Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          L1mSlMqNfc40AZnQkNDPeZR2I2pDV0v5z5Cson3xQZM=
Subject key identifier:   E4:B7:CA:91:71:8D:37:33:25:7A:73:96:E8:2B:63:D4:07:18:9E:B5
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       01962E61896D1F4602228AE6F4D3650CDFDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          0770
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=)
                          2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=)
                          3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=)
                          4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: 3toOj2ebZS+DIiyh6wTLg+cz+eGDIofEXyJnOSnwyD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:6d:1f:46:02:22:8a:e6:f4:d3:65:0c:df:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=e4b7ca91718d3733257a7396e82b63d407189eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:66:f9:28:57:1e:52:ce:f0:33:bb:e4:f4:
                    dd:aa:d2:5d:84:9e:df:4f:a7:83:97:c2:fb:ef:94:
                    b4:4e:15:1d:26:2c:f1:ce:74:cc:eb:a6:d0:5c:04:
                    38:02:55:c6:41:5c:f5:df:86:62:35:8d:18:eb:ed:
                    32:9c:46:9f:27:88:18:39:1f:a2:6a:36:9d:e4:ca:
                    c4:af:8b:66:c2:80:4f:5d:01:ec:b3:14:af:ac:8a:
                    b0:c1:4b:6b:06:fe:27:b3:a3:7a:ea:d5:16:1f:9e:
                    72:b1:c4:fd:b2:ca:af:15:7e:b8:df:7e:e8:fa:1f:
                    52:54:d1:1b:8b:3c:bf:d4:56:cb:49:79:41:d5:81:
                    56:13:e2:4f:c6:a3:48:3e:17:88:94:04:9e:0a:82:
                    26:03:fd:85:89:58:88:98:e3:ed:17:f2:d5:06:5f:
                    66:14:17:81:d3:1a:93:75:37:a4:9f:2e:02:78:b6:
                    b2:e3:d4:4f:8b:40:d6:1f:51:5b:fd:31:8b:37:8d:
                    d2:b7:c9:11:33:f3:2f:8d:6d:7a:86:c0:72:41:5a:
                    51:ca:d4:95:9e:bc:83:da:0a:56:f7:8c:93:7e:d9:
                    fd:31:09:7b:f1:d3:4b:9b:91:66:bd:76:3a:7b:4f:
                    31:61:3f:d1:d2:c0:2a:ca:d4:6c:7e:22:65:5a:18:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:CA:91:71:8D:37:33:25:7A:73:96:E8:2B:63:D4:07:18:9E:B5
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e8:6f:d0:5f:99:f6:02:45:9e:70:58:ca:65:f1:82:0a:9e:
         be:b0:46:78:83:66:5f:c3:08:60:ec:1f:20:0e:88:88:a1:5b:
         70:c8:97:ac:0f:24:29:6c:ed:4b:6f:51:c0:61:bf:e3:40:fa:
         e1:cf:38:f6:b1:c7:e5:9c:1f:21:b6:35:19:d0:93:20:0a:92:
         05:b5:ad:db:af:9e:8d:a1:62:d8:ca:59:af:e6:93:5d:91:60:
         ad:11:73:f3:13:01:1f:4b:ef:8b:75:85:14:36:69:0f:4c:33:
         94:fe:40:25:03:28:11:05:3a:4e:a3:1d:17:38:0a:b5:29:dc:
         30:de:c0:db:d5:52:13:2f:ee:4a:5a:1d:9f:9c:e4:be:d8:85:
         64:e2:e2:25:78:13:2e:78:d2:6c:cd:e5:3c:02:fb:b3:3a:cd:
         77:36:34:06:d9:b2:0c:ad:b9:d8:f7:24:15:3d:b2:88:95:9c:
         be:82:0d:16:dc:b9:65:ad:06:4d:3c:51:87:61:95:54:42:c7:
         b1:a4:12:0b:6a:87:1a:3f:8d:e8:68:80:c7:10:d3:8a:de:de:
         5a:a1:73:8c:d2:e5:ca:35:92:b5:38:b4:5a:5e:89:26:1f:56:
         96:37:61:70:93:e0:0e:89:8d:c8:ff:2c:ee:f2:cb:f2:5b:42:
         a1:97:a9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYltH0YCIorm9NNlDN/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzAyZDQyMzRmNGJjNGU4NzU1NWU0MWMwMzc3OWQ1NjIw
YTUxNTUwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
EyhlNGI3Y2E5MTcxOGQzNzMzMjU3YTczOTZlODJiNjNkNDA3MTg5ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Fm+ShXHlLO8DO75PTdqtJdhJ7f
T6eDl8L775S0ThUdJizxznTM66bQXAQ4AlXGQVz134ZiNY0Y6+0ynEafJ4gYOR+i
ajad5MrEr4tmwoBPXQHssxSvrIqwwUtrBv4ns6N66tUWH55yscT9ssqvFX64337o
+h9SVNEbizy/1FbLSXlB1YFWE+JPxqNIPheIlASeCoImA/2FiViImOPtF/LVBl9m
FBeB0xqTdTekny4CeLay49RPi0DWH1Fb/TGLN43St8kRM/MvjW16hsByQVpRytSV
nryD2gpW94yTftn9MQl78dNLm5FmvXY6e08xYT/R0sAqytRsfiJlWhg/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS3ypFxjTczJXpzlugrY9QHGJ61MB8GA1UdIwQY
MBaAFMnALUI09LxOh1VeQcA3edViClFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUt
MWE2Y2U1ZmFmOTE2LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUtMWE2Y2U1ZmFmOTE2
LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuhv0F+Z
9gJFnnBYymXxggqevrBGeINmX8MIYOwfIA6IiKFbcMiXrA8kKWztS29RwGG/40D6
4c849rHH5ZwfIbY1GdCTIAqSBbWt26+ejaFi2MpZr+aTXZFgrRFz8xMBH0vvi3WF
FDZpD0wzlP5AJQMoEQU6TqMdFzgKtSncMN7A29VSEy/uSlodn5zkvtiFZOLiJXgT
LnjSbM3lPAL7szrNdzY0BtmyDK252PckFT2yiJWcvoINFty5Za0GTTxRh2GVVELH
saQSC2qHGj+N6GiAxxDTit7eWqFzjNLlyjWStTi0Wl6JJh9WljdhcJPgDomNyP8s
7vLL8ltCoZepyw==
-----END CERTIFICATE-----