Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          +CA//766EB2MNzQdEnqa6rD+WNkBRPmBDTG+9amo6VA=
Subject key identifier:   B4:86:0F:CD:5E:61:44:77:15:FB:B9:28:30:3B:50:9A:1B:3E:18:08
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       01962FAB4C75E23AB499C67ED19713D2899D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          080A
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: RsKvqbn62EIUWyvFhZtL2WfJUfnK+kVrLxfqgNY3jjQ=)
                          2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4c:75:e2:3a:b4:99:c6:7e:d1:97:13:d2:89:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=b4860fcd5e61447715fbb928303b509a1b3e1808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:36:3d:bc:c6:52:3a:48:87:39:72:08:7e:
                    50:2a:36:e0:38:75:ce:4a:56:fe:c6:24:f5:54:5e:
                    d6:ff:19:ac:6b:aa:55:8a:20:d6:1b:11:5a:a9:04:
                    40:6d:dd:a3:e3:ed:7e:e7:37:af:6f:d3:85:38:9a:
                    4e:77:b7:eb:31:b6:21:25:b5:d3:d6:7d:79:94:86:
                    f6:ee:5d:92:35:d4:76:f8:44:fb:0f:c6:22:2b:b3:
                    ec:e5:66:45:90:35:87:16:e5:54:43:d7:d3:d6:c9:
                    10:f2:79:22:59:02:f9:2d:14:f3:f1:59:70:23:0b:
                    a3:26:8d:ca:dd:0e:5f:43:04:1f:55:ea:2d:61:3d:
                    5f:cd:0a:22:71:68:8f:72:71:cb:be:ed:6d:f2:f4:
                    e9:cf:74:de:e4:e9:31:45:b2:a3:37:30:4a:f8:e4:
                    67:02:87:ce:ec:2c:18:87:cb:7c:3c:dd:fd:81:06:
                    f2:5a:5f:b6:64:08:d7:bc:01:5e:ad:46:94:f6:cd:
                    f9:9d:04:1b:f0:2c:bf:f7:44:57:5a:83:88:7e:e9:
                    0b:e2:55:c5:91:ab:50:ce:31:e5:5f:69:97:f1:5e:
                    29:df:ae:a4:c3:ab:75:35:cd:1d:14:68:02:96:3f:
                    23:6d:77:ed:6d:28:a8:70:b8:86:4a:e9:aa:64:93:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:0F:CD:5E:61:44:77:15:FB:B9:28:30:3B:50:9A:1B:3E:18:08
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:20:33:87:4d:5d:30:41:05:17:fb:68:cb:4f:09:62:07:33:
         05:5e:51:44:0c:dc:14:56:f2:a0:34:b3:76:59:80:65:db:27:
         69:f0:10:5d:04:39:f3:42:25:ad:85:32:a2:5d:b9:7a:1b:54:
         9c:c7:ef:2c:fa:7c:1a:d1:c4:00:31:f0:29:c0:a5:e4:05:df:
         92:ec:9a:56:ea:a3:4d:37:f8:57:b0:3c:af:ae:13:78:9d:07:
         b9:ea:af:d6:90:4d:89:75:0c:c5:69:6b:06:67:18:87:74:cd:
         47:23:30:7a:15:50:1c:c6:e1:93:01:54:6e:d4:18:8d:a5:61:
         c2:54:ee:02:7a:48:f3:a5:8e:f8:e4:ef:3e:47:31:9f:e1:50:
         33:65:d5:22:72:06:04:58:ba:bc:e5:fc:d1:97:1e:87:24:e9:
         4f:57:a5:f5:dc:6f:ba:16:13:16:3d:3d:b0:fa:3a:38:4f:43:
         fa:18:81:82:47:03:37:1e:0f:af:54:90:cf:0e:15:ad:24:87:
         5d:9e:0d:b3:dd:51:c4:d2:32:a5:73:c5:45:4b:cf:57:46:5c:
         0a:5d:7e:87:c4:b6:36:7e:25:63:33:ec:3a:88:76:d8:8c:5e:
         a9:9d:3a:d4:66:25:c8:14:32:7a:58:12:81:26:21:7d:fc:66:
         ac:d1:2d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0x14jq0mcZ+0ZcT0omdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2
MDU5NDcwHhcNMjUwNDEzMTUwMTE3WhcNMjUwNDE0MTUwMTE3WjAzMTEwLwYDVQQD
EyhiNDg2MGZjZDVlNjE0NDc3MTVmYmI5MjgzMDNiNTA5YTFiM2UxODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b02PbzGUjpIhzlyCH5QKjbgOHXO
Slb+xiT1VF7W/xmsa6pViiDWGxFaqQRAbd2j4+1+5zevb9OFOJpOd7frMbYhJbXT
1n15lIb27l2SNdR2+ET7D8YiK7Ps5WZFkDWHFuVUQ9fT1skQ8nkiWQL5LRTz8Vlw
IwujJo3K3Q5fQwQfVeotYT1fzQoicWiPcnHLvu1t8vTpz3Te5OkxRbKjNzBK+ORn
AofO7CwYh8t8PN39gQbyWl+2ZAjXvAFerUaU9s35nQQb8Cy/90RXWoOIfukL4lXF
katQzjHlX2mX8V4p366kw6t1Nc0dFGgClj8jbXftbSiocLiGSumqZJMuxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSGD81eYUR3Ffu5KDA7UJobPhgIMB8GA1UdIwQY
MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt
MmFhZGM1YzNjNTdkLzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk
LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyAzh01d
MEEFF/toy08JYgczBV5RRAzcFFbyoDSzdlmAZdsnafAQXQQ580IlrYUyol25ehtU
nMfvLPp8GtHEADHwKcCl5AXfkuyaVuqjTTf4V7A8r64TeJ0Hueqv1pBNiXUMxWlr
BmcYh3TNRyMwehVQHMbhkwFUbtQYjaVhwlTuAnpI86WO+OTvPkcxn+FQM2XVInIG
BFi6vOX80ZcehyTpT1el9dxvuhYTFj09sPo6OE9D+hiBgkcDNx4Pr1SQzw4VrSSH
XZ4Ns91RxNIypXPFRUvPV0ZcCl1+h8S2Nn4lYzPsOoh22IxeqZ061GYlyBQyelgS
gSYhffxmrNEtuQ==
-----END CERTIFICATE-----