Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
File:                     Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json)
Hash identifier:          6VBqZEFsxquXHy9GqNFKgfEKgEkC9BJNmgDV+4RhtSw=
Subject key identifier:   7E:7E:E9:23:5C:B7:40:16:60:A9:2A:53:46:FE:17:A9:C7:32:9D:D6
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Certificate issuer:       /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial:       01962E2B321AA5F9E838B06B42CC0B95247B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
Manifest number:          0E3E
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 1-YME93lc1AWh4-bMqvVDZYenQg0.roa (hash: Euu0W5ctvY2bfvnvaMrD1zBWGCi2DVPvkYQ6p9zTjts=)
                          2: B-5_egLdEl752iv9qxYdq8eosj8.roa (hash: Cdvp7KAkC+/9T90gVhhsMGICo5DVTrNIRp6EnoCK4JA=)
                          3: HdvJhluj0mmgaFdPVm0s0ofNMQM.roa (hash: p1LONhiWBtnwDM/uG7ENsu+2YSQKoESJAbc98yta6C4=)
                          4: KHKAC9a3rTijbcUG7k0TG0oIfQw.roa (hash: mQICnOFfRCc92bylLzQGJ/CCdUJnG0edN7A+0K2B+IE=)
                          5: PG5DPUzHhisMDmHNMi2OiyC4Krk.roa (hash: 5vgSE6xpOM3tTVvShPg0nfAqcYxZUDm3VYRogPEs1nM=)
                          6: QWifAQ3dSu8nhEAeOh_F1BphWro.roa (hash: itO7AV5EF/O+Sl0fYRa8cl6eA4q/nRa0iBG6sGElFQI=)
                          7: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: QbvaRjHOX+H3afnetKiuQogE8706Nri0vdb+c2O5Sek=)
                          8: cWGszmobGgkTRu82roBLKR9vgkE.roa (hash: bXFzT/7+8yagPIwyKl0fdIxc7uJ/wfFRRzbV8w0a7yI=)
                          9: flrC_8zXbr01pJXgtmy__huZXOA.roa (hash: vzxZLPURPSKJVHe6QAWg0rqm4QhuQOuF7VBOWspThjA=)
                          10: nGntDaqcmONxUi1sd87UMvT9x4I.roa (hash: JUPdqbOgdaD6LXB1MI+aJwuym5PZcQO3ILLdGvRsfU8=)
                          11: p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa (hash: iKYw9dWKEOaAlzn5AmL4rdC2+rWU6FDA6bFijDgxb2w=)
                          12: sFVwAvso2RiBjXQQC5X8xPsYJBs.roa (hash: +5oPRTUTMFR48JZpxxq3OBMXLIXgfURgzHz46nSWc5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:32:1a:a5:f9:e8:38:b0:6b:42:cc:0b:95:24:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=7e7ee9235cb7401660a92a5346fe17a9c7329dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:60:1c:74:36:54:aa:7b:90:de:e5:dd:82:
                    ed:c4:20:48:cc:77:16:be:bd:cf:9d:53:dd:74:33:
                    6b:10:40:e6:e6:56:e9:d6:67:fb:e8:37:ca:04:96:
                    55:42:1b:28:5a:6c:47:f7:1f:33:02:b8:c7:f3:a0:
                    b6:3f:48:1f:6d:69:8a:d0:10:77:a5:45:23:bc:7f:
                    be:0c:0a:47:2e:25:c5:a2:c5:1b:4c:80:a5:f6:96:
                    d8:63:7d:ac:81:42:65:72:57:6f:e1:cd:56:55:cb:
                    ef:7c:8d:b0:47:68:72:ee:66:d9:db:bf:b5:e9:d0:
                    5a:5d:ae:79:40:e7:d0:16:9d:84:a7:6b:b0:67:d1:
                    f0:33:82:13:3b:6c:3b:67:2a:d4:6f:37:d0:97:9e:
                    eb:25:31:2a:25:e5:51:da:92:f5:5a:1c:fc:17:9b:
                    e6:5c:22:b1:6c:46:05:3e:c1:8f:b8:07:00:82:f1:
                    49:c7:23:0f:e2:aa:ed:ab:ab:ba:3c:7f:6d:37:b8:
                    2e:46:fa:21:0a:fb:c3:d0:af:eb:ca:b9:bf:0b:41:
                    46:85:1f:dd:85:c9:8d:60:af:c0:e4:e1:9d:d9:fe:
                    de:fd:09:a7:8e:f2:ce:a7:81:e5:77:8e:d8:a4:fe:
                    1d:fa:57:38:aa:b2:94:6a:07:4a:3a:5d:1d:71:3c:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:E9:23:5C:B7:40:16:60:A9:2A:53:46:FE:17:A9:C7:32:9D:D6
            X509v3 Authority Key Identifier:
                keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:65:23:cd:54:f5:3d:3c:cd:d7:5b:61:b1:92:3a:4b:10:
         53:c9:a2:70:48:66:78:2e:07:da:1e:e5:37:86:26:5e:a3:46:
         3d:67:01:d8:6d:8e:10:61:07:51:f5:5b:db:df:3e:15:80:d8:
         5e:e0:2b:7b:89:2a:88:13:be:04:f9:94:eb:42:9a:e4:e7:e7:
         81:8f:bd:ba:91:4e:8c:55:99:16:49:3b:fc:6d:c7:d9:ab:09:
         21:7d:69:10:18:7c:40:d2:4e:8d:d4:42:fd:b4:ab:1d:4d:e6:
         7c:b0:f9:4d:27:0f:fb:14:80:ab:cb:e5:7e:0c:de:f3:79:d5:
         15:0d:86:dd:ad:5d:a4:3a:74:a0:a9:66:b3:14:e7:13:f3:71:
         74:e4:b3:ee:ba:dc:3e:95:55:76:bf:8f:d5:80:c3:b6:3b:a4:
         6a:b8:2f:77:07:8f:ba:9e:6e:7d:cb:60:6d:0e:ca:46:26:72:
         2c:46:17:b4:30:19:91:ad:89:dc:20:fb:b0:12:09:4e:01:3c:
         56:f2:f5:02:d4:64:a9:8b:ef:83:83:66:d7:1d:54:e8:58:54:
         9b:c7:d4:1a:4a:dd:98:ef:24:60:66:a4:11:0c:8a:9b:63:d7:
         1b:fa:20:98:bb:7b:db:7b:da:3c:56:a8:11:21:5f:b8:67:e4:
         1a:39:53:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzIapfnoOLBrQswLlSR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjUwNDEzMDgwMTQ0WhcNMjUwNDE0MDgwMTQ0WjAzMTEwLwYDVQQD
Eyg3ZTdlZTkyMzVjYjc0MDE2NjBhOTJhNTM0NmZlMTdhOWM3MzI5ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYBgHHQ2VKp7kN7l3YLtxCBIzHcW
vr3PnVPddDNrEEDm5lbp1mf76DfKBJZVQhsoWmxH9x8zArjH86C2P0gfbWmK0BB3
pUUjvH++DApHLiXFosUbTICl9pbYY32sgUJlcldv4c1WVcvvfI2wR2hy7mbZ27+1
6dBaXa55QOfQFp2Ep2uwZ9HwM4ITO2w7ZyrUbzfQl57rJTEqJeVR2pL1Whz8F5vm
XCKxbEYFPsGPuAcAgvFJxyMP4qrtq6u6PH9tN7guRvohCvvD0K/ryrm/C0FGhR/d
hcmNYK/A5OGd2f7e/QmnjvLOp4Hld47YpP4d+lc4qrKUagdKOl0dcTx82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5+6SNct0AWYKkqU0b+F6nHMp3WMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWxlI81U
9T08zddbYbGSOksQU8micEhmeC4H2h7lN4YmXqNGPWcB2G2OEGEHUfVb298+FYDY
XuAre4kqiBO+BPmU60Ka5OfngY+9upFOjFWZFkk7/G3H2asJIX1pEBh8QNJOjdRC
/bSrHU3mfLD5TScP+xSAq8vlfgze83nVFQ2G3a1dpDp0oKlmsxTnE/NxdOSz7rrc
PpVVdr+P1YDDtjukargvdwePup5ufctgbQ7KRiZyLEYXtDAZka2J3CD7sBIJTgE8
VvL1AtRkqYvvg4Nm1x1U6FhUm8fUGkrdmO8kYGakEQyKm2PXG/ogmLt723vaPFao
ESFfuGfkGjlTtg==
-----END CERTIFICATE-----