Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File:                     yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier:          eJz5TQnk/19JX0Z/KUrjdEODc17S8+q9CYNqMTGkzQ0=
Subject key identifier:   24:95:D2:7B:DB:19:AD:09:3F:BA:B8:EF:F7:2D:27:1D:35:41:34:A9
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer:       /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial:       01962E98BDB3DF5D5564F1613DC39D96C2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number:          1142
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: hFSd0NNbF3dScL3OjAi9rcKPEnce1F2CYutmqcWzf7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:b3:df:5d:55:64:f1:61:3d:c3:9d:96:c2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=2495d27bdb19ad093fbab8eff72d271d354134a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:04:53:0b:4c:c8:63:b0:1a:5c:f2:bd:c1:
                    d4:66:db:b2:18:79:79:eb:af:87:14:7b:29:a0:78:
                    a7:93:c5:1a:77:ef:d9:b0:48:c0:b2:de:be:40:59:
                    7d:17:13:1c:38:4d:c5:05:fc:36:20:5f:71:54:0b:
                    f0:b2:0d:0e:d4:f3:f7:06:42:14:ff:d2:76:ab:5a:
                    55:50:55:11:2d:a2:ee:23:9b:2d:63:b9:82:39:71:
                    91:38:07:eb:34:ba:1e:fe:74:b4:e3:bc:4f:6c:31:
                    ff:87:3d:15:5d:cf:22:ff:e1:a0:11:ca:e0:0a:ac:
                    fe:91:bb:b1:06:1a:64:4a:14:cf:1c:2b:88:ba:37:
                    41:ba:86:6e:0a:98:54:00:d8:09:f2:f3:9d:66:e1:
                    ae:b8:f1:41:87:33:a3:ab:4d:18:c4:87:70:84:29:
                    dc:ef:27:8d:78:57:bd:b6:f3:d1:7f:65:61:7f:b8:
                    34:86:9f:16:bf:41:25:09:e7:f4:4e:2e:05:ba:9a:
                    f6:f8:b4:91:c5:6e:0f:e2:4b:ab:97:fa:f2:3c:e4:
                    38:6a:8f:00:5b:5c:64:80:95:29:e3:0f:a2:98:99:
                    3c:0f:2d:d4:1d:ca:9b:2c:4d:30:03:52:df:56:fe:
                    8b:20:73:7f:88:5f:c2:ee:06:63:72:64:73:09:1c:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:95:D2:7B:DB:19:AD:09:3F:BA:B8:EF:F7:2D:27:1D:35:41:34:A9
            X509v3 Authority Key Identifier:
                keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:cb:29:54:22:45:53:78:44:53:bd:a5:ef:49:c9:2e:c1:
         c4:e2:0a:2a:7b:21:9e:81:d8:75:e0:11:12:d2:4c:3d:ce:cb:
         4e:c2:21:08:6d:db:52:9c:c8:53:08:25:c7:9e:1f:6b:62:73:
         46:f6:01:c3:94:54:8b:e0:ec:f3:59:59:1d:30:bf:07:e9:ca:
         43:b0:cd:97:82:c5:40:8b:6e:0f:3b:6c:4c:91:d5:6b:de:3b:
         94:11:5c:14:5c:87:78:70:9b:40:63:65:31:78:1b:8c:9e:21:
         f3:73:14:9e:49:39:6b:7f:57:c9:79:13:18:ad:aa:3a:6a:ea:
         73:55:4e:41:1e:c3:08:99:a7:28:17:51:93:d8:ce:57:94:a4:
         06:24:50:db:4f:bc:05:84:e7:00:fb:30:99:b8:67:c3:5e:52:
         a1:d8:15:f4:e7:d8:10:c3:8a:30:ff:88:50:38:d0:9d:a9:55:
         bd:85:13:96:d1:55:17:0b:9f:06:08:32:23:c7:65:4a:c3:90:
         5c:bd:00:b0:09:d9:68:28:9d:0a:87:bc:92:06:d4:19:d4:39:
         3d:2c:50:48:0c:38:10:4d:be:20:29:73:9d:fb:bd:86:d9:5c:
         30:d6:9b:9e:a2:ec:aa:35:1b:ab:f2:8a:1b:53:ba:29:1a:d4:
         4d:4b:4e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumL2z311VZPFhPcOdlsK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5
ZjhiMTEwHhcNMjUwNDEzMTAwMTI0WhcNMjUwNDE0MTAwMTI0WjAzMTEwLwYDVQQD
EygyNDk1ZDI3YmRiMTlhZDA5M2ZiYWI4ZWZmNzJkMjcxZDM1NDEzNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWQEUwtMyGOwGlzyvcHUZtuyGHl5
66+HFHspoHink8Uad+/ZsEjAst6+QFl9FxMcOE3FBfw2IF9xVAvwsg0O1PP3BkIU
/9J2q1pVUFURLaLuI5stY7mCOXGROAfrNLoe/nS047xPbDH/hz0VXc8i/+GgEcrg
Cqz+kbuxBhpkShTPHCuIujdBuoZuCphUANgJ8vOdZuGuuPFBhzOjq00YxIdwhCnc
7yeNeFe9tvPRf2Vhf7g0hp8Wv0ElCef0Ti4Fupr2+LSRxW4P4kurl/ryPOQ4ao8A
W1xkgJUp4w+imJk8Dy3UHcqbLE0wA1LfVv6LIHN/iF/C7gZjcmRzCRzZyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSV0nvbGa0JP7q47/ctJx01QTSpMB8GA1UdIwQY
MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt
MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4
LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjfLKVQi
RVN4RFO9pe9JyS7BxOIKKnshnoHYdeAREtJMPc7LTsIhCG3bUpzIUwglx54fa2Jz
RvYBw5RUi+Ds81lZHTC/B+nKQ7DNl4LFQItuDztsTJHVa947lBFcFFyHeHCbQGNl
MXgbjJ4h83MUnkk5a39XyXkTGK2qOmrqc1VOQR7DCJmnKBdRk9jOV5SkBiRQ20+8
BYTnAPswmbhnw15SodgV9OfYEMOKMP+IUDjQnalVvYUTltFVFwufBggyI8dlSsOQ
XL0AsAnZaCidCoe8kgbUGdQ5PSxQSAw4EE2+IClznfu9htlcMNabnqLsqjUbq/KK
G1O6KRrUTUtO9g==
-----END CERTIFICATE-----