Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File:                     YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier:          Tz/ajvexiqIf2w7biGr7Z8QWkUJEPI4/VKoumDaPU3A=
Subject key identifier:   FD:10:57:85:AF:5B:BF:2B:EB:92:86:F5:ED:86:43:4E:D1:BA:40:9F
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer:       /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial:       01962F06C4BDBDC5AEC382DD6B971619AB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: wulLzCUKHPtn1fto6ZDq6R0jfTFEic1zOiFvzxX7OqY=)
                          2: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (hash: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:bd:bd:c5:ae:c3:82:dd:6b:97:16:19:ab:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=fd105785af5bbf2beb9286f5ed86434ed1ba409f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:e7:d4:59:9a:e9:b9:22:4f:aa:9f:69:4f:
                    28:03:c6:14:28:01:18:78:df:ff:a6:19:18:34:01:
                    ac:4d:b9:af:79:b7:f7:19:68:d0:8b:d5:a0:ec:62:
                    26:59:00:34:21:fd:84:47:fb:e5:8d:14:e9:ca:45:
                    2a:36:cd:a7:d3:4a:a9:30:f7:97:08:6d:00:c9:76:
                    1f:08:59:66:d8:8a:83:72:f8:14:0b:71:bb:9d:83:
                    39:16:fe:32:27:72:20:5f:07:42:5f:74:e4:51:14:
                    8d:f7:7b:32:48:95:14:bb:c6:82:8e:d9:b3:9b:c1:
                    e7:ef:68:b7:ca:2c:3f:c6:fe:8c:34:96:54:5a:17:
                    d3:ce:35:67:4f:74:92:87:33:72:b1:3c:d1:06:4f:
                    5e:d0:95:e7:a2:00:f4:e8:6f:82:22:03:b4:b9:3d:
                    18:ae:cf:07:12:43:51:94:37:fe:6a:63:c7:5c:61:
                    d9:ae:a8:cd:54:bf:6f:f8:28:b6:9b:f2:b0:df:0d:
                    8c:c3:2b:4e:df:8f:b4:65:b6:b7:92:aa:9a:db:9d:
                    a7:6c:73:aa:58:83:6d:0f:e4:25:d7:84:52:3a:17:
                    45:29:ff:e3:75:ac:97:8d:45:db:fe:1d:1e:5d:26:
                    23:e9:1c:ce:49:57:02:b4:2b:9e:05:87:0a:52:c8:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:10:57:85:AF:5B:BF:2B:EB:92:86:F5:ED:86:43:4E:D1:BA:40:9F
            X509v3 Authority Key Identifier:
                keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:48:af:dc:cd:6b:63:eb:16:53:07:da:c5:de:aa:29:6e:d0:
         62:4d:ca:ac:46:d2:9e:06:97:3b:ea:69:38:64:08:d9:4e:e6:
         a0:2e:f0:d3:21:bc:db:f2:9e:ef:38:e3:3d:49:e1:46:d5:af:
         b0:b8:94:20:a9:72:08:16:b1:13:05:3a:35:00:51:c5:f7:4f:
         4f:5f:11:b3:d4:2a:3d:4e:fd:e6:6c:cc:28:5f:6b:bd:51:84:
         7a:3e:0a:67:42:85:e4:de:81:00:ec:8b:db:07:ea:b8:60:b6:
         f3:7b:d0:72:94:f2:51:2a:26:92:da:2c:eb:70:08:a2:55:c8:
         9f:eb:48:a6:59:44:3f:09:99:9d:b1:e7:78:98:d0:8f:af:e8:
         b6:fd:d0:ea:bf:61:bd:3b:af:b7:87:ec:00:84:6c:a1:f0:08:
         69:c7:df:58:03:45:fa:8f:29:8e:dd:e1:73:6c:2c:d9:54:ab:
         cc:35:25:45:c9:41:8e:61:24:29:e5:57:6b:f7:2e:fa:32:88:
         9d:57:40:f0:bc:ac:ad:ad:c1:b7:20:59:52:10:a3:d5:4f:c7:
         0d:5c:1b:74:59:70:aa:f1:9f:32:ec:fe:57:1a:b7:be:8c:e4:
         2f:4d:72:08:c2:d8:9a:11:53:02:b8:6a:7c:fb:09:5d:16:7a:
         ee:70:c3:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsS9vcWuw4Lda5cWGasOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODYzMTRmODc2MzVlNzkzYmMyZTNkYmJlZDY2NDA1Yjhh
YzY3NzEwHhcNMjUwNDEzMTIwMTM0WhcNMjUwNDE0MTIwMTM0WjAzMTEwLwYDVQQD
EyhmZDEwNTc4NWFmNWJiZjJiZWI5Mjg2ZjVlZDg2NDM0ZWQxYmE0MDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO3n1Fma6bkiT6qfaU8oA8YUKAEY
eN//phkYNAGsTbmvebf3GWjQi9Wg7GImWQA0If2ER/vljRTpykUqNs2n00qpMPeX
CG0AyXYfCFlm2IqDcvgUC3G7nYM5Fv4yJ3IgXwdCX3TkURSN93sySJUUu8aCjtmz
m8Hn72i3yiw/xv6MNJZUWhfTzjVnT3SShzNysTzRBk9e0JXnogD06G+CIgO0uT0Y
rs8HEkNRlDf+amPHXGHZrqjNVL9v+Ci2m/Kw3w2MwytO34+0Zba3kqqa252nbHOq
WINtD+Ql14RSOhdFKf/jdayXjUXb/h0eXSYj6RzOSVcCtCueBYcKUsiYzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0QV4WvW78r65KG9e2GQ07RukCfMB8GA1UdIwQY
MBaAFGCGMU+HY155O8Lj277WZAW4rGdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEt
MDI4MDU5OGYxOWUzLzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEtMDI4MDU5OGYxOWUz
LzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0iv3M1r
Y+sWUwfaxd6qKW7QYk3KrEbSngaXO+ppOGQI2U7moC7w0yG82/Ke7zjjPUnhRtWv
sLiUIKlyCBaxEwU6NQBRxfdPT18Rs9QqPU795mzMKF9rvVGEej4KZ0KF5N6BAOyL
2wfquGC283vQcpTyUSomktos63AIolXIn+tIpllEPwmZnbHneJjQj6/otv3Q6r9h
vTuvt4fsAIRsofAIacffWANF+o8pjt3hc2ws2VSrzDUlRclBjmEkKeVXa/cu+jKI
nVdA8Lysra3BtyBZUhCj1U/HDVwbdFlwqvGfMuz+Vxq3vozkL01yCMLYmhFTArhq
fPsJXRZ67nDDew==
-----END CERTIFICATE-----