Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File:                     YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier:          3yYnrAG1Bv9NbPb2s/FsnVjM0LKsz4YvMo0DPSfJe+8=
Subject key identifier:   D5:89:3A:97:E2:9E:FD:91:6A:D4:2F:26:0B:13:A3:61:AA:EC:E4:2E
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer:       /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial:       01962F3D4FB399AD57430CFBF0B5040F0AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number:          0D0B
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: CaKfBVfbMSag3PxvHI90iw5OoFLncovRmTNLoZU844U=)
                          2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
                          3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
                          4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4f:b3:99:ad:57:43:0c:fb:f0:b5:04:0f:0a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=d5893a97e29efd916ad42f260b13a361aaece42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:7a:6e:3d:4a:42:28:1b:aa:d2:0f:9c:09:
                    46:6e:cb:1f:ad:2d:af:e9:46:25:cc:b4:2f:15:d2:
                    b9:ea:aa:cd:2a:34:85:ce:69:2b:1d:a9:b5:a0:77:
                    7c:f3:a8:e1:70:3d:39:a1:df:92:4c:09:ab:76:e8:
                    6b:34:85:ea:1f:f2:7b:36:2b:45:d3:6d:96:e3:4f:
                    b4:04:67:a0:65:bf:ae:0b:6d:ad:53:d8:f2:7b:15:
                    dc:09:9e:e7:b3:7a:cc:bb:a0:af:80:57:cd:79:84:
                    a2:d5:bd:9b:1e:77:ea:3c:ce:a2:e6:c8:55:fc:11:
                    b6:88:b2:52:e4:71:b5:47:97:14:10:a1:02:0b:32:
                    c2:14:23:ef:e6:28:8c:47:5b:d8:aa:45:2d:7e:e3:
                    1e:6f:fd:d7:57:06:27:44:6d:5c:2c:5b:04:5c:fb:
                    d1:91:0d:3b:13:4f:68:3b:4f:98:79:2b:2b:66:49:
                    30:f2:83:e3:9d:e6:d5:6b:db:92:9f:df:7a:6f:be:
                    3f:c5:2b:43:55:5c:85:97:99:3e:08:14:8a:0a:cc:
                    1a:2a:7b:a0:aa:6c:0a:97:20:6a:64:7b:19:92:7d:
                    4e:98:56:9e:47:83:33:6e:20:76:43:f7:51:8a:b9:
                    49:e0:15:ed:9e:ce:10:a9:78:85:30:7d:1a:82:29:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:89:3A:97:E2:9E:FD:91:6A:D4:2F:26:0B:13:A3:61:AA:EC:E4:2E
            X509v3 Authority Key Identifier:
                keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:ca:3b:fb:05:aa:89:30:a4:da:1d:4e:80:52:de:a0:03:
         e3:a6:7e:99:52:d5:5d:a4:12:ed:70:3b:a4:82:bc:5c:98:a8:
         99:b0:94:7f:80:bd:7d:d7:36:9d:08:a1:63:ed:82:7e:ae:59:
         0f:d0:64:7d:0f:e3:b7:69:ab:69:7b:7e:78:d8:22:0f:f1:00:
         e2:48:a7:a2:e3:96:00:ca:83:13:98:a1:ab:29:13:64:54:7e:
         59:0e:68:d9:37:95:f1:94:bf:5a:1a:58:6b:1a:f8:c8:98:35:
         ef:74:13:86:ba:3b:61:9c:ae:ea:db:76:fe:85:95:8d:2b:78:
         21:e3:0b:f6:ac:75:df:33:5d:42:49:e7:50:ad:93:0b:f3:f5:
         4c:25:f0:ba:d1:97:53:4b:90:38:5e:c4:10:c8:3e:95:d5:8d:
         6b:ed:ee:21:12:5a:70:87:ab:2d:04:50:70:01:d6:25:ac:e8:
         c7:ed:9d:13:9d:f4:f5:f0:e5:87:ff:9a:a7:54:88:96:b2:17:
         01:5d:ef:42:af:6c:3c:83:87:ef:a1:b3:11:d8:2a:47:9d:ea:
         aa:25:e6:92:84:2f:69:50:a7:e3:b2:ac:8d:6a:20:d1:e5:cc:
         46:cc:be:dd:22:2b:3a:24:1e:dd:94:af:e4:ca:a9:0f:8f:b6:
         b0:bc:93:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPU+zma1XQwz78LUEDwq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh
NGVhZmEwHhcNMjUwNDEzMTMwMTA5WhcNMjUwNDE0MTMwMTA5WjAzMTEwLwYDVQQD
EyhkNTg5M2E5N2UyOWVmZDkxNmFkNDJmMjYwYjEzYTM2MWFhZWNlNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxN6bj1KQigbqtIPnAlGbssfrS2v
6UYlzLQvFdK56qrNKjSFzmkrHam1oHd886jhcD05od+STAmrduhrNIXqH/J7NitF
022W40+0BGegZb+uC22tU9jyexXcCZ7ns3rMu6CvgFfNeYSi1b2bHnfqPM6i5shV
/BG2iLJS5HG1R5cUEKECCzLCFCPv5iiMR1vYqkUtfuMeb/3XVwYnRG1cLFsEXPvR
kQ07E09oO0+YeSsrZkkw8oPjnebVa9uSn996b74/xStDVVyFl5k+CBSKCswaKnug
qmwKlyBqZHsZkn1OmFaeR4MzbiB2Q/dRirlJ4BXtns4QqXiFMH0agikmnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWJOpfinv2RatQvJgsTo2Gq7OQuMB8GA1UdIwQY
MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt
NzM1MWY4NjliNDJiLzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi
LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPzKO/sF
qokwpNodToBS3qAD46Z+mVLVXaQS7XA7pIK8XJiombCUf4C9fdc2nQihY+2Cfq5Z
D9BkfQ/jt2mraXt+eNgiD/EA4kinouOWAMqDE5ihqykTZFR+WQ5o2TeV8ZS/WhpY
axr4yJg173QThro7YZyu6tt2/oWVjSt4IeML9qx13zNdQknnUK2TC/P1TCXwutGX
U0uQOF7EEMg+ldWNa+3uIRJacIerLQRQcAHWJazox+2dE5309fDlh/+ap1SIlrIX
AV3vQq9sPIOH76GzEdgqR53qqiXmkoQvaVCn47KsjWog0eXMRsy+3SIrOiQe3ZSv
5MqpD4+2sLyTFw==
-----END CERTIFICATE-----