30:b8:54:c2:03:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A7:1C:D2:2D:10:64:03:2A:B2:A9:94:86:77:2D:9A:A8:C3:CC:B7
            X509v3 Authority Key Identifier:
                keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:0c:79:80:88:ef:82:55:b4:94:a5:c9:d5:08:03:a0:94:
         68:9b:1c:07:2e:5b:0f:44:cc:b3:de:bc:0b:ff:73:2b:13:b1:
         58:12:15:96:33:8c:e8:ae:3f:2c:44:ce:91:3a:54:4e:68:06:
         67:90:66:05:ac:47:f7:82:f8:09:e8:4b:6d:df:d0:66:27:09:
         ba:80:1e:3c:1d:93:59:90:9f:b5:8a:8c:7a:a8:82:cf:76:06:
         66:87:5c:08:77:a6:50:94:5c:e7:a7:31:0d:df:91:13:60:8a:
         a9:23:c4:be:b5:83:12:dd:eb:ac:cd:be:64:96:94:1d:f8:d5:
         25:80:26:44:38:27:11:1c:4b:08:86:dd:7d:d6:c2:1e:0d:ee:
         fb:af:7e:07:be:eb:ac:c0:64:93:9f:58:a4:f9:3d:be:bf:e1:
         9e:b3:a8:ea:d5:1f:82:ed:a5:84:72:0d:e9:03:9f:4e:38:23:
         80:60:e6:b4:bc:91:47:67:88:f4:fa:c0:9b:61:f2:95:db:e2:
         4e:7d:5a:56:a2:9d:c5:e3:18:4a:10:7e:3b:ca:4d:75:ab:81:
         83:58:ac:8a:9a:e2:07:a6:5c:46:16:11:13:dc:7c:94:23:45:
         19:19:1a:fd:08:93:05:01:7d:0f:23:76:5d:6c:88:81:49:1b:
         fe:ff:73:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DyK7IBWm0EHbEHlpJYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTY3ZTdlZTM3ODM4ZjA3NTFjNDljNWU1ZjNlYzAwMDA2
NGFlOTUwHhcNMjUwNDEzMDcwMTQyWhcNMjUwNDE0MDcwMTQyWjAzMTEwLwYDVQQD
EygyYmE3MWNkMjJkMTA2NDAzMmFiMmE5OTQ4Njc3MmQ5YWE4YzNjY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T/tUoW/iUNxtjJwzUC7j3rLxl88
KS7ZqI4dJmO+CVhCK2CQ2RzdcvP5RgzgK3uIHMnDtKM1ef3X3AdKmhljWT++eVNW
eRABJ3ziL3V3IRQEEsFXMLazwhmqaUgzpRYYamCcJsxSImPoGDk5Nyfwdeyuf31f
rLPbXIXxLncv41RFjUqIVK/opjS1psjNJrnJqxwenXlxRoRCHF4bzhpskh6OzwY+
BGraRKLiMayKQeH2PhBcyffR2kInD1Gl63sjLcpAF8SzEZ1QqsLfFW8FyVhxNo/7
hXR70zQP/jkGzrf3lSTq7wzK34vrKf5w1wEbB6T9kdURASKTMLhUwgNqawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCunHNItEGQDKrKplIZ3LZqow8y3MB8GA1UdIwQY
MBaAFLUWfn7jeDjwdRxJxeXz7AAAZK6VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzIt
ZTIyYWVkMWYwOGVjLzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzItZTIyYWVkMWYwOGVj
LzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi88MeYCI
74JVtJSlydUIA6CUaJscBy5bD0TMs968C/9zKxOxWBIVljOM6K4/LETOkTpUTmgG
Z5BmBaxH94L4CehLbd/QZicJuoAePB2TWZCftYqMeqiCz3YGZodcCHemUJRc56cx
Dd+RE2CKqSPEvrWDEt3rrM2+ZJaUHfjVJYAmRDgnERxLCIbdfdbCHg3u+69+B77r
rMBkk59YpPk9vr/hnrOo6tUfgu2lhHIN6QOfTjgjgGDmtLyRR2eI9PrAm2Hyldvi
Tn1aVqKdxeMYShB+O8pNdauBg1isipriB6ZcRhYRE9x8lCNFGRka/QiTBQF9DyN2
XWyIgUkb/v9zrA==
-----END CERTIFICATE-----