Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File:                     bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier:          sU5kJVkgbCd3+CSN50d8Y8DYxvIaCDtL6QPS5+RlSlQ=
Subject key identifier:   27:6A:9D:BD:18:14:F6:2F:4A:E8:D9:AE:7A:18:98:2C:9A:3F:E8:A9
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer:       /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial:       01962ECFADF1081216D53018B91C1E171D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number:          1204
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: +fwgwGvU4KUVfHoBb95RLk8lmFEGJ1HSTSFHtfkStN8=)
                          2: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
                          3: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ad:f1:08:12:16:d5:30:18:b9:1c:1e:17:1d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=276a9dbd1814f62f4ae8d9ae7a18982c9a3fe8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:f1:14:66:f7:e9:a9:55:73:c8:e1:9e:08:
                    06:40:33:5c:83:ee:73:11:33:c6:b2:88:1c:0c:d4:
                    b1:2e:84:1a:15:d1:29:e4:c9:38:5d:41:5a:0c:5f:
                    88:4e:c7:33:b8:c1:2a:c3:d6:8c:4b:c5:1b:3c:1a:
                    34:d7:39:89:14:c3:78:14:13:bf:5a:6b:aa:e1:39:
                    26:00:c1:36:07:cb:12:50:69:9a:ef:f3:e9:07:ff:
                    49:4b:39:af:b0:ec:48:e1:f8:2e:6f:67:10:ba:93:
                    e4:5f:14:dd:c4:6f:3e:23:2b:e2:4a:bc:e1:15:8a:
                    c9:0b:46:a8:00:59:38:32:63:b9:f8:29:a8:5f:4f:
                    ba:9d:8d:16:3d:45:7f:52:39:6d:84:8a:4a:3f:50:
                    96:b9:0c:8c:cb:8b:ff:58:ab:b0:da:29:f6:2c:f7:
                    49:fb:1a:49:86:f0:83:92:9a:e4:44:b9:b5:74:26:
                    c4:b9:05:c5:3a:a9:82:ac:0a:f9:b1:07:58:8f:f2:
                    64:00:1f:c5:6f:d7:a8:6d:69:ce:0e:6f:99:6e:2e:
                    2b:98:2a:76:b7:a8:24:6c:d2:ef:70:f8:08:58:36:
                    94:8e:60:83:eb:d9:2d:38:4c:32:a1:a7:7f:eb:44:
                    17:0a:6b:1c:8b:86:91:17:80:e3:bd:1a:92:3a:f4:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6A:9D:BD:18:14:F6:2F:4A:E8:D9:AE:7A:18:98:2C:9A:3F:E8:A9
            X509v3 Authority Key Identifier:
                keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:1d:22:65:2c:27:26:46:28:10:dd:29:62:ed:27:64:99:
         62:11:1b:a4:82:6e:50:6b:1b:29:99:13:c9:f2:f2:5d:03:c7:
         fc:5c:ee:84:b8:24:6d:03:44:66:d4:62:05:c4:49:0f:15:d5:
         79:cf:9d:80:b6:67:05:e7:d7:c8:8d:ba:e0:d8:0e:2b:b2:26:
         3c:e8:c4:6d:ac:d1:d2:60:8f:04:70:47:ab:62:c5:2e:2d:76:
         23:15:70:23:07:44:ef:54:b0:b7:89:a8:b4:f5:13:c5:4d:7d:
         31:b4:9f:3c:9c:99:6e:9f:a0:c7:a0:c6:83:93:61:dc:55:5b:
         e3:28:02:11:d4:04:24:e2:65:80:62:13:f0:bb:f6:25:9c:0d:
         33:2d:4d:68:9e:fc:a8:8e:8a:5e:f7:c9:24:af:7a:35:e0:0c:
         22:9d:e4:4c:6b:69:6f:8d:d2:34:c5:0b:e6:bb:8a:68:5d:a6:
         00:b7:a8:2a:d3:69:03:eb:c4:cb:a3:43:8a:7f:59:db:a2:c8:
         0e:c5:09:a4:3e:74:1b:b0:e2:99:71:1b:7f:d5:47:9a:8d:8b:
         84:11:2f:8d:d2:37:bf:e4:d7:4c:f3:8e:08:f2:87:13:9e:8c:
         dc:da:d3:06:80:8f:91:03:53:5b:a4:65:0a:da:6f:07:ab:0e:
         00:7f:82:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz63xCBIW1TAYuRweFx1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3
ZjIwZTUwHhcNMjUwNDEzMTEwMTI0WhcNMjUwNDE0MTEwMTI0WjAzMTEwLwYDVQQD
EygyNzZhOWRiZDE4MTRmNjJmNGFlOGQ5YWU3YTE4OTgyYzlhM2ZlOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/jxFGb36alVc8jhnggGQDNcg+5z
ETPGsogcDNSxLoQaFdEp5Mk4XUFaDF+ITsczuMEqw9aMS8UbPBo01zmJFMN4FBO/
Wmuq4TkmAME2B8sSUGma7/PpB/9JSzmvsOxI4fgub2cQupPkXxTdxG8+IyviSrzh
FYrJC0aoAFk4MmO5+CmoX0+6nY0WPUV/UjlthIpKP1CWuQyMy4v/WKuw2in2LPdJ
+xpJhvCDkprkRLm1dCbEuQXFOqmCrAr5sQdYj/JkAB/Fb9eobWnODm+Zbi4rmCp2
t6gkbNLvcPgIWDaUjmCD69ktOEwyoad/60QXCmsci4aRF4DjvRqSOvT1owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdqnb0YFPYvSujZrnoYmCyaP+ipMB8GA1UdIwQY
MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt
NjdhZDYwZDM4NmRkLzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk
LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHodImUs
JyZGKBDdKWLtJ2SZYhEbpIJuUGsbKZkTyfLyXQPH/FzuhLgkbQNEZtRiBcRJDxXV
ec+dgLZnBefXyI264NgOK7ImPOjEbazR0mCPBHBHq2LFLi12IxVwIwdE71Swt4mo
tPUTxU19MbSfPJyZbp+gx6DGg5Nh3FVb4ygCEdQEJOJlgGIT8Lv2JZwNMy1NaJ78
qI6KXvfJJK96NeAMIp3kTGtpb43SNMUL5ruKaF2mALeoKtNpA+vEy6NDin9Z26LI
DsUJpD50G7DimXEbf9VHmo2LhBEvjdI3v+TXTPOOCPKHE56M3NrTBoCPkQNTW6Rl
CtpvB6sOAH+C0Q==
-----END CERTIFICATE-----