Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File:                     fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier:          FNKT986u5FYgQvDIMbD7eqWJllbWhd6YAOryRVrPaTs=
Subject key identifier:   A6:5D:F9:44:5E:17:C9:E6:8C:A3:61:9B:12:F1:22:E6:5B:8F:44:95
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer:       /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial:       01962E993F435D97C0EFA87CABBF163D502C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number:          0DC4
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (hash: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=)
                          2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: TXgPuizhd1IZE38q4YIYULL/d8y4nskT45Ns9FJS8Is=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3f:43:5d:97:c0:ef:a8:7c:ab:bf:16:3d:50:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=a65df9445e17c9e68ca3619b12f122e65b8f4495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:02:47:66:f2:f8:e0:9c:d2:96:ea:91:a3:
                    f8:b6:5d:00:60:70:c5:c5:1c:37:5f:95:fa:e7:ae:
                    b0:6e:5a:68:71:e3:3b:53:ff:dc:fe:df:a1:30:1e:
                    fe:58:43:22:a0:53:e0:c0:ec:fc:cb:c1:16:d5:4a:
                    ea:aa:02:b5:22:a3:90:4e:a0:d0:9e:d3:af:98:8c:
                    ba:ea:ad:52:92:90:46:0b:ab:b7:16:24:f4:d0:78:
                    09:e0:5f:5b:34:c8:e7:66:73:7e:f9:3c:ea:62:80:
                    b3:38:3c:cf:d5:e7:d9:20:3c:af:4b:90:9c:4f:71:
                    b3:f9:ad:0e:44:a8:7f:33:a1:40:dc:d3:ab:c6:68:
                    ea:7e:eb:3e:f4:04:4f:88:b0:dc:39:0d:a8:d9:bc:
                    0f:3c:50:b2:84:b1:78:d7:33:f2:aa:f4:ff:33:19:
                    67:76:d2:f5:c5:de:29:81:8e:1e:00:fd:33:04:7a:
                    24:c5:f6:24:d0:d0:76:b0:71:0f:e1:d7:6f:bc:9e:
                    6d:32:8e:c9:d9:f1:17:b0:1a:90:5a:0b:24:dd:a3:
                    85:85:7e:42:fe:fc:77:d2:27:34:5e:54:09:b3:2f:
                    f8:36:e3:1c:b2:2f:de:e9:1c:16:07:db:5c:66:26:
                    9f:71:eb:e8:14:89:0f:b8:cb:81:51:b2:22:8d:55:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:F9:44:5E:17:C9:E6:8C:A3:61:9B:12:F1:22:E6:5B:8F:44:95
            X509v3 Authority Key Identifier:
                keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:72:9b:ad:33:93:8c:bf:84:fe:47:5e:70:92:7f:c7:06:
         11:c8:1d:92:6e:c7:bc:77:0c:a0:e1:61:d5:37:77:63:20:e3:
         8a:92:29:d2:d5:ad:88:f0:19:6b:e7:3c:56:66:33:2b:59:7b:
         41:33:cb:43:72:78:2c:6a:b4:cc:5d:a9:5f:f9:97:5b:a3:30:
         2b:2f:31:f3:89:60:75:f7:de:0e:21:fb:e3:04:98:a4:7a:c4:
         e8:f4:6e:29:c1:a2:0a:1b:9b:6e:10:bc:8d:39:a5:dd:8a:e1:
         ea:01:cf:ad:57:d9:9c:f3:eb:d3:0a:dd:9a:61:8f:65:d8:b2:
         61:64:14:ff:f4:be:07:46:ce:cb:1a:67:20:1d:81:c0:51:66:
         e0:03:c0:b6:30:77:2a:87:02:e8:95:0e:4a:14:87:48:1e:ea:
         f4:13:a7:3d:a4:b8:4b:8c:7c:a1:60:3d:3a:49:5e:ab:27:21:
         16:fb:44:82:da:ae:de:72:31:c9:5e:5e:ec:eb:d7:e9:57:b6:
         43:42:19:b8:93:bf:b3:6a:01:0d:41:2a:e2:e1:2a:21:b6:57:
         83:5c:93:b8:c3:dc:f8:61:f9:a4:ec:96:df:ae:d4:d8:89:ed:
         4c:88:60:3c:48:92:8a:9c:4e:52:6a:1d:72:1f:71:d8:98:48:
         35:12:e3:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumT9DXZfA76h8q78WPVAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMzVkNWFlNDE3ZjQ1ZWU4NTA1ZDc2Y2VhYTFiMzRjNDU4
Mzk0YTAwHhcNMjUwNDEzMTAwMTU3WhcNMjUwNDE0MTAwMTU3WjAzMTEwLwYDVQQD
EyhhNjVkZjk0NDVlMTdjOWU2OGNhMzYxOWIxMmYxMjJlNjViOGY0NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXECR2by+OCc0pbqkaP4tl0AYHDF
xRw3X5X6566wblpoceM7U//c/t+hMB7+WEMioFPgwOz8y8EW1UrqqgK1IqOQTqDQ
ntOvmIy66q1SkpBGC6u3FiT00HgJ4F9bNMjnZnN++TzqYoCzODzP1efZIDyvS5Cc
T3Gz+a0ORKh/M6FA3NOrxmjqfus+9ARPiLDcOQ2o2bwPPFCyhLF41zPyqvT/Mxln
dtL1xd4pgY4eAP0zBHokxfYk0NB2sHEP4ddvvJ5tMo7J2fEXsBqQWgsk3aOFhX5C
/vx30ic0XlQJsy/4NuMcsi/e6RwWB9tcZiafcevoFIkPuMuBUbIijVV2RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZd+UReF8nmjKNhmxLxIuZbj0SVMB8GA1UdIwQY
MBaAFH811a5Bf0XuhQXXbOqhs0xFg5SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQt
MzQ0NzNiYzkxZDgwLzEvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQtMzQ0NzNiYzkxZDgw
LzEvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABddym60z
k4y/hP5HXnCSf8cGEcgdkm7HvHcMoOFh1Td3YyDjipIp0tWtiPAZa+c8VmYzK1l7
QTPLQ3J4LGq0zF2pX/mXW6MwKy8x84lgdffeDiH74wSYpHrE6PRuKcGiChubbhC8
jTml3Yrh6gHPrVfZnPPr0wrdmmGPZdiyYWQU//S+B0bOyxpnIB2BwFFm4APAtjB3
KocC6JUOShSHSB7q9BOnPaS4S4x8oWA9OkleqychFvtEgtqu3nIxyV5e7OvX6Ve2
Q0IZuJO/s2oBDUEq4uEqIbZXg1yTuMPc+GH5pOyW367U2IntTIhgPEiSipxOUmod
ch9x2JhINRLjKw==
-----END CERTIFICATE-----