Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File:                     yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier:          RHSsikCc+8wPNqrcFsJJetz8QPO1ppRZHv6WSimUEWs=
Subject key identifier:   53:50:A6:B4:A8:ED:06:6E:47:87:BF:DA:50:95:DB:04:34:E0:BB:B7
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer:       /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial:       01962DF3A79904D03FFF68719CF83E2B0A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
                          2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: AL7KkB46+J5Yud2AiAyYtF50QqxZps8tOAb0HxPc1og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:99:04:d0:3f:ff:68:71:9c:f8:3e:2b:0a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=5350a6b4a8ed066e4787bfda5095db0434e0bbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:e8:95:4f:00:59:b4:a0:25:ea:46:a5:a6:
                    a0:2f:65:ba:5f:79:c5:dd:30:c8:ce:a3:6c:b4:f9:
                    72:0e:d4:f5:28:c3:6f:e4:66:5e:c6:45:6e:84:f6:
                    ec:15:71:53:b1:9b:45:9c:73:71:5e:b1:ab:09:cd:
                    a3:70:00:96:84:57:e0:46:08:15:d6:78:77:79:09:
                    00:34:6f:6d:f0:57:49:a3:ab:0c:e5:ef:10:11:4b:
                    73:3f:e3:de:1c:9b:1a:ec:5b:8a:d3:c6:43:5d:af:
                    ac:ff:b6:64:40:f1:e8:60:30:79:ee:60:0a:36:de:
                    b4:7b:d3:16:c3:69:8d:9f:33:01:2d:e3:1a:8b:a2:
                    11:57:71:aa:c9:bf:f1:84:f8:b4:2b:af:ab:28:26:
                    c6:57:ac:b9:4c:bd:37:91:21:c8:df:fa:f3:0d:d6:
                    e5:58:20:be:27:35:4c:cc:18:60:b9:dc:c1:d3:18:
                    4d:16:de:fa:6b:64:d3:d6:de:2d:41:83:c6:67:09:
                    35:57:95:21:2e:05:b5:5a:7c:72:b5:cf:ef:23:8f:
                    d8:ae:15:1c:33:52:5b:e0:92:14:26:d5:94:43:e6:
                    fd:2c:ad:dd:b8:8a:c0:9e:61:b2:f7:6a:2f:1f:73:
                    9a:11:25:97:6c:67:50:0d:f3:37:b2:64:7a:8c:20:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:50:A6:B4:A8:ED:06:6E:47:87:BF:DA:50:95:DB:04:34:E0:BB:B7
            X509v3 Authority Key Identifier:
                keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:53:a7:4b:8b:b2:5e:75:94:6d:f3:d0:65:6b:34:d8:9a:c3:
         96:89:ba:fa:92:8b:de:91:27:cb:a4:2a:8f:25:4f:8a:b1:1d:
         86:e6:a7:f3:b0:c8:15:56:7a:f2:9e:53:be:90:ee:a3:1c:08:
         1a:3d:f1:db:c7:ec:93:6b:1f:b9:9e:a6:b3:32:f9:96:e7:ca:
         2c:23:c8:91:46:a9:63:28:9b:73:6d:b3:91:5e:67:20:a7:f8:
         ff:4a:af:33:86:7a:0a:29:e4:3c:87:ae:7e:bb:77:99:b0:07:
         33:95:6c:97:2e:98:b4:46:dc:93:95:c5:80:eb:7e:cc:3d:67:
         ce:64:45:2b:d6:f9:bf:80:f2:46:dc:88:13:fa:c2:e6:14:32:
         18:2e:6e:e9:48:d2:3a:9f:14:97:47:25:ae:0e:2e:e9:25:6d:
         f7:35:6c:a8:3b:80:26:60:3f:13:e1:f9:a4:63:00:47:f1:37:
         e9:9b:6b:b5:12:71:58:57:20:f4:44:cd:f8:10:39:f0:1b:87:
         96:e4:ca:3f:f6:5e:d2:6c:6b:40:e0:1e:22:1e:80:c5:f4:68:
         56:04:85:72:2d:eb:9b:63:3c:a3:cb:ae:af:e3:69:8f:dc:69:
         b9:25:f0:31:5f:1b:01:1b:14:3b:28:5e:be:15:fd:06:b4:2c:
         c9:24:7d:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86eZBNA//2hxnPg+KwoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGQ0MjI0MzE5Nzg2NGJiNDgxNjQ2MWQ0ZDA2NTNhYjBi
YTMyYmEwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
Eyg1MzUwYTZiNGE4ZWQwNjZlNDc4N2JmZGE1MDk1ZGIwNDM0ZTBiYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3jolU8AWbSgJepGpaagL2W6X3nF
3TDIzqNstPlyDtT1KMNv5GZexkVuhPbsFXFTsZtFnHNxXrGrCc2jcACWhFfgRggV
1nh3eQkANG9t8FdJo6sM5e8QEUtzP+PeHJsa7FuK08ZDXa+s/7ZkQPHoYDB57mAK
Nt60e9MWw2mNnzMBLeMai6IRV3Gqyb/xhPi0K6+rKCbGV6y5TL03kSHI3/rzDdbl
WCC+JzVMzBhgudzB0xhNFt76a2TT1t4tQYPGZwk1V5UhLgW1Wnxytc/vI4/YrhUc
M1Jb4JIUJtWUQ+b9LK3duIrAnmGy92ovH3OaESWXbGdQDfM3smR6jCA9sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNQprSo7QZuR4e/2lCV2wQ04Lu3MB8GA1UdIwQY
MBaAFMndQiQxl4ZLtIFkYdTQZTqwujK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2Et
NjRhNzE1YTVmNjliLzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2EtNjRhNzE1YTVmNjli
LzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1OnS4uy
XnWUbfPQZWs02JrDlom6+pKL3pEny6QqjyVPirEdhuan87DIFVZ68p5TvpDuoxwI
Gj3x28fsk2sfuZ6mszL5lufKLCPIkUapYyibc22zkV5nIKf4/0qvM4Z6CinkPIeu
frt3mbAHM5Vsly6YtEbck5XFgOt+zD1nzmRFK9b5v4DyRtyIE/rC5hQyGC5u6UjS
Op8Ul0clrg4u6SVt9zVsqDuAJmA/E+H5pGMAR/E36ZtrtRJxWFcg9ETN+BA58BuH
luTKP/Ze0mxrQOAeIh6AxfRoVgSFci3rm2M8o8uur+Npj9xpuSXwMV8bARsUOyhe
vhX9BrQsySR9VQ==
-----END CERTIFICATE-----