Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          wjJXixj3Pq9VVyVvEMsNIuOd6mBD6BAjCXzxyMiEdOo=
Subject key identifier:   41:F2:0A:99:7F:63:5A:FF:F7:92:69:B1:76:30:6A:24:1E:CC:A4:8A
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       01962F74DAB598302D519AB0BF71E22F34CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          0581
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: EBkWWncxgrtcR04RBW5xRAhqB_Y.roa (hash: +tLurhzSJO6Fa+3tLnsFn+4dlN2FIAPyP3DNksZOD1Y=)
                          2: FF0ktv0OPoF7jCtMQNOnbF5wwXU.roa (hash: HLhVlsk2Unfze1/M/TFW88bBXMX8DWQaGu5Q6NyMGnM=)
                          3: mVmFEspS58t4qBmgu_qcdcUjF7o.roa (hash: Au8uqHQV1V3ihkYvq6mYv36Z4AIS8BXt28+53WRRcaQ=)
                          4: vgmzsk5mJlVpOvg90oBMOrzEyD8.roa (hash: mlh/51JI3/xnvn2/YPy/vMvMSrdR3vTjEtNddu6PauM=)
                          5: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: rPK7+r+/rQEkuujS0gw0ywMvlhK8ghNXtklsAV87JCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:da:b5:98:30:2d:51:9a:b0:bf:71:e2:2f:34:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=41f20a997f635afff79269b176306a241ecca48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:d6:e4:2d:ce:75:e2:bf:5c:8d:d4:b0:09:
                    d4:24:02:0c:a4:a1:ce:be:f1:21:a6:c5:01:2f:04:
                    61:aa:15:24:66:e7:b2:3d:aa:c0:51:6f:28:1b:1f:
                    c4:33:1e:bd:fc:c1:b4:33:38:3e:3e:90:0a:3d:32:
                    45:37:5a:a9:e1:3b:97:5e:31:a2:09:6e:55:02:92:
                    db:76:7d:e9:b7:72:d3:66:eb:e0:41:e3:02:a2:56:
                    a0:22:61:69:1e:d9:04:70:e4:7c:84:0e:42:eb:34:
                    67:59:b7:dc:2c:b4:8e:f8:a8:4f:51:b0:e6:3c:9c:
                    3c:95:09:67:26:b1:82:62:b7:5e:9d:3a:e4:a3:fe:
                    54:d1:ff:a7:b2:c5:4c:bd:1c:a7:e2:b2:01:06:d1:
                    77:cb:09:21:db:01:30:6f:ee:54:e5:74:6b:3e:ae:
                    b1:6d:bb:58:4b:dd:e2:30:c2:94:88:76:6c:d4:57:
                    ea:25:75:77:da:d4:44:9e:b7:ad:bd:8e:a4:a2:9a:
                    ec:b7:6c:42:ed:2e:8b:64:42:83:9c:98:97:08:82:
                    d3:55:4a:47:9b:cc:d6:f1:38:27:69:ec:e2:31:50:
                    36:65:7b:f0:41:08:02:67:77:55:91:0b:cc:ac:1e:
                    2c:20:2a:f3:2c:61:f4:ca:a8:de:59:43:3d:65:50:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F2:0A:99:7F:63:5A:FF:F7:92:69:B1:76:30:6A:24:1E:CC:A4:8A
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ea:7e:f0:87:6e:b0:85:de:50:b2:80:fb:df:f2:03:a3:2c:
         e4:22:5e:ec:74:b9:c6:2b:3b:7b:a4:24:a4:80:99:02:d1:cf:
         51:b2:26:94:d6:6e:02:58:91:af:b0:36:95:d9:14:0e:7c:0b:
         19:ab:07:dd:fa:bc:c3:f9:d9:5d:5a:bb:30:43:e9:16:ac:73:
         69:90:13:f2:d3:aa:e8:ec:a3:62:c9:d5:79:df:b9:67:d7:b9:
         76:f4:4a:f2:7a:0f:94:c9:8e:44:cf:f6:27:87:28:90:62:c6:
         c4:7b:74:59:f0:e5:22:b1:1a:de:34:85:fa:44:74:85:76:86:
         6b:67:f5:47:2b:33:5f:23:e9:87:86:77:2a:fc:bf:3c:15:6f:
         37:29:8b:96:0b:23:53:18:0f:87:ef:8f:14:ce:9d:47:8c:68:
         86:a2:02:5f:52:db:f4:df:37:85:e4:86:60:21:e4:b1:88:71:
         86:e5:e9:d1:e8:d8:e9:b0:dc:fc:fb:f1:8a:e4:c7:a3:bb:72:
         20:16:40:e3:da:a6:1a:f5:9a:40:35:88:b1:5d:8f:6f:0b:86:
         1f:1c:92:e7:b4:0a:49:3c:cb:f3:0c:f5:fa:87:20:4a:05:44:
         19:da:09:8c:c1:4a:21:06:3e:93:de:b5:44:86:2e:3b:d0:03:
         5c:7b:dd:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNq1mDAtUZqwv3HiLzTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjUwNDEzMTQwMTQ5WhcNMjUwNDE0MTQwMTQ5WjAzMTEwLwYDVQQD
Eyg0MWYyMGE5OTdmNjM1YWZmZjc5MjY5YjE3NjMwNmEyNDFlY2NhNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdHW5C3OdeK/XI3UsAnUJAIMpKHO
vvEhpsUBLwRhqhUkZueyParAUW8oGx/EMx69/MG0Mzg+PpAKPTJFN1qp4TuXXjGi
CW5VApLbdn3pt3LTZuvgQeMColagImFpHtkEcOR8hA5C6zRnWbfcLLSO+KhPUbDm
PJw8lQlnJrGCYrdenTrko/5U0f+nssVMvRyn4rIBBtF3ywkh2wEwb+5U5XRrPq6x
bbtYS93iMMKUiHZs1FfqJXV32tREnretvY6koprst2xC7S6LZEKDnJiXCILTVUpH
m8zW8TgnaeziMVA2ZXvwQQgCZ3dVkQvMrB4sICrzLGH0yqjeWUM9ZVCYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHyCpl/Y1r/95JpsXYwaiQezKSKMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOp+8Idu
sIXeULKA+9/yA6Ms5CJe7HS5xis7e6QkpICZAtHPUbImlNZuAliRr7A2ldkUDnwL
GasH3fq8w/nZXVq7MEPpFqxzaZAT8tOq6OyjYsnVed+5Z9e5dvRK8noPlMmORM/2
J4cokGLGxHt0WfDlIrEa3jSF+kR0hXaGa2f1RyszXyPph4Z3Kvy/PBVvNymLlgsj
UxgPh++PFM6dR4xohqICX1Lb9N83heSGYCHksYhxhuXp0ejY6bDc/PvxiuTHo7ty
IBZA49qmGvWaQDWIsV2PbwuGHxyS57QKSTzL8wz1+ocgSgVEGdoJjMFKIQY+k961
RIYuO9ADXHvdrg==
-----END CERTIFICATE-----