Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File:                     RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier:          QWdp8wwNKHHbz1Kb6TcmKV4MBR5FwOZ3tIUX+9/rFB4=
Subject key identifier:   D2:47:2F:5E:71:28:DB:FA:8C:C5:DD:7A:F2:68:34:26:E3:00:9B:9B
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer:       /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial:       01962FABA18A08612992B404D84B4EF6D9D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number:          0713
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: DGAg1H7FkC43Mq6mx+fODt65pZMEGQTyQSpKnGSSNvk=)
                          2: S3dIMaIh62_y7HmBxhlxOM_ScHc.roa (hash: wYfLcBDYpc1piz/XiUHEld94m4pY4RAv7rF1GCt4/I0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a1:8a:08:61:29:92:b4:04:d8:4b:4e:f6:d9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=d2472f5e7128dbfa8cc5dd7af2683426e3009b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:0f:72:87:33:11:02:12:75:eb:a3:ae:54:
                    a8:33:87:08:52:c3:fc:4e:a6:b2:f3:22:21:0d:33:
                    1c:4d:85:73:7a:db:5d:f0:ef:08:c0:fd:ab:48:44:
                    19:72:0c:af:2d:39:5b:a2:aa:25:e9:96:8f:da:92:
                    b7:3e:49:31:68:5e:e1:45:3d:08:7a:cf:12:7e:ee:
                    4a:68:2b:cf:a2:f8:73:24:74:83:16:3b:d9:44:c0:
                    0c:03:3c:b7:79:af:8d:e5:11:32:a5:7b:4b:cc:c3:
                    e5:6b:09:ac:09:eb:46:95:88:24:0d:7b:a1:f4:b0:
                    2d:98:1b:72:5c:13:7c:de:fc:b8:5e:b8:83:2e:d0:
                    09:18:82:93:e7:f2:d6:1f:7e:8d:11:96:c0:29:b8:
                    80:83:db:fb:93:5c:56:d2:02:da:48:80:17:70:21:
                    42:2c:2a:a9:7e:66:b7:5a:03:7e:e5:ad:21:bf:9e:
                    28:e6:29:4d:7d:a5:7f:82:58:0e:16:56:5e:d9:72:
                    9c:99:a4:86:79:cd:39:01:ce:94:0c:ca:a2:01:55:
                    7d:f0:37:91:0b:8d:f7:45:e7:d3:e8:0d:b7:d8:6e:
                    7d:12:6a:f0:a9:ab:75:ed:76:87:11:60:d1:b3:ce:
                    48:24:95:95:84:2d:fc:29:e6:eb:7f:e9:0b:6e:7b:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:47:2F:5E:71:28:DB:FA:8C:C5:DD:7A:F2:68:34:26:E3:00:9B:9B
            X509v3 Authority Key Identifier:
                keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:43:5a:a8:28:5f:52:8e:0e:47:db:91:de:fd:d0:cc:68:48:
         f7:43:af:f0:59:1a:42:0d:c4:ea:5b:56:db:cc:e7:49:77:22:
         18:03:3d:f1:67:29:9c:e6:70:26:15:cb:83:e9:ee:11:6f:22:
         75:14:be:57:aa:2a:4c:cf:ca:ad:02:a8:8a:dd:74:84:9f:f5:
         6b:22:ef:ca:64:c0:c4:09:e2:ab:eb:34:4e:51:a4:f9:06:9d:
         84:41:d6:31:68:a1:c4:c6:9e:4d:d2:d4:7f:18:c7:96:99:12:
         d6:71:f3:b6:f9:87:d1:f8:a8:9f:e0:95:c9:35:99:61:f0:1c:
         0d:52:2f:c3:ec:4f:91:74:8e:22:37:94:4b:43:72:dd:f1:e6:
         f3:5f:d6:b9:56:db:22:2a:10:13:d5:2c:8a:57:f9:a4:8d:4a:
         76:64:8b:53:8d:a1:a2:ee:dd:d3:cb:01:2a:21:34:ba:33:21:
         0a:f8:10:b0:71:9b:3a:86:e5:6a:49:b0:22:d4:5d:ad:f0:51:
         2d:26:ed:4f:d5:0f:f6:7c:b9:27:36:ea:2c:71:61:d2:a8:01:
         13:30:ef:03:61:ef:08:dd:58:46:dc:04:7a:6d:3f:2c:73:f6:
         d7:fd:9b:6a:62:7c:58:d4:1a:79:5b:37:63:91:d8:91:a1:fc:
         0e:75:8b:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq6GKCGEpkrQE2EtO9tnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MmNiMjg4MjA5OTAwZDFhZjFhOTk4YmIwMzllYzc1N2U0
OTNkZDUwHhcNMjUwNDEzMTUwMTM5WhcNMjUwNDE0MTUwMTM5WjAzMTEwLwYDVQQD
EyhkMjQ3MmY1ZTcxMjhkYmZhOGNjNWRkN2FmMjY4MzQyNmUzMDA5YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeQPcoczEQISdeujrlSoM4cIUsP8
Tqay8yIhDTMcTYVzettd8O8IwP2rSEQZcgyvLTlboqol6ZaP2pK3PkkxaF7hRT0I
es8Sfu5KaCvPovhzJHSDFjvZRMAMAzy3ea+N5REypXtLzMPlawmsCetGlYgkDXuh
9LAtmBtyXBN83vy4XriDLtAJGIKT5/LWH36NEZbAKbiAg9v7k1xW0gLaSIAXcCFC
LCqpfma3WgN+5a0hv54o5ilNfaV/glgOFlZe2XKcmaSGec05Ac6UDMqiAVV98DeR
C433RefT6A232G59Emrwqat17XaHEWDRs85IJJWVhC38Kebrf+kLbnte7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJHL15xKNv6jMXdevJoNCbjAJubMB8GA1UdIwQY
MBaAFEcssoggmQDRrxqZi7A57HV+ST3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYt
YWE5MDJkYmFlOTI4LzEvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYtYWE5MDJkYmFlOTI4
LzEvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARENaqChf
Uo4OR9uR3v3QzGhI90Ov8FkaQg3E6ltW28znSXciGAM98WcpnOZwJhXLg+nuEW8i
dRS+V6oqTM/KrQKoit10hJ/1ayLvymTAxAniq+s0TlGk+QadhEHWMWihxMaeTdLU
fxjHlpkS1nHztvmH0fion+CVyTWZYfAcDVIvw+xPkXSOIjeUS0Ny3fHm81/WuVbb
IioQE9Usilf5pI1KdmSLU42hou7d08sBKiE0ujMhCvgQsHGbOoblakmwItRdrfBR
LSbtT9UP9ny5JzbqLHFh0qgBEzDvA2HvCN1YRtwEem0/LHP21/2bamJ8WNQaeVs3
Y5HYkaH8DnWL0A==
-----END CERTIFICATE-----