Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File:                     zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier:          SPikGoB4kd6GIwS3AMSUc5zkkidRMV+x+v0obW2PQbo=
Subject key identifier:   2F:65:E9:0A:A0:7C:88:D0:B6:F5:A6:6B:0B:28:40:CE:37:12:75:82
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer:       /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial:       01962F7498C7C8243709C749EA00614A3C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number:          0E56
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: pDhGAUUYTY1UyjFCug_VA9YXDfc.roa (hash: 6QASzR15fgb6kzzjuyGG0IHeby7n6I+Zv7YlWcP1xhM=)
                          2: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: 5LcQou5RLNW2Sh7uYefPqyKwrcYxKT1v1cFqyrY36Hk=)
                          3: zX5SsCvbtwgH75QXuBUCbtdy6Ww.roa (hash: wvJG3iztzAVZHUfCx2K+W5TdCzTlwS3eoby1xR0ldnI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:98:c7:c8:24:37:09:c7:49:ea:00:61:4a:3c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=2f65e90aa07c88d0b6f5a66b0b2840ce37127582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e5:5b:12:bc:6e:dc:57:63:f7:9f:b8:21:53:
                    24:a4:a5:11:5f:29:e4:7b:ba:27:a9:d4:72:c2:3a:
                    c6:43:e1:70:66:0e:2f:b9:39:28:d3:f9:c0:4b:ee:
                    25:cd:7c:45:98:20:7c:7d:0a:c8:d8:93:24:09:1a:
                    69:9e:6d:a4:48:dc:e2:1f:13:cd:3d:a7:83:58:b7:
                    ab:e4:b3:6b:a4:91:d0:89:09:63:13:36:26:3a:5d:
                    b7:97:c6:94:70:91:c7:68:fe:4d:c0:50:3a:76:af:
                    74:25:d4:33:0f:65:4b:de:e0:75:72:03:e4:23:fa:
                    d4:de:48:1a:b5:e6:a6:67:41:e8:45:39:d6:15:f9:
                    f5:27:33:ec:c3:7b:1c:0c:de:ed:6e:9d:25:7e:0e:
                    d4:7f:d3:37:d5:ad:68:b9:b4:b1:b9:09:c8:d3:d2:
                    30:e7:c6:56:d0:c5:20:49:4d:56:dc:02:1b:60:92:
                    da:46:fd:0b:57:71:35:7e:22:9f:71:a8:49:48:f8:
                    7d:3e:b7:b3:91:cf:45:11:40:0e:be:56:34:09:b1:
                    c0:c7:e2:c7:cb:91:ec:5d:cc:92:c8:a2:e9:7a:36:
                    b1:08:9c:17:7d:a4:cf:f9:19:37:c9:5e:87:ab:01:
                    3b:a8:3b:dd:24:67:31:29:e2:ba:0e:fa:29:51:c3:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:E9:0A:A0:7C:88:D0:B6:F5:A6:6B:0B:28:40:CE:37:12:75:82
            X509v3 Authority Key Identifier:
                keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:fb:77:44:df:30:09:89:b2:0a:34:cc:e9:7f:83:09:b4:
         ee:4f:a5:08:82:65:04:3f:a9:8d:ef:f0:9d:5d:5a:61:60:8f:
         5b:7e:8e:20:8f:41:39:ce:e0:69:4f:7a:dd:47:a9:44:ac:7c:
         67:35:f1:ef:c7:6b:48:29:5e:3f:4a:4e:67:14:3c:75:48:5f:
         31:51:d8:23:53:7c:19:bf:34:46:7d:71:9b:52:87:ee:b2:a2:
         87:93:45:b3:03:ab:46:5a:98:e4:04:44:cf:e4:ac:e7:1b:65:
         e7:73:f5:26:28:46:39:d0:b8:cc:42:2a:6d:ab:af:ff:de:73:
         7f:43:b6:f3:41:aa:31:00:9a:02:55:f4:23:d0:c7:4f:67:d6:
         55:f5:0e:ce:0d:39:56:6f:bc:89:81:4a:0d:d6:9b:53:6c:57:
         c8:c6:d2:46:f3:1c:2c:46:de:29:e2:70:53:58:84:35:25:7f:
         7f:5f:9b:0a:2e:55:01:f5:67:c3:3a:75:19:09:84:8c:b3:bc:
         b0:80:27:14:0c:ab:6e:f1:f2:b4:fa:4d:73:62:7d:33:54:0e:
         8b:73:74:65:67:41:70:cf:77:d1:94:8a:6d:f9:b4:6a:27:10:
         3d:91:c2:bd:29:cc:81:65:72:d7:c5:2a:9c:a1:a6:e8:77:7c:
         e4:06:7a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJjHyCQ3CcdJ6gBhSjxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2RmNjUxNjIzN2Q0MjVlOWFlMzgxN2VjYjE0MWY0ODE3
NzNjMTIwHhcNMjUwNDEzMTQwMTMyWhcNMjUwNDE0MTQwMTMyWjAzMTEwLwYDVQQD
EygyZjY1ZTkwYWEwN2M4OGQwYjZmNWE2NmIwYjI4NDBjZTM3MTI3NTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eVbErxu3Fdj95+4IVMkpKURXynk
e7onqdRywjrGQ+FwZg4vuTko0/nAS+4lzXxFmCB8fQrI2JMkCRppnm2kSNziHxPN
PaeDWLer5LNrpJHQiQljEzYmOl23l8aUcJHHaP5NwFA6dq90JdQzD2VL3uB1cgPk
I/rU3kgateamZ0HoRTnWFfn1JzPsw3scDN7tbp0lfg7Uf9M31a1oubSxuQnI09Iw
58ZW0MUgSU1W3AIbYJLaRv0LV3E1fiKfcahJSPh9Prezkc9FEUAOvlY0CbHAx+LH
y5HsXcySyKLpejaxCJwXfaTP+Rk3yV6HqwE7qDvdJGcxKeK6DvopUcNrvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9l6QqgfIjQtvWmawsoQM43EnWCMB8GA1UdIwQY
MBaAFMzN9lFiN9Ql6a44F+yxQfSBdzwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEt
MWI1MDE1MjA1MzJiLzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEtMWI1MDE1MjA1MzJi
LzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZH77d0Tf
MAmJsgo0zOl/gwm07k+lCIJlBD+pje/wnV1aYWCPW36OII9BOc7gaU963UepRKx8
ZzXx78drSCleP0pOZxQ8dUhfMVHYI1N8Gb80Rn1xm1KH7rKih5NFswOrRlqY5ARE
z+Ss5xtl53P1JihGOdC4zEIqbauv/95zf0O280GqMQCaAlX0I9DHT2fWVfUOzg05
Vm+8iYFKDdabU2xXyMbSRvMcLEbeKeJwU1iENSV/f1+bCi5VAfVnwzp1GQmEjLO8
sIAnFAyrbvHytPpNc2J9M1QOi3N0ZWdBcM930ZSKbfm0aicQPZHCvSnMgWVy18Uq
nKGm6Hd85AZ6/A==
-----END CERTIFICATE-----