Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft
File:                     zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft (raw, json)
Hash identifier:          C5vfWed/tdvB00l9KpoGpfoTDMtjRn1P8/U5h1A/VaE=
Subject key identifier:   8A:83:4E:BB:C9:C8:B8:F4:5A:09:FF:3F:D2:A0:C0:0A:89:77:9F:4F
Authority key identifier: CE:04:26:F9:D2:E5:F3:0A:B8:7A:82:76:7F:D8:96:EE:BA:4B:1C:57
Certificate issuer:       /CN=ce0426f9d2e5f30ab87a82767fd896eeba4b1c57
Certificate serial:       01962F74D91372A1422EF18C0369A0F2A23F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft
Manifest number:          0923
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: zgQm-dLl8wq4eoJ2f9iW7rpLHFc.crl (hash: b+RzdPK4b4+9GPxc+8ARZPPHb+C9gfA1wztnbZWJqhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d9:13:72:a1:42:2e:f1:8c:03:69:a0:f2:a2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0426f9d2e5f30ab87a82767fd896eeba4b1c57
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=8a834ebbc9c8b8f45a09ff3fd2a0c00a89779f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:37:8c:bc:42:07:a7:5a:54:e0:f2:a1:b5:
                    d9:1a:83:54:94:bc:2b:a4:a8:cd:bb:71:2f:2c:bf:
                    17:44:a0:1d:20:86:44:a8:c3:a8:73:58:21:4e:50:
                    2a:08:19:cc:66:a3:ee:43:48:5a:c2:8b:36:07:ee:
                    12:6a:86:8f:21:e4:98:12:17:5f:a3:83:b8:d1:93:
                    56:cb:af:0c:d8:ad:6e:29:98:a5:4c:8a:d6:c2:20:
                    9b:d3:fc:6f:e2:d9:e6:ce:3e:2b:97:4d:11:f3:a9:
                    35:be:c4:c1:59:70:59:82:77:8a:51:e1:97:7f:5b:
                    3c:20:b4:ce:d3:25:f5:59:3c:81:a8:a4:d1:ba:f2:
                    93:5b:3b:83:01:c1:0a:94:e4:11:1b:68:5a:a2:ed:
                    b3:10:52:9f:bc:15:5c:51:74:04:90:dd:cf:1f:1d:
                    4f:7a:8f:19:b3:f8:0b:7f:ac:50:0f:84:27:89:47:
                    b8:07:c1:77:22:07:05:0d:83:70:75:57:f8:2a:68:
                    94:b3:a7:3a:6b:e6:02:aa:3e:a0:c4:74:01:4b:e5:
                    73:b1:db:9c:1e:ee:f4:6e:cd:c3:4c:83:f8:02:9f:
                    53:e0:34:62:ea:68:59:ef:c9:c0:98:5d:06:bf:f5:
                    7c:72:5c:1c:64:72:65:f6:76:a7:c4:41:65:e8:3b:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:83:4E:BB:C9:C8:B8:F4:5A:09:FF:3F:D2:A0:C0:0A:89:77:9F:4F
            X509v3 Authority Key Identifier:
                keyid:CE:04:26:F9:D2:E5:F3:0A:B8:7A:82:76:7F:D8:96:EE:BA:4B:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:7a:7e:41:c6:7d:59:43:57:79:1e:db:92:3f:83:65:d9:
         d8:98:ff:4a:cd:f6:e7:24:d7:b5:e1:a4:8a:4c:d0:bb:4b:ed:
         35:65:58:6f:54:df:b5:66:59:09:ed:12:46:a6:9c:30:12:6b:
         a2:ed:22:d3:bf:71:b2:b0:69:70:36:52:e9:4e:48:f6:36:ab:
         c9:45:26:64:fe:ef:2f:58:d0:aa:bc:18:cc:52:ad:77:e8:4c:
         9f:ce:c0:3a:64:44:ce:d6:72:3b:9c:ef:47:b8:79:8b:d9:fb:
         05:1b:72:9f:76:04:69:be:d9:00:f9:98:d2:6f:34:65:20:6c:
         f8:1c:4d:d9:ba:aa:97:e2:07:41:c5:eb:b1:d9:57:f3:e4:1f:
         f7:82:9a:ec:8a:6e:20:75:f7:51:ce:5a:28:06:b9:a6:53:b5:
         4f:f5:92:43:79:91:88:b4:44:38:77:87:19:4d:b2:da:6b:fc:
         cf:8b:b9:8d:cc:9b:37:95:5c:ec:37:da:29:9e:54:1b:39:27:
         c1:3d:03:62:09:ce:d0:2f:7f:45:df:1d:8a:5e:88:55:6c:ac:
         eb:ec:99:2b:92:30:64:78:3c:e5:38:e6:43:3d:00:5d:86:84:
         ea:b5:6c:96:ad:fa:56:f5:a8:3b:79:22:1f:de:ae:40:77:e4:
         b7:83:ee:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNkTcqFCLvGMA2mg8qI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDQyNmY5ZDJlNWYzMGFiODdhODI3NjdmZDg5NmVlYmE0
YjFjNTcwHhcNMjUwNDEzMTQwMTQ4WhcNMjUwNDE0MTQwMTQ4WjAzMTEwLwYDVQQD
Eyg4YTgzNGViYmM5YzhiOGY0NWEwOWZmM2ZkMmEwYzAwYTg5Nzc5ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvo3jLxCB6daVODyobXZGoNUlLwr
pKjNu3EvLL8XRKAdIIZEqMOoc1ghTlAqCBnMZqPuQ0hawos2B+4SaoaPIeSYEhdf
o4O40ZNWy68M2K1uKZilTIrWwiCb0/xv4tnmzj4rl00R86k1vsTBWXBZgneKUeGX
f1s8ILTO0yX1WTyBqKTRuvKTWzuDAcEKlOQRG2haou2zEFKfvBVcUXQEkN3PHx1P
eo8Zs/gLf6xQD4QniUe4B8F3IgcFDYNwdVf4KmiUs6c6a+YCqj6gxHQBS+Vzsduc
Hu70bs3DTIP4Ap9T4DRi6mhZ78nAmF0Gv/V8clwcZHJl9nanxEFl6DslLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqDTrvJyLj0Wgn/P9KgwAqJd59PMB8GA1UdIwQY
MBaAFM4EJvnS5fMKuHqCdn/Ylu66SxxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdRbS1kTGw4d3E0ZW9KMmY5aVc3cnBMSEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zOTRkYzAtNzVhYS00MGE4LTgyMjIt
ZWU0YTQ2MTg1MjRjLzEvemdRbS1kTGw4d3E0ZW9KMmY5aVc3cnBMSEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zOTRkYzAtNzVhYS00MGE4LTgyMjItZWU0YTQ2MTg1MjRj
LzEvemdRbS1kTGw4d3E0ZW9KMmY5aVc3cnBMSEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxF6fkHG
fVlDV3ke25I/g2XZ2Jj/Ss325yTXteGkikzQu0vtNWVYb1TftWZZCe0SRqacMBJr
ou0i079xsrBpcDZS6U5I9jaryUUmZP7vL1jQqrwYzFKtd+hMn87AOmREztZyO5zv
R7h5i9n7BRtyn3YEab7ZAPmY0m80ZSBs+BxN2bqql+IHQcXrsdlX8+Qf94Ka7Ipu
IHX3Uc5aKAa5plO1T/WSQ3mRiLREOHeHGU2y2mv8z4u5jcybN5Vc7DfaKZ5UGzkn
wT0DYgnO0C9/Rd8dil6IVWys6+yZK5IwZHg85TjmQz0AXYaE6rVslq36VvWoO3ki
H96uQHfkt4Putw==
-----END CERTIFICATE-----