Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File:                     zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier:          rFHdb9DO8JiJEauEUftjT/n09xLO9vI0uxQZwbCnEig=
Subject key identifier:   8F:B3:B7:65:06:D3:0F:D8:11:D9:66:CF:BC:BB:DF:97:19:F9:96:93
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer:       /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial:       01962E9996894676730413E4B42234F4E0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number:          0AE5
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: TsVjz8SzSctaeaaXPf2/VjWeaV8bmy6A4OX57n+49sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:96:89:46:76:73:04:13:e4:b4:22:34:f4:e0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=8fb3b76506d30fd811d966cfbcbbdf9719f99693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:90:20:49:9b:b6:15:dc:0a:eb:d7:7c:43:
                    19:88:c7:3a:29:ae:b7:59:0e:b7:6f:a9:12:a0:d9:
                    a6:7d:cc:e4:0d:5d:74:92:1e:26:3c:e6:ea:2d:66:
                    f1:7e:65:68:f8:e7:4f:d1:e5:a3:62:75:8d:34:cd:
                    81:ef:61:f4:41:c6:e3:63:07:6c:29:31:b9:74:e6:
                    34:8c:83:03:e4:77:22:07:0d:cf:c8:61:5d:d3:84:
                    37:b6:c1:cc:d3:de:36:1f:6f:35:b0:d2:4f:63:6b:
                    59:ff:fe:ea:59:95:97:e1:7a:64:05:29:89:3f:a5:
                    a7:18:0c:a7:1b:38:70:4a:33:b6:68:3a:10:ba:8a:
                    44:c5:08:ef:b4:53:01:69:7f:e6:55:7e:f3:d6:e8:
                    8c:60:0b:2e:b0:26:7f:81:48:93:83:1e:a5:20:b8:
                    28:68:dc:ee:4a:af:c2:83:2c:12:11:ec:e5:df:44:
                    c3:88:d1:f1:47:01:3e:1c:ff:c7:9e:34:ef:4e:1b:
                    07:b7:d6:51:ed:8d:2a:ff:8d:94:a4:05:93:70:54:
                    81:fd:60:05:21:7f:f6:a7:a1:d1:60:33:b8:3d:17:
                    8c:c3:80:2c:92:7f:14:01:91:92:73:8b:0c:55:20:
                    5e:5e:b2:6c:74:19:5c:44:3d:ad:aa:9f:1b:0a:e6:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B3:B7:65:06:D3:0F:D8:11:D9:66:CF:BC:BB:DF:97:19:F9:96:93
            X509v3 Authority Key Identifier:
                keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:44:07:40:13:90:33:f6:b8:18:6c:a6:e4:6e:c3:ac:06:92:
         b7:60:68:bb:2a:0e:6e:c4:76:20:90:3f:45:71:4c:22:76:f4:
         7b:8f:cc:3d:cc:74:ae:57:65:d0:6c:62:4c:3a:ca:82:c0:1a:
         02:c0:21:3f:2c:96:c7:1b:cf:c1:02:4c:33:3a:5e:d4:10:51:
         9f:3d:1f:97:23:66:c7:fa:c5:3b:a3:b2:6c:f9:ac:82:4f:f3:
         3b:c9:8f:0c:bb:fe:45:94:61:3f:4d:53:ae:df:66:5e:60:96:
         3f:9c:f5:53:81:a6:54:61:3d:35:31:c9:fa:37:c5:73:f4:18:
         71:20:26:d3:76:56:0a:85:14:e1:5d:a1:2b:03:fe:b3:ea:f8:
         f0:87:20:58:7a:75:f3:f1:45:49:f5:28:bf:b0:77:1a:0d:d9:
         f4:99:c8:47:9f:74:cc:5e:96:ff:cd:6b:6f:e5:e6:90:d2:07:
         6d:ef:22:8c:84:92:64:bf:6a:e0:aa:b8:f8:ef:7a:bf:fa:7e:
         3a:f0:2f:c5:a2:b7:70:43:f0:54:a6:16:c7:ed:fb:9c:ae:a1:
         2b:68:61:76:5a:42:7e:fa:00:17:ca:19:f9:ec:e0:bd:dd:ff:
         eb:84:05:9d:4d:11:c8:5c:2a:88:c3:f6:3e:49:7c:b4:59:28:
         a3:94:02:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZaJRnZzBBPktCI09ODCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRkYjM3MzA4NWUyOGMwZDliNzRiZTdiOGU4OTc0MGI5
NWY5ZmEwHhcNMjUwNDEzMTAwMjE5WhcNMjUwNDE0MTAwMjE5WjAzMTEwLwYDVQQD
Eyg4ZmIzYjc2NTA2ZDMwZmQ4MTFkOTY2Y2ZiY2JiZGY5NzE5Zjk5NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EqQIEmbthXcCuvXfEMZiMc6Ka63
WQ63b6kSoNmmfczkDV10kh4mPObqLWbxfmVo+OdP0eWjYnWNNM2B72H0QcbjYwds
KTG5dOY0jIMD5HciBw3PyGFd04Q3tsHM0942H281sNJPY2tZ//7qWZWX4XpkBSmJ
P6WnGAynGzhwSjO2aDoQuopExQjvtFMBaX/mVX7z1uiMYAsusCZ/gUiTgx6lILgo
aNzuSq/CgywSEezl30TDiNHxRwE+HP/HnjTvThsHt9ZR7Y0q/42UpAWTcFSB/WAF
IX/2p6HRYDO4PReMw4Askn8UAZGSc4sMVSBeXrJsdBlcRD2tqp8bCuYeDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+zt2UG0w/YEdlmz7y735cZ+ZaTMB8GA1UdIwQY
MBaAFM8U2zcwheKMDZt0vnuOiXQLlfn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgt
MGExMzFmNjVjOTY4LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgtMGExMzFmNjVjOTY4
LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0QHQBOQ
M/a4GGym5G7DrAaSt2BouyoObsR2IJA/RXFMInb0e4/MPcx0rldl0GxiTDrKgsAa
AsAhPyyWxxvPwQJMMzpe1BBRnz0flyNmx/rFO6OybPmsgk/zO8mPDLv+RZRhP01T
rt9mXmCWP5z1U4GmVGE9NTHJ+jfFc/QYcSAm03ZWCoUU4V2hKwP+s+r48IcgWHp1
8/FFSfUov7B3Gg3Z9JnIR590zF6W/81rb+XmkNIHbe8ijISSZL9q4Kq4+O96v/p+
OvAvxaK3cEPwVKYWx+37nK6hK2hhdlpCfvoAF8oZ+ezgvd3/64QFnU0RyFwqiMP2
Pkl8tFkoo5QCWw==
-----END CERTIFICATE-----