Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File:                     yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier:          ic8ml3sAXuPhTmKdPYUssUUHtHIy+Z1gFdAbUAHqWIs=
Subject key identifier:   6A:52:9F:EE:B2:FA:DD:F7:8C:B2:BA:62:F9:FF:E2:47:43:91:FD:09
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer:       /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial:       01962ECF85CD6A952234632F60E4DFB75BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number:          0540
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
                          2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: 1bW9bOleeQxzAsNQE9cJH2BTsQ6OfVUelY23sSsLmYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:85:cd:6a:95:22:34:63:2f:60:e4:df:b7:5b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=6a529feeb2faddf78cb2ba62f9ffe2474391fd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:84:29:fc:0a:b1:eb:6e:2a:28:dc:ae:25:
                    77:38:6b:82:98:81:6c:ae:1b:95:db:5e:df:71:bb:
                    65:96:68:bb:1b:0a:11:95:b9:61:eb:c4:da:9b:fb:
                    d1:33:3f:bf:ed:e3:ca:92:26:86:b9:8f:82:8f:6c:
                    ee:86:97:de:ab:e6:54:e6:f4:78:f3:c4:16:6c:da:
                    61:b3:ea:28:c5:ef:9a:dd:89:b8:a0:ca:dd:11:ba:
                    32:f4:0b:95:9c:80:5b:cd:bf:ed:df:5d:5d:20:93:
                    82:8d:81:f9:bf:05:e3:87:79:15:4f:bf:2f:40:bc:
                    72:f9:3e:87:28:b2:35:2e:68:c0:ff:b8:09:ac:bc:
                    35:4d:67:a5:45:f1:4d:a2:3b:c3:e8:3f:e7:99:fd:
                    75:30:c5:b4:48:c3:c1:ee:f7:f2:80:f5:98:4d:c7:
                    e1:5d:81:21:95:26:3d:a1:5b:99:25:1e:e9:1d:db:
                    eb:d6:30:80:6d:46:14:a6:df:26:8a:d6:29:9d:ba:
                    8a:29:9b:a9:e0:3c:8b:9c:93:e3:be:35:01:6e:db:
                    78:47:8c:fd:cc:b3:a3:15:f9:ad:5e:b5:a8:40:30:
                    01:cc:1a:fb:bf:91:51:38:18:c3:5f:bd:f7:23:e7:
                    70:98:7c:db:58:06:75:94:0e:02:4e:17:c2:fc:0b:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:9F:EE:B2:FA:DD:F7:8C:B2:BA:62:F9:FF:E2:47:43:91:FD:09
            X509v3 Authority Key Identifier:
                keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6d:9e:ab:d2:e5:dd:a8:70:d7:c8:a5:f8:5a:32:65:6f:1f:
         9d:cb:f2:c7:de:e5:f3:bc:36:7c:f8:c0:19:1d:de:a7:67:5b:
         c7:33:40:db:c9:d0:e1:4d:92:89:b6:0b:5c:f2:eb:45:2f:b2:
         5d:ec:cc:1a:a6:56:2a:61:2d:87:e7:25:5b:fc:59:bf:4f:93:
         d0:56:1a:82:9e:a9:17:73:96:e5:61:44:60:5f:a9:d9:2a:94:
         60:91:a0:d5:34:db:87:47:e6:31:cb:70:76:53:5f:a5:66:4e:
         0d:be:3a:bd:72:3b:d4:d8:bf:de:ca:d1:ac:47:90:a7:97:2f:
         e4:b8:8a:22:7c:e6:48:d0:03:f6:ca:a2:51:d8:5e:75:b0:96:
         e1:22:27:3c:f7:24:b8:34:6c:df:55:e7:69:1d:3c:95:7f:9d:
         6d:4d:17:5f:4c:1f:f0:d4:69:a7:32:a6:08:1f:be:cb:8a:39:
         48:fe:41:24:13:86:b0:62:eb:4e:36:e4:82:6f:2d:5b:35:bb:
         33:46:95:2d:5c:8f:17:9e:4e:23:0f:09:81:6a:0c:48:c6:76:
         ee:05:03:cf:1e:a9:11:20:8e:5c:30:a5:e4:e3:71:63:cb:e8:
         10:06:97:0f:d1:a0:60:bb:1c:27:72:10:2e:e6:ac:17:31:5f:
         28:1f:27:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4XNapUiNGMvYOTft1vYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5
NzM0M2MwHhcNMjUwNDEzMTEwMTE0WhcNMjUwNDE0MTEwMTE0WjAzMTEwLwYDVQQD
Eyg2YTUyOWZlZWIyZmFkZGY3OGNiMmJhNjJmOWZmZTI0NzQzOTFmZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuaEKfwKsetuKijcriV3OGuCmIFs
rhuV217fcbtllmi7GwoRlblh68Tam/vRMz+/7ePKkiaGuY+Cj2zuhpfeq+ZU5vR4
88QWbNphs+ooxe+a3Ym4oMrdEboy9AuVnIBbzb/t311dIJOCjYH5vwXjh3kVT78v
QLxy+T6HKLI1LmjA/7gJrLw1TWelRfFNojvD6D/nmf11MMW0SMPB7vfygPWYTcfh
XYEhlSY9oVuZJR7pHdvr1jCAbUYUpt8mitYpnbqKKZup4DyLnJPjvjUBbtt4R4z9
zLOjFfmtXrWoQDABzBr7v5FROBjDX733I+dwmHzbWAZ1lA4CThfC/AtT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpSn+6y+t33jLK6Yvn/4kdDkf0JMB8GA1UdIwQY
MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct
YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5
LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvG2eq9Ll
3ahw18il+FoyZW8fncvyx97l87w2fPjAGR3ep2dbxzNA28nQ4U2SibYLXPLrRS+y
XezMGqZWKmEth+clW/xZv0+T0FYagp6pF3OW5WFEYF+p2SqUYJGg1TTbh0fmMctw
dlNfpWZODb46vXI71Ni/3srRrEeQp5cv5LiKInzmSNAD9sqiUdhedbCW4SInPPck
uDRs31XnaR08lX+dbU0XX0wf8NRppzKmCB++y4o5SP5BJBOGsGLrTjbkgm8tWzW7
M0aVLVyPF55OIw8JgWoMSMZ27gUDzx6pESCOXDCl5ONxY8voEAaXD9GgYLscJ3IQ
LuasFzFfKB8nNg==
-----END CERTIFICATE-----