Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File:                     Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier:          TAW4mfdJx5UnLp8yKoZm+lWp9MTypzq/nt4hwWIWWjs=
Subject key identifier:   0A:DB:44:21:0F:33:25:1E:AE:7D:DB:68:4B:47:BF:CD:73:80:6E:AB
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer:       /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial:       01962F750B2849C5534FF5BF8537A9160AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number:          03E5
Signing time:             Sun 13 Apr 2025 14:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:01 +0000
Files and hashes:         1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
                          2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: KS1lpzf65X1L3NmpOCopcZa5526nfWWCSu9zeDtoBx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:0b:28:49:c5:53:4f:f5:bf:85:37:a9:16:0a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
        Validity
            Not Before: Apr 13 14:02:01 2025 GMT
            Not After : Apr 14 14:02:01 2025 GMT
        Subject: CN=0adb44210f33251eae7ddb684b47bfcd73806eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:7e:85:e4:e1:15:9d:39:53:12:7e:4e:81:
                    7f:3c:1b:0b:c5:1c:6d:e8:2d:62:33:24:d8:7f:ec:
                    01:1f:e1:ff:91:42:b2:b8:0e:73:4c:27:57:23:59:
                    8b:ef:a6:81:07:a0:76:bc:41:c6:d6:a6:98:73:e9:
                    3b:e4:46:27:6c:28:33:63:95:b6:fd:2d:e6:bc:f1:
                    04:c1:17:10:e7:59:39:45:7c:1f:4a:f6:a2:5a:f2:
                    5f:c9:9e:fb:0f:7b:e6:4c:3c:5f:b7:8f:c2:d8:3e:
                    7f:bd:00:19:ff:d7:fd:eb:60:90:10:b9:33:ea:55:
                    a0:46:b6:c1:d4:5e:ca:a0:80:eb:a3:36:07:5c:01:
                    6e:3a:31:27:26:b4:ca:6d:26:f6:80:44:50:6a:3b:
                    8b:cf:5a:c4:dc:5d:5f:e8:7a:8e:24:bc:d2:ff:14:
                    8e:33:05:2a:62:4f:41:de:26:fc:59:84:1e:31:ba:
                    59:c6:c2:65:0b:59:c9:36:d0:75:a6:20:90:5c:0e:
                    76:55:9c:c1:dd:f8:af:a1:7e:3f:eb:c7:27:0c:62:
                    18:2f:55:ae:f7:83:01:78:d4:19:5b:15:bc:f6:0a:
                    49:f8:e5:82:cd:03:1f:62:39:33:41:54:33:27:b9:
                    94:2f:b4:34:37:e6:a0:93:4a:e6:6a:d4:fb:e6:b8:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DB:44:21:0F:33:25:1E:AE:7D:DB:68:4B:47:BF:CD:73:80:6E:AB
            X509v3 Authority Key Identifier:
                keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:10:c0:64:d5:3b:02:c4:1b:07:cc:2e:a8:2f:e0:3b:fa:da:
         ba:8d:82:b0:72:6d:49:40:57:64:99:22:7c:1a:8c:fe:31:a3:
         a0:3a:1a:ea:7b:9d:a3:c8:68:05:09:fc:f5:4f:0a:f8:0b:e7:
         2d:8b:3d:d7:6e:c9:58:e3:b7:dc:b4:46:ab:fb:60:77:11:ff:
         dd:85:f4:8c:11:00:d5:24:05:3d:94:bc:0d:4f:09:04:d8:0f:
         55:39:62:6a:45:37:43:ae:9e:0c:c7:5d:09:31:c4:5d:51:5d:
         98:61:6c:24:3a:e9:c5:1f:81:19:83:19:ac:0b:8e:48:27:c9:
         1b:61:b2:ef:31:5b:39:b4:06:a1:ca:ec:05:89:3a:40:13:29:
         17:34:06:33:5a:89:f9:28:c4:d4:38:79:c3:c8:8e:36:2d:79:
         e3:f9:2c:ec:4d:c9:84:4b:35:78:8a:3e:ab:01:1d:98:a4:04:
         e8:b4:4f:09:10:1c:98:66:37:b9:ed:2a:54:00:5f:34:cf:a1:
         76:9c:03:b3:14:b0:a2:21:7e:45:2b:83:8d:f9:46:ea:4f:09:
         b7:7c:2c:a4:9e:e0:1c:8d:c8:0e:3c:36:52:f5:dc:35:36:ef:
         42:ed:82:86:34:4e:1f:c2:a8:a4:08:6e:38:6e:08:ed:e2:4f:
         6f:8c:24:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdQsoScVTT/W/hTepFgr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2YzYmEzMDAyZWQ3ZTIzYTRiZDJlOTc4YjNhYmFjMzI3
ZmQwZDgwHhcNMjUwNDEzMTQwMjAxWhcNMjUwNDE0MTQwMjAxWjAzMTEwLwYDVQQD
EygwYWRiNDQyMTBmMzMyNTFlYWU3ZGRiNjg0YjQ3YmZjZDczODA2ZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JV+heThFZ05UxJ+ToF/PBsLxRxt
6C1iMyTYf+wBH+H/kUKyuA5zTCdXI1mL76aBB6B2vEHG1qaYc+k75EYnbCgzY5W2
/S3mvPEEwRcQ51k5RXwfSvaiWvJfyZ77D3vmTDxft4/C2D5/vQAZ/9f962CQELkz
6lWgRrbB1F7KoIDrozYHXAFuOjEnJrTKbSb2gERQajuLz1rE3F1f6HqOJLzS/xSO
MwUqYk9B3ib8WYQeMbpZxsJlC1nJNtB1piCQXA52VZzB3fivoX4/68cnDGIYL1Wu
94MBeNQZWxW89gpJ+OWCzQMfYjkzQVQzJ7mUL7Q0N+agk0rmatT75rhYPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArbRCEPMyUern3baEtHv81zgG6rMB8GA1UdIwQY
MBaAFGfPO6MALtfiOkvS6Xizq6wyf9DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQt
MjM0ZTBkMTc2MzI1LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQtMjM0ZTBkMTc2MzI1
LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhDAZNU7
AsQbB8wuqC/gO/rauo2CsHJtSUBXZJkifBqM/jGjoDoa6nudo8hoBQn89U8K+Avn
LYs9127JWOO33LRGq/tgdxH/3YX0jBEA1SQFPZS8DU8JBNgPVTliakU3Q66eDMdd
CTHEXVFdmGFsJDrpxR+BGYMZrAuOSCfJG2Gy7zFbObQGocrsBYk6QBMpFzQGM1qJ
+SjE1Dh5w8iONi154/ks7E3JhEs1eIo+qwEdmKQE6LRPCRAcmGY3ue0qVABfNM+h
dpwDsxSwoiF+RSuDjflG6k8Jt3wspJ7gHI3IDjw2UvXcNTbvQu2ChjROH8KopAhu
OG4I7eJPb4wkJw==
-----END CERTIFICATE-----