Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File:                     zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier:          pmtRTQ4xHv5hKxkvdLCAbt/1c8hiKzQQrhL5593/HZk=
Subject key identifier:   E6:D6:CD:3C:8B:93:3C:1F:D0:46:2B:0B:57:44:6D:66:79:7D:92:29
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer:       /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial:       01962F3D4807DCC470F411B9FB9FB5A0D155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number:          09A4
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
                          2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
                          3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: CKof4msLcvu7+2x3UlOc0ihObWx82n34nxaBX+AOro4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:48:07:dc:c4:70:f4:11:b9:fb:9f:b5:a0:d1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=e6d6cd3c8b933c1fd0462b0b57446d66797d9229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:58:7d:14:fd:51:cc:dd:cb:77:56:36:34:
                    68:96:5e:0b:73:d6:0a:d0:f7:a2:d3:9c:4f:74:f1:
                    0b:73:c0:54:5b:08:1d:48:bd:10:68:13:7f:a5:ba:
                    7d:7f:f6:23:6a:d4:fa:a9:9e:33:8b:ca:0a:74:c0:
                    0a:5c:72:a0:87:40:d1:30:b6:8b:51:75:0c:81:16:
                    88:0d:d7:44:ee:d3:ec:ef:d8:6c:66:6b:7b:2e:b1:
                    90:57:72:a5:1c:1b:04:25:a5:79:0d:92:8b:1d:91:
                    5a:57:ca:65:a8:06:6f:e8:6a:17:8d:1c:4a:e6:2f:
                    c5:9a:66:a3:6f:43:a0:db:22:db:3d:cf:16:96:1b:
                    e7:23:7a:d1:11:c9:d7:36:e9:87:bd:2c:40:80:45:
                    4d:50:13:f5:d4:e3:31:17:b8:31:fa:88:04:f8:6d:
                    69:50:cb:51:97:6c:0d:ef:d8:6a:60:a9:5f:6c:68:
                    69:d8:f0:63:6e:7c:c2:83:ca:ba:5b:c3:2c:be:28:
                    e2:04:13:8d:13:53:9f:48:f7:4f:a9:62:e2:a9:50:
                    c5:c4:eb:7e:ad:d4:dd:e3:22:47:7b:31:48:4e:27:
                    1c:b5:dc:fa:c2:d1:c6:0b:e4:6e:4a:6e:69:1c:8f:
                    9a:c0:4c:12:90:55:41:1a:de:ff:85:c1:a0:c9:b9:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:CD:3C:8B:93:3C:1F:D0:46:2B:0B:57:44:6D:66:79:7D:92:29
            X509v3 Authority Key Identifier:
                keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7d:9c:e4:c2:76:9c:bd:86:8c:97:c5:b2:2f:7a:f5:db:5a:
         d6:3e:64:11:e2:6a:cc:d9:17:98:eb:a6:a3:45:e8:10:85:d6:
         b0:b4:d0:ce:55:04:1f:17:0b:7b:18:8b:2b:2a:6a:37:f4:fb:
         b1:2c:50:9e:5b:6d:f0:da:0e:80:6e:45:e2:2d:c3:e8:6a:c5:
         48:aa:41:91:34:ac:72:71:6e:23:9a:d2:09:97:d8:71:a8:45:
         b4:39:59:12:ce:58:50:22:94:95:95:b7:23:ec:cd:95:0e:e7:
         5a:6c:c5:c7:a0:00:a7:ee:56:06:6a:30:c3:e4:32:01:46:62:
         10:9a:83:4e:bc:39:f6:71:d1:2d:b9:c8:63:94:90:ef:4d:50:
         76:cb:c0:1c:ac:ef:54:ce:ba:2b:a0:cc:60:98:6d:84:73:3f:
         40:19:f5:91:db:88:5c:6f:da:31:a0:7a:1f:9b:6b:f5:2e:29:
         2a:f9:7a:88:17:cb:13:ba:2e:15:60:2b:84:6a:ab:e2:a6:10:
         e4:85:51:aa:5e:c3:f9:c3:b7:b9:d8:63:c6:13:cb:23:68:1a:
         e4:18:40:ad:9a:5e:ef:4b:da:e6:01:bb:eb:e7:89:e7:f3:dd:
         a4:3f:90:2d:f5:53:56:20:44:ee:2e:3f:95:e9:3b:3e:d0:71:
         e3:e3:a8:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUgH3MRw9BG5+5+1oNFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmMzMGYzNDQ5M2M0NTJhMTczZTRkZTBjNDYyYzgzYTcx
MWMzMzgwHhcNMjUwNDEzMTMwMTA3WhcNMjUwNDE0MTMwMTA3WjAzMTEwLwYDVQQD
EyhlNmQ2Y2QzYzhiOTMzYzFmZDA0NjJiMGI1NzQ0NmQ2Njc5N2Q5MjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RdYfRT9Uczdy3dWNjRoll4Lc9YK
0Pei05xPdPELc8BUWwgdSL0QaBN/pbp9f/YjatT6qZ4zi8oKdMAKXHKgh0DRMLaL
UXUMgRaIDddE7tPs79hsZmt7LrGQV3KlHBsEJaV5DZKLHZFaV8plqAZv6GoXjRxK
5i/Fmmajb0Og2yLbPc8WlhvnI3rREcnXNumHvSxAgEVNUBP11OMxF7gx+ogE+G1p
UMtRl2wN79hqYKlfbGhp2PBjbnzCg8q6W8MsvijiBBONE1OfSPdPqWLiqVDFxOt+
rdTd4yJHezFITicctdz6wtHGC+RuSm5pHI+awEwSkFVBGt7/hcGgybnbQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObWzTyLkzwf0EYrC1dEbWZ5fZIpMB8GA1UdIwQY
MBaAFM8sMPNEk8RSoXPk3gxGLIOnEcM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAt
NWE5MjJhNjJjNTcxLzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAtNWE5MjJhNjJjNTcx
LzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR32c5MJ2
nL2GjJfFsi969dta1j5kEeJqzNkXmOumo0XoEIXWsLTQzlUEHxcLexiLKypqN/T7
sSxQnltt8NoOgG5F4i3D6GrFSKpBkTSscnFuI5rSCZfYcahFtDlZEs5YUCKUlZW3
I+zNlQ7nWmzFx6AAp+5WBmoww+QyAUZiEJqDTrw59nHRLbnIY5SQ701QdsvAHKzv
VM66K6DMYJhthHM/QBn1kduIXG/aMaB6H5tr9S4pKvl6iBfLE7ouFWArhGqr4qYQ
5IVRql7D+cO3udhjxhPLI2ga5BhArZpe70va5gG76+eJ5/PdpD+QLfVTViBE7i4/
lek7PtBx4+OoXA==
-----END CERTIFICATE-----