Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          fV07oHfFDTNrxojN1DmyeO6cRRpIJjY5G3xLYYiSFps=
Subject key identifier:   64:1E:D0:FB:62:6A:05:80:87:1F:61:EA:A0:FE:D5:31:A5:A9:1C:F0
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       01962FAB2269A691D43FD0ADBB2B5200521A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0AA4
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
                          2: qQtVwx26Q11uVtNfnJzbmJUlIFc.roa (hash: Us6KZhFay/pkNMEXF/JAjIY/J6B0ztmxrmyXEzSbCqU=)
                          3: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: /JHlAHp53e1V6pCbT2xGM1aPDIbiChMC0PJVw32GbbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:22:69:a6:91:d4:3f:d0:ad:bb:2b:52:00:52:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=641ed0fb626a0580871f61eaa0fed531a5a91cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:2d:02:11:d4:d7:38:82:28:05:8c:35:f3:
                    1f:cb:de:b2:a9:6b:12:55:32:e7:6b:3a:04:c9:84:
                    b8:ed:7e:ca:d5:1a:8f:fb:6c:3c:91:1a:cc:c4:a4:
                    2f:9f:1e:ca:6e:30:59:86:48:8d:f1:53:b1:c8:9f:
                    f6:89:0a:bb:c3:57:6e:90:24:a3:4e:65:d0:75:05:
                    50:f4:38:05:ec:c8:12:6b:24:f4:d9:d6:8a:b2:46:
                    3b:28:65:0c:90:60:1c:e6:19:da:c6:e7:7a:4b:c3:
                    12:ff:a7:5d:a9:be:8d:95:00:05:63:24:4d:8a:bd:
                    80:a6:e7:19:63:ec:e0:46:c6:94:86:4d:49:7d:88:
                    58:a1:0e:7d:84:67:8f:5e:ff:a9:bd:79:28:06:38:
                    f5:17:8c:83:9a:8c:9f:09:db:5b:cb:01:93:00:59:
                    bc:08:ff:cf:0b:9a:93:97:ba:fa:31:00:af:b8:f8:
                    29:75:d9:fc:3c:2a:41:bb:ea:20:78:ad:2d:70:fe:
                    85:53:d1:ea:5e:8e:0a:03:0b:7a:28:66:b2:f9:ba:
                    a5:69:79:3a:b0:c1:3e:5c:7f:52:d0:28:04:6c:13:
                    37:ab:51:fd:36:c5:3c:89:c1:f8:0d:ef:6b:45:df:
                    46:4b:21:d0:1e:ae:38:bc:00:03:4e:8f:88:99:15:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1E:D0:FB:62:6A:05:80:87:1F:61:EA:A0:FE:D5:31:A5:A9:1C:F0
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:df:8b:96:c1:43:80:a3:ac:33:94:c4:3f:a0:f8:4f:8e:b4:
         ec:db:db:00:63:29:2a:47:63:df:b1:91:57:a6:fe:a5:9c:3d:
         2f:10:b3:34:70:b0:d4:11:10:9f:e9:1d:3f:42:9c:e2:2e:c6:
         29:05:c9:2a:7f:a0:a9:f5:c9:ab:c9:4a:9c:b0:8f:fc:00:a3:
         7a:60:ac:34:0f:2b:41:39:a3:48:79:6d:d7:ac:f7:d5:18:eb:
         c0:a6:56:70:87:dd:06:c0:7e:b4:ef:22:07:7d:cf:66:50:d9:
         d5:4e:f4:9b:11:f5:95:db:d1:3d:1a:a3:96:00:c6:ff:5e:b4:
         3c:e0:d4:16:32:84:3d:65:e6:07:94:d2:c5:d2:b6:05:29:b4:
         5a:a0:26:17:1c:1e:6e:6a:47:b6:59:7c:24:9b:17:83:7d:ef:
         94:c6:65:2b:86:a4:be:de:18:7d:e7:1b:88:2a:95:5e:58:2b:
         f0:a3:f7:ca:91:fa:10:68:4a:49:af:66:80:79:f0:01:0b:61:
         b6:62:04:a7:ac:59:98:59:d9:6c:75:26:79:ce:53:04:d0:b9:
         10:ec:fb:76:a9:89:3c:d7:0f:30:62:a5:68:ba:67:ea:b4:cf:
         17:e5:64:e1:b5:f8:60:97:e1:c2:26:cc:eb:c5:56:7d:86:77:
         67:cf:37:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyJpppHUP9CtuytSAFIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzFkY2Y0YzAyMzQ2N2RiM2JmMmVlZjNkZDE1YjJlZmVl
YjJiZDcwHhcNMjUwNDEzMTUwMTA2WhcNMjUwNDE0MTUwMTA2WjAzMTEwLwYDVQQD
Eyg2NDFlZDBmYjYyNmEwNTgwODcxZjYxZWFhMGZlZDUzMWE1YTkxY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvugtAhHU1ziCKAWMNfMfy96yqWsS
VTLnazoEyYS47X7K1RqP+2w8kRrMxKQvnx7KbjBZhkiN8VOxyJ/2iQq7w1dukCSj
TmXQdQVQ9DgF7MgSayT02daKskY7KGUMkGAc5hnaxud6S8MS/6ddqb6NlQAFYyRN
ir2ApucZY+zgRsaUhk1JfYhYoQ59hGePXv+pvXkoBjj1F4yDmoyfCdtbywGTAFm8
CP/PC5qTl7r6MQCvuPgpddn8PCpBu+ogeK0tcP6FU9HqXo4KAwt6KGay+bqlaXk6
sME+XH9S0CgEbBM3q1H9NsU8icH4De9rRd9GSyHQHq44vAADTo+ImRVnmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQe0PtiagWAhx9h6qD+1TGlqRzwMB8GA1UdIwQY
MBaAFMjB3PTAI0Z9s78u7z3RWy7+6yvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMt
NDRkOTJkZTQzOGM5LzEveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMtNDRkOTJkZTQzOGM5
LzEveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht+LlsFD
gKOsM5TEP6D4T4607NvbAGMpKkdj37GRV6b+pZw9LxCzNHCw1BEQn+kdP0Kc4i7G
KQXJKn+gqfXJq8lKnLCP/ACjemCsNA8rQTmjSHlt16z31RjrwKZWcIfdBsB+tO8i
B33PZlDZ1U70mxH1ldvRPRqjlgDG/160PODUFjKEPWXmB5TSxdK2BSm0WqAmFxwe
bmpHtll8JJsXg33vlMZlK4akvt4YfecbiCqVXlgr8KP3ypH6EGhKSa9mgHnwAQth
tmIEp6xZmFnZbHUmec5TBNC5EOz7dqmJPNcPMGKlaLpn6rTPF+Vk4bX4YJfhwibM
68VWfYZ3Z883Eg==
-----END CERTIFICATE-----