Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File:                     KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier:          xpu1EAfN4FR2HW9KA7+uVCmiehMkg89kHCoP0KpzQjM=
Subject key identifier:   DF:E0:73:78:16:C2:58:67:38:ED:BF:E5:70:C3:C1:5E:C4:52:D4:CA
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer:       /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial:       0198EAF870F541F12EE6B621F5A28A04A22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number:          0A0F
Signing time:             Wed 27 Aug 2025 10:00:07 +0000
Manifest this update:     Wed 27 Aug 2025 10:00:07 +0000
Manifest next update:     Thu 28 Aug 2025 10:00:07 +0000
Files and hashes:         1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: V/N1tS9W8t7j8/nnqCBwgPhlgMjMzRVVVeGXEykFUSU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ea:f8:70:f5:41:f1:2e:e6:b6:21:f5:a2:8a:04:a2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
        Validity
            Not Before: Aug 27 10:00:07 2025 GMT
            Not After : Aug 28 10:00:07 2025 GMT
        Subject: CN=dfe0737816c2586738edbfe570c3c15ec452d4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:2c:d0:bd:55:c1:2b:aa:a4:8c:84:40:24:
                    c3:e3:8e:e7:58:0b:42:4d:d3:0e:8c:1c:f0:36:1c:
                    9f:8c:da:b6:a2:14:a1:28:b1:97:2d:70:08:96:c3:
                    29:d4:4a:7c:ef:ff:06:a9:47:98:3f:e7:0d:af:3b:
                    f6:d0:e7:70:bf:d6:3e:e7:ff:87:56:47:a9:43:80:
                    59:66:53:a2:d5:06:3f:98:1c:d9:5b:b2:6d:96:ea:
                    e9:88:4a:dc:59:08:73:5b:29:00:e1:04:3a:41:09:
                    c3:97:6a:fc:ef:88:f5:ae:09:0d:77:42:d4:a7:b4:
                    e4:42:5e:03:bf:49:76:6f:6d:9e:bb:04:96:4d:8c:
                    8e:a7:79:70:31:9a:8d:7d:9a:e4:d0:9c:dc:d5:b6:
                    27:5c:c1:ba:79:87:d8:8e:64:36:48:70:50:60:01:
                    bf:64:1d:54:fd:9a:15:90:04:89:44:66:69:b4:3f:
                    9a:57:24:0f:3f:c9:96:57:f9:2f:f8:de:cd:01:cd:
                    f1:43:c6:fe:f4:71:60:fe:ca:9f:51:f3:9d:77:c4:
                    96:d7:6b:ba:f3:6f:13:d9:ff:86:53:0a:6d:95:29:
                    43:b5:22:d5:cf:58:de:53:6e:6e:67:98:44:26:2d:
                    7b:3b:91:51:f1:a0:4d:2d:5c:3a:2e:87:ca:ba:0f:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E0:73:78:16:C2:58:67:38:ED:BF:E5:70:C3:C1:5E:C4:52:D4:CA
            X509v3 Authority Key Identifier:
                keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:b3:00:e7:52:bb:1e:c1:fb:75:f2:59:ed:b4:53:1f:8b:
         c1:32:98:f6:94:9a:45:f8:e5:09:b2:1e:b5:ff:d7:fc:67:3b:
         b9:9b:36:e8:35:d8:57:00:b4:8e:54:98:5d:89:18:c4:94:eb:
         72:34:1e:44:e5:60:16:47:dc:f1:1e:16:c1:77:6f:69:7b:24:
         5a:af:d8:1e:5a:1e:3c:52:e8:df:6a:64:90:b8:70:3b:45:e8:
         91:e3:45:67:ef:73:c9:c1:b0:82:36:e4:b5:d2:18:b8:1e:c8:
         e8:56:6d:d0:23:fc:de:f8:2c:f2:24:d1:35:91:d2:2d:06:e6:
         d6:2f:fb:36:03:3a:2b:99:5d:d1:47:e5:c4:a9:81:f8:d8:7b:
         e7:63:69:b2:b2:43:50:f1:b3:d8:4b:a8:12:7c:d9:cc:69:b7:
         9e:63:9d:f3:4e:eb:69:d1:b7:46:2e:28:9b:b5:05:57:94:79:
         15:4d:18:25:15:44:f2:90:f4:9c:08:da:ba:d5:18:c5:d0:28:
         6f:85:cb:38:aa:e4:ad:80:7f:73:62:f7:d3:6f:75:4f:0b:b3:
         71:cb:5c:fb:6b:11:ad:96:b8:7d:8c:60:d6:94:8a:12:3d:fb:
         66:bf:08:f3:00:a1:8a:5d:f4:c0:de:64:0e:f1:b8:7d:96:c1:
         96:eb:3e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjq+HD1QfEu5rYh9aKKBKIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMzJkMjVjN2RlMTllOTBlZTc0MDk4MDRmOGRjYjMxYzIw
YWZmMzcwHhcNMjUwODI3MTAwMDA3WhcNMjUwODI4MTAwMDA3WjAzMTEwLwYDVQQD
EyhkZmUwNzM3ODE2YzI1ODY3MzhlZGJmZTU3MGMzYzE1ZWM0NTJkNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Es0L1VwSuqpIyEQCTD447nWAtC
TdMOjBzwNhyfjNq2ohShKLGXLXAIlsMp1Ep87/8GqUeYP+cNrzv20Odwv9Y+5/+H
VkepQ4BZZlOi1QY/mBzZW7JtlurpiErcWQhzWykA4QQ6QQnDl2r874j1rgkNd0LU
p7TkQl4Dv0l2b22euwSWTYyOp3lwMZqNfZrk0Jzc1bYnXMG6eYfYjmQ2SHBQYAG/
ZB1U/ZoVkASJRGZptD+aVyQPP8mWV/kv+N7NAc3xQ8b+9HFg/sqfUfOdd8SW12u6
828T2f+GUwptlSlDtSLVz1jeU25uZ5hEJi17O5FR8aBNLVw6LofKug94CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/gc3gWwlhnOO2/5XDDwV7EUtTKMB8GA1UdIwQY
MBaAFCsy0lx94Z6Q7nQJgE+NyzHCCv83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3pMU1hIM2hucER1ZEFtQVQ0M0xNY0lLX3pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zMzM0MTAtYjk4OC00MGI3LWIzMzYt
NGU1M2ZlYzliNmJkLzEvS3pMU1hIM2hucER1ZEFtQVQ0M0xNY0lLX3pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zMzM0MTAtYjk4OC00MGI3LWIzMzYtNGU1M2ZlYzliNmJk
LzEvS3pMU1hIM2hucER1ZEFtQVQ0M0xNY0lLX3pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt+zAOdS
ux7B+3XyWe20Ux+LwTKY9pSaRfjlCbIetf/X/Gc7uZs26DXYVwC0jlSYXYkYxJTr
cjQeROVgFkfc8R4WwXdvaXskWq/YHloePFLo32pkkLhwO0XokeNFZ+9zycGwgjbk
tdIYuB7I6FZt0CP83vgs8iTRNZHSLQbm1i/7NgM6K5ld0UflxKmB+Nh752NpsrJD
UPGz2EuoEnzZzGm3nmOd807radG3Ri4om7UFV5R5FU0YJRVE8pD0nAjautUYxdAo
b4XLOKrkrYB/c2L30291Twuzcctc+2sRrZa4fYxg1pSKEj37Zr8I8wChil30wN5k
DvG4fZbBlus+RQ==
-----END CERTIFICATE-----