Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File:                     yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier:          apaMks9Zmv0nTB0efcFRTDJKP4unmDHippYn68B9OXg=
Subject key identifier:   37:D5:8F:48:D3:A7:BB:48:2C:BA:B4:79:81:2E:92:E7:8E:92:6E:1A
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer:       /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial:       01962E99A1EA8E5457A68B6903D74347334E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number:          0CAF
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
                          2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: qL0D9aGAURNnV29DHTL5nD2b2xn9qLutAzeMg/0y91g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a1:ea:8e:54:57:a6:8b:69:03:d7:43:47:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=37d58f48d3a7bb482cbab479812e92e78e926e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:c7:82:cc:6a:0e:b4:0b:a8:cc:90:aa:d4:
                    79:51:e1:7b:39:e3:fd:8e:e2:05:e0:15:4c:18:67:
                    b3:fc:e5:5d:6f:9b:5c:04:eb:20:07:00:ce:96:85:
                    99:5c:af:44:bd:58:62:60:39:0c:11:88:60:c4:7f:
                    8a:03:fb:cd:58:82:cf:c2:bb:a5:22:5a:ff:70:97:
                    13:d3:db:b0:c9:71:9f:85:05:a8:1e:23:76:5a:e3:
                    bb:77:c0:f7:14:bb:cb:90:9c:e6:6d:33:8d:7c:30:
                    cf:b1:f0:1a:58:46:4d:a9:65:34:de:6b:55:0d:d4:
                    78:0c:5a:ed:17:73:5f:15:12:1d:8b:69:59:83:01:
                    5f:b4:b2:5c:3d:a7:8f:10:23:c4:cb:87:6c:66:d8:
                    fd:71:bf:66:57:a8:ad:d3:b5:9e:9d:37:d8:86:98:
                    d3:89:07:6c:64:03:18:77:e8:db:4b:8c:eb:0c:a0:
                    be:c4:4a:c7:ef:ad:e4:be:d7:9d:2a:07:7e:09:c7:
                    ef:35:2d:63:57:b1:97:a0:53:ee:0d:7c:00:c6:7d:
                    c8:ef:5b:a6:8f:53:12:84:f3:be:e8:1f:2a:17:8f:
                    59:48:48:00:c6:d6:60:09:d9:0b:93:95:66:83:c9:
                    28:90:b6:e7:38:98:7d:1c:4d:a6:68:ce:80:30:a7:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D5:8F:48:D3:A7:BB:48:2C:BA:B4:79:81:2E:92:E7:8E:92:6E:1A
            X509v3 Authority Key Identifier:
                keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a6:bb:55:28:00:94:88:96:47:83:26:94:96:60:d4:69:b0:
         62:53:5f:d1:a2:4f:ba:fe:1a:b5:be:e8:f4:69:30:ce:3d:6a:
         54:e4:14:9e:b5:9b:df:d2:67:fb:a1:00:dc:4c:0f:9b:c2:a8:
         e6:fb:1b:9d:82:78:fa:88:33:4d:ac:7d:cb:76:41:af:77:b4:
         c2:35:34:74:1d:60:b0:e6:28:a1:8c:02:2c:a9:e5:a7:78:0f:
         e2:20:21:2d:7a:ef:95:0c:72:48:23:75:93:15:5d:e1:cf:3d:
         c9:a2:b5:51:de:22:d5:0d:bf:55:f3:c4:c8:07:45:f6:16:ce:
         ff:77:92:3b:82:a2:00:ff:f8:2e:b4:25:f0:8a:8d:5e:39:f7:
         c0:13:c7:d9:77:be:7d:c8:91:64:0f:a9:50:1f:65:79:c1:7b:
         de:2f:ef:9f:55:43:e0:5b:81:ff:5b:1b:4e:46:ed:3c:6d:76:
         d9:aa:92:2b:34:5a:20:52:3c:52:0e:46:03:2f:c3:d4:b2:09:
         98:3e:e4:39:96:a1:f0:2a:55:87:78:03:ab:99:03:3c:84:ba:
         66:9f:e8:ed:6c:24:f0:65:a1:71:56:70:2f:60:0e:52:ef:2d:
         c5:6f:02:ea:61:a5:da:34:ea:a6:91:92:4e:a0:de:3d:53:8e:
         07:03:6b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumaHqjlRXpotpA9dDRzNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjUwNDEzMTAwMjIyWhcNMjUwNDE0MTAwMjIyWjAzMTEwLwYDVQQD
EygzN2Q1OGY0OGQzYTdiYjQ4MmNiYWI0Nzk4MTJlOTJlNzhlOTI2ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRTHgsxqDrQLqMyQqtR5UeF7OeP9
juIF4BVMGGez/OVdb5tcBOsgBwDOloWZXK9EvVhiYDkMEYhgxH+KA/vNWILPwrul
Ilr/cJcT09uwyXGfhQWoHiN2WuO7d8D3FLvLkJzmbTONfDDPsfAaWEZNqWU03mtV
DdR4DFrtF3NfFRIdi2lZgwFftLJcPaePECPEy4dsZtj9cb9mV6it07WenTfYhpjT
iQdsZAMYd+jbS4zrDKC+xErH763kvtedKgd+CcfvNS1jV7GXoFPuDXwAxn3I71um
j1MShPO+6B8qF49ZSEgAxtZgCdkLk5Vmg8kokLbnOJh9HE2maM6AMKeYTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfVj0jTp7tILLq0eYEukueOkm4aMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaa7VSgA
lIiWR4MmlJZg1GmwYlNf0aJPuv4atb7o9Gkwzj1qVOQUnrWb39Jn+6EA3EwPm8Ko
5vsbnYJ4+ogzTax9y3ZBr3e0wjU0dB1gsOYooYwCLKnlp3gP4iAhLXrvlQxySCN1
kxVd4c89yaK1Ud4i1Q2/VfPEyAdF9hbO/3eSO4KiAP/4LrQl8IqNXjn3wBPH2Xe+
fciRZA+pUB9lecF73i/vn1VD4FuB/1sbTkbtPG122aqSKzRaIFI8Ug5GAy/D1LIJ
mD7kOZah8CpVh3gDq5kDPIS6Zp/o7Wwk8GWhcVZwL2AOUu8txW8C6mGl2jTqppGS
TqDePVOOBwNrMA==
-----END CERTIFICATE-----