Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft
File:                     Zn55k2TUFPZt82MTfHmr9hI5600.mft (raw, json)
Hash identifier:          t0lEwbhC+xVu5sjp0tvbJxObyGCz56exSfuk20WH1LY=
Subject key identifier:   49:86:DE:65:71:C2:91:EC:AA:7F:3B:2E:44:B5:5B:6E:A1:02:14:D9
Authority key identifier: 66:7E:79:93:64:D4:14:F6:6D:F3:63:13:7C:79:AB:F6:12:39:EB:4D
Certificate issuer:       /CN=667e799364d414f66df363137c79abf61239eb4d
Certificate serial:       019292D7C6900F709BEC7EEA6E5815EBE018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn55k2TUFPZt82MTfHmr9hI5600.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft
Manifest number:          130A
Signing time:             Wed 16 Oct 2024 01:01:07 +0000
Manifest this update:     Wed 16 Oct 2024 01:01:07 +0000
Manifest next update:     Thu 17 Oct 2024 01:01:07 +0000
Files and hashes:         1: 1T3yVq56VqUsCRNgAc26gHjStFE.roa (hash: PVzW9sgsFXJJvdI8hRhBdC+MSpLl+w3WD1Q650hjph8=)
                          2: Zn55k2TUFPZt82MTfHmr9hI5600.crl (hash: qxJKoM0g97gjJEFmwoHXQXyUoVrpURGEBg3dTkG32Fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:92:d7:c6:90:0f:70:9b:ec:7e:ea:6e:58:15:eb:e0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667e799364d414f66df363137c79abf61239eb4d
        Validity
            Not Before: Oct 16 01:01:07 2024 GMT
            Not After : Oct 17 01:01:07 2024 GMT
        Subject: CN=4986de6571c291ecaa7f3b2e44b55b6ea10214d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:16:11:5d:a1:85:00:1e:b9:e8:76:34:50:
                    62:40:4a:ff:e4:aa:83:f4:7a:3a:4d:ef:65:66:cb:
                    68:77:eb:36:fe:77:64:97:03:eb:f7:e8:e4:24:f3:
                    ee:7a:0e:b4:77:e7:fe:1d:e8:01:d8:42:47:b5:c3:
                    95:bc:19:13:49:79:e9:e7:22:de:5b:76:cd:81:2b:
                    c2:4c:47:78:8e:87:b5:a3:6c:f8:a5:f6:65:34:20:
                    33:b4:67:f3:0f:ae:38:30:40:73:7a:82:33:3f:55:
                    06:cb:35:6a:ee:cb:10:c6:0c:8e:7e:12:a1:67:f0:
                    b3:ed:84:d5:2b:ac:60:58:24:bc:01:71:9b:9e:e5:
                    bf:06:1b:cc:02:b3:bc:ad:c6:f0:03:14:d3:93:6c:
                    1a:91:31:cb:f9:72:da:44:df:ed:31:f0:17:f2:ed:
                    e2:7d:92:86:2b:17:56:b2:7f:bb:46:b9:8e:91:4f:
                    f0:c4:0b:92:f5:63:4f:ce:72:43:1e:2f:f5:21:86:
                    32:d7:ef:80:70:93:91:38:24:3e:2f:b5:ad:51:a5:
                    02:36:e7:4a:59:6a:f7:c1:f7:73:21:e5:bf:17:89:
                    12:d8:5d:ec:36:d1:6f:6f:d2:dc:5a:c3:a3:71:31:
                    a9:d7:44:ae:37:3f:29:cc:ec:88:a0:22:0b:c8:62:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:DE:65:71:C2:91:EC:AA:7F:3B:2E:44:B5:5B:6E:A1:02:14:D9
            X509v3 Authority Key Identifier:
                keyid:66:7E:79:93:64:D4:14:F6:6D:F3:63:13:7C:79:AB:F6:12:39:EB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn55k2TUFPZt82MTfHmr9hI5600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:cd:48:4a:21:41:f9:bc:71:25:8e:bd:cc:61:8b:5d:96:
         be:5d:a9:fe:8f:2d:e0:80:04:b2:be:72:02:8c:75:b6:fd:2a:
         f8:6e:7d:11:83:17:73:39:ef:a6:b6:63:98:a7:db:c4:07:09:
         cb:54:96:54:bb:c6:7a:01:bf:22:6a:ea:33:52:b2:40:44:e9:
         72:17:ec:0d:03:0f:85:87:03:d2:d8:99:01:1a:bf:b3:95:b2:
         e0:aa:52:d8:03:ec:10:b9:b7:9c:70:d7:a0:12:08:7c:be:0f:
         19:b7:20:08:ef:d2:16:eb:b9:33:c1:b8:2f:f6:fb:45:c1:6d:
         77:ff:42:11:21:6b:5b:6f:85:6c:e1:55:18:f8:ec:62:62:48:
         1a:b0:39:f9:fe:74:d0:d7:70:c3:37:11:fe:86:f9:a3:ee:08:
         57:2f:99:61:70:5d:1c:0d:3f:1e:29:fc:62:ac:71:68:92:da:
         64:65:35:b9:20:9f:38:f7:b2:0e:b1:95:96:97:8e:e1:d5:38:
         2c:b8:34:3b:cd:ec:f3:8f:57:5a:a4:4b:f6:43:dd:fe:31:df:
         80:f0:a0:e5:c3:da:bb:60:76:cd:03:4c:f6:02:84:4a:3d:85:
         9c:3c:7b:10:de:82:07:5a:94:c7:8e:00:ab:1a:65:77:7b:4d:
         76:1b:b8:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKS18aQD3Cb7H7qblgV6+AYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2U3OTkzNjRkNDE0ZjY2ZGYzNjMxMzdjNzlhYmY2MTIz
OWViNGQwHhcNMjQxMDE2MDEwMTA3WhcNMjQxMDE3MDEwMTA3WjAzMTEwLwYDVQQD
Eyg0OTg2ZGU2NTcxYzI5MWVjYWE3ZjNiMmU0NGI1NWI2ZWExMDIxNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywEWEV2hhQAeueh2NFBiQEr/5KqD
9Ho6Te9lZstod+s2/ndklwPr9+jkJPPueg60d+f+HegB2EJHtcOVvBkTSXnp5yLe
W3bNgSvCTEd4joe1o2z4pfZlNCAztGfzD644MEBzeoIzP1UGyzVq7ssQxgyOfhKh
Z/Cz7YTVK6xgWCS8AXGbnuW/BhvMArO8rcbwAxTTk2wakTHL+XLaRN/tMfAX8u3i
fZKGKxdWsn+7RrmOkU/wxAuS9WNPznJDHi/1IYYy1++AcJOROCQ+L7WtUaUCNudK
WWr3wfdzIeW/F4kS2F3sNtFvb9LcWsOjcTGp10SuNz8pzOyIoCILyGKKmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmG3mVxwpHsqn87LkS1W26hAhTZMB8GA1UdIwQY
MBaAFGZ+eZNk1BT2bfNjE3x5q/YSOetNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm41NWsyVFVGUFp0ODJNVGZIbXI5aEk1NjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNzYzZmQtMGIwNS00MjhiLWI3MjMt
MjBjMjM4NjhiOTFmLzEvWm41NWsyVFVGUFp0ODJNVGZIbXI5aEk1NjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNzYzZmQtMGIwNS00MjhiLWI3MjMtMjBjMjM4NjhiOTFm
LzEvWm41NWsyVFVGUFp0ODJNVGZIbXI5aEk1NjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5jNSEoh
Qfm8cSWOvcxhi12Wvl2p/o8t4IAEsr5yAox1tv0q+G59EYMXcznvprZjmKfbxAcJ
y1SWVLvGegG/ImrqM1KyQETpchfsDQMPhYcD0tiZARq/s5Wy4KpS2APsELm3nHDX
oBIIfL4PGbcgCO/SFuu5M8G4L/b7RcFtd/9CESFrW2+FbOFVGPjsYmJIGrA5+f50
0NdwwzcR/ob5o+4IVy+ZYXBdHA0/Hin8YqxxaJLaZGU1uSCfOPeyDrGVlpeO4dU4
LLg0O83s849XWqRL9kPd/jHfgPCg5cPau2B2zQNM9gKESj2FnDx7EN6CB1qUx44A
qxpld3tNdhu4SQ==
-----END CERTIFICATE-----