Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File:                     0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier:          oZUnQTKMQKC3o8c0wHh/1MOnYRfM1BXN31uY5x3jNUs=
Subject key identifier:   3F:39:F2:89:C3:34:E5:E5:F8:B8:B3:6F:17:BD:26:FF:60:12:E2:0F
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer:       /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial:       01962F3D77F280B69CEBCDEF8F8419EC37C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number:          147F
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: qwjA7BWQ8TIzDZcfwC8+IFJffXF5lJMgEZgjAGev9+o=)
                          2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:f2:80:b6:9c:eb:cd:ef:8f:84:19:ec:37:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=3f39f289c334e5e5f8b8b36f17bd26ff6012e20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:6d:56:f0:09:85:1f:d6:be:f5:52:07:da:
                    cc:de:57:00:01:36:e9:46:b9:26:f4:23:c6:07:74:
                    dd:6f:88:b4:24:cd:bb:21:37:31:2d:d4:95:4b:c4:
                    15:1b:0d:b1:7a:d5:42:cf:10:20:f5:4b:e4:c3:20:
                    05:73:c1:77:72:cb:7e:32:79:23:45:bd:38:f4:2d:
                    f9:fd:5a:34:55:52:e3:32:ab:7f:6b:77:a5:21:22:
                    68:a0:6e:6d:e5:2e:0a:78:6d:7a:4f:d0:d0:44:c8:
                    3a:e9:8f:8f:b2:e0:d2:9f:87:96:8f:b5:39:44:f0:
                    fd:18:de:02:dd:eb:ee:93:a2:41:37:d6:bc:db:88:
                    31:a6:02:97:1d:8b:ca:0a:1c:64:4e:5d:cc:37:4d:
                    1d:54:d7:73:dc:94:cb:b8:4a:15:03:f3:dc:a5:19:
                    16:9c:3a:4c:ce:3b:ca:1c:1e:1b:df:b0:88:9f:ad:
                    a9:63:aa:fe:57:a9:67:b8:6f:c1:5b:7d:54:aa:ee:
                    ec:a0:92:cc:26:0c:37:a5:57:8d:cd:60:70:82:6a:
                    15:d4:22:f6:ba:d0:97:e0:37:09:99:67:68:d9:2c:
                    92:01:a7:f4:e9:b6:47:ea:e3:44:5c:fe:5c:11:af:
                    f7:a6:0d:55:aa:02:2c:2e:84:20:42:81:dd:9c:15:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:39:F2:89:C3:34:E5:E5:F8:B8:B3:6F:17:BD:26:FF:60:12:E2:0F
            X509v3 Authority Key Identifier:
                keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:fc:96:03:0c:4e:93:2e:f9:59:59:08:60:71:62:44:d9:
         86:96:dd:b6:46:7d:f7:c4:18:54:6e:7c:74:04:26:db:0a:ad:
         8b:71:32:c4:80:86:65:7b:e4:21:be:0a:43:91:51:e8:5f:46:
         21:07:16:ea:e1:e5:fd:2c:81:c4:f8:d2:83:98:7d:23:d6:f1:
         a1:b1:78:29:ac:99:26:85:61:39:1e:ea:48:b8:07:d4:27:17:
         26:53:ef:ec:13:2c:92:23:8e:5e:e3:55:a4:60:6c:1a:8c:46:
         4f:2e:51:0b:82:00:e7:9d:72:98:49:12:83:f3:2c:a1:7a:5c:
         de:ca:7d:61:eb:06:8a:c7:b1:02:0f:e7:2a:44:00:a4:a0:af:
         09:d9:a8:8d:4d:6f:fa:31:ef:c3:fc:04:fc:86:2e:b4:28:ce:
         33:02:81:24:f4:6c:67:7b:2a:b8:1f:c2:88:04:68:34:bd:99:
         c5:8c:d6:24:9b:bc:0e:dc:de:9d:55:72:6c:fc:68:f2:43:eb:
         c1:54:5f:88:bb:4c:f1:46:83:7a:98:12:fb:58:04:02:fd:a9:
         e1:9f:76:b9:8d:cc:bd:a9:fe:e6:33:6e:32:c3:48:39:bd:a2:
         d4:77:da:83:b5:b8:32:9a:4a:b1:3a:6e:0a:66:e1:51:bc:67:
         36:71:ba:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXfygLac683vj4QZ7DfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1
NjhjYjUwHhcNMjUwNDEzMTMwMTE5WhcNMjUwNDE0MTMwMTE5WjAzMTEwLwYDVQQD
EygzZjM5ZjI4OWMzMzRlNWU1ZjhiOGIzNmYxN2JkMjZmZjYwMTJlMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFxtVvAJhR/WvvVSB9rM3lcAATbp
Rrkm9CPGB3Tdb4i0JM27ITcxLdSVS8QVGw2xetVCzxAg9UvkwyAFc8F3cst+Mnkj
Rb049C35/Vo0VVLjMqt/a3elISJooG5t5S4KeG16T9DQRMg66Y+PsuDSn4eWj7U5
RPD9GN4C3evuk6JBN9a824gxpgKXHYvKChxkTl3MN00dVNdz3JTLuEoVA/PcpRkW
nDpMzjvKHB4b37CIn62pY6r+V6lnuG/BW31Uqu7soJLMJgw3pVeNzWBwgmoV1CL2
utCX4DcJmWdo2SySAaf06bZH6uNEXP5cEa/3pg1VqgIsLoQgQoHdnBV8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD858onDNOXl+Lizbxe9Jv9gEuIPMB8GA1UdIwQY
MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt
Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy
LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6f8lgMM
TpMu+VlZCGBxYkTZhpbdtkZ998QYVG58dAQm2wqti3EyxICGZXvkIb4KQ5FR6F9G
IQcW6uHl/SyBxPjSg5h9I9bxobF4KayZJoVhOR7qSLgH1CcXJlPv7BMskiOOXuNV
pGBsGoxGTy5RC4IA551ymEkSg/MsoXpc3sp9YesGisexAg/nKkQApKCvCdmojU1v
+jHvw/wE/IYutCjOMwKBJPRsZ3squB/CiARoNL2ZxYzWJJu8DtzenVVybPxo8kPr
wVRfiLtM8UaDepgS+1gEAv2p4Z92uY3Mvan+5jNuMsNIOb2i1Hfag7W4MppKsTpu
CmbhUbxnNnG6vw==
-----END CERTIFICATE-----