Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File:                     Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier:          wV5ui3y0VvBgguH0GEwY+8/8i8c4IVLA15i2eEH+XlE=
Subject key identifier:   F7:27:51:B6:E4:56:61:4B:7C:33:5C:AF:8C:D3:D9:51:78:C6:45:F5
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer:       /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial:       01962DF3B5898EBE813E4391710E667752AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number:          08A6
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
                          2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: K8trtLa8uwqGREhia6g/9vI4+mpT3rj4P0d0DwLHoUI=)
                          3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b5:89:8e:be:81:3e:43:91:71:0e:66:77:52:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=f72751b6e456614b7c335caf8cd3d95178c645f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:00:0b:96:12:89:d5:dd:80:49:1c:16:01:
                    67:3b:c4:01:4c:48:de:a6:27:71:36:dd:23:0d:f6:
                    64:03:dc:89:1c:92:bd:c3:d1:58:61:f0:44:ef:a1:
                    c8:41:ff:aa:77:aa:77:46:ad:ac:16:46:9a:5d:5c:
                    2e:d3:39:1e:72:de:74:cf:4a:61:12:c7:84:e6:91:
                    3a:4b:cf:95:48:8d:fb:ca:8b:e7:af:4f:46:d9:3f:
                    9d:d9:70:00:bd:ed:48:47:f6:56:69:9c:c5:54:fd:
                    ea:8b:e5:a1:68:25:d3:f1:16:29:1d:7e:13:2f:db:
                    7e:d3:49:dc:42:ec:12:81:26:78:24:0b:2b:a2:7d:
                    c4:8f:89:f7:13:98:2e:01:5c:94:9d:e6:09:be:4b:
                    42:e6:2f:55:b6:02:b4:c5:56:be:7b:c1:f1:1b:7d:
                    24:7d:17:85:f6:c7:df:e8:8e:89:ac:5f:b7:02:8b:
                    97:65:6f:f3:ba:f0:62:91:b6:a9:bf:b5:a5:05:97:
                    e4:6e:60:1d:d1:6d:e7:d5:f7:87:e8:df:ff:22:9e:
                    77:cd:de:93:ef:2c:ea:21:37:61:de:d7:b5:eb:b6:
                    b1:de:96:a3:e6:53:94:b8:4e:b1:3d:2d:4b:57:d7:
                    ee:9d:19:d2:81:e1:80:f7:a7:6b:3d:95:3d:dc:d0:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:51:B6:E4:56:61:4B:7C:33:5C:AF:8C:D3:D9:51:78:C6:45:F5
            X509v3 Authority Key Identifier:
                keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:ab:8e:4b:56:2c:7a:5b:6e:d4:87:ca:0e:b6:a2:42:da:
         28:bf:9f:5e:e8:3c:8e:bb:f0:0b:16:f1:40:a6:8f:1d:f3:06:
         8e:25:56:df:dd:44:78:a5:00:cf:c6:0a:cc:48:dc:58:91:97:
         d6:7c:3c:35:08:13:79:a2:dd:e7:2d:17:f0:b6:a0:cb:9d:86:
         6e:73:05:65:44:af:16:a1:d1:1c:a3:f4:9e:87:6e:e6:13:77:
         40:65:14:a7:c3:2d:b8:67:ec:18:82:ad:5c:97:c5:39:2e:dd:
         a7:61:f4:51:93:79:c2:d5:d1:81:e9:bc:60:75:e8:4d:06:20:
         1c:14:85:16:ae:4c:cf:4b:8c:90:f8:ba:c5:09:02:e1:b6:3e:
         b5:b6:e6:db:81:bd:95:1f:dc:eb:69:59:b9:89:a8:ce:71:3b:
         5a:06:b7:40:af:4f:1e:15:18:cb:a2:76:80:a0:f2:06:2a:38:
         0f:60:df:70:3a:55:ca:af:2b:93:0d:b5:d2:f4:88:d1:dd:18:
         a0:a9:8e:cf:51:59:5b:cb:e5:a3:79:ae:36:80:6e:28:b5:b1:
         58:09:79:19:f8:ff:61:a5:b2:6e:ff:4e:a4:2b:ab:13:10:cc:
         3c:16:72:1e:68:e7:5f:5b:c8:93:12:24:5e:7a:ba:f2:85:7f:
         7a:46:0d:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87WJjr6BPkORcQ5md1KvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy
ZTUxNTcwHhcNMjUwNDEzMDcwMTA4WhcNMjUwNDE0MDcwMTA4WjAzMTEwLwYDVQQD
EyhmNzI3NTFiNmU0NTY2MTRiN2MzMzVjYWY4Y2QzZDk1MTc4YzY0NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQAAC5YSidXdgEkcFgFnO8QBTEje
pidxNt0jDfZkA9yJHJK9w9FYYfBE76HIQf+qd6p3Rq2sFkaaXVwu0zkect50z0ph
EseE5pE6S8+VSI37yovnr09G2T+d2XAAve1IR/ZWaZzFVP3qi+WhaCXT8RYpHX4T
L9t+00ncQuwSgSZ4JAsron3Ej4n3E5guAVyUneYJvktC5i9VtgK0xVa+e8HxG30k
fReF9sff6I6JrF+3AouXZW/zuvBikbapv7WlBZfkbmAd0W3n1feH6N//Ip53zd6T
7yzqITdh3te167ax3paj5lOUuE6xPS1LV9funRnSgeGA96drPZU93NAU+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcnUbbkVmFLfDNcr4zT2VF4xkX1MB8GA1UdIwQY
MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt
ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh
LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzirjktW
LHpbbtSHyg62okLaKL+fXug8jrvwCxbxQKaPHfMGjiVW391EeKUAz8YKzEjcWJGX
1nw8NQgTeaLd5y0X8Lagy52GbnMFZUSvFqHRHKP0nodu5hN3QGUUp8MtuGfsGIKt
XJfFOS7dp2H0UZN5wtXRgem8YHXoTQYgHBSFFq5Mz0uMkPi6xQkC4bY+tbbm24G9
lR/c62lZuYmoznE7Wga3QK9PHhUYy6J2gKDyBio4D2DfcDpVyq8rkw210vSI0d0Y
oKmOz1FZW8vlo3muNoBuKLWxWAl5Gfj/YaWybv9OpCurExDMPBZyHmjnX1vIkxIk
Xnq68oV/ekYNxQ==
-----END CERTIFICATE-----