Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
File:                     iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json)
Hash identifier:          8uZnYWbCO7N2Nge1Je6Nkgh9uABIl3OHZoTkpMcS5ag=
Subject key identifier:   81:7B:4A:65:01:82:F3:5B:FC:55:65:32:C1:1E:48:9F:BD:7B:92:AF
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Certificate issuer:       /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial:       01962F742928A26CF71557915F78E0D01DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
Manifest number:          084A
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa (hash: /RcbZ2ujStzbSPjPDGEz6Qg57WsDieIVmjOcowRraSQ=)
                          2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: Lbjnz0Ttm4voHb8ri4i1tNRKsF4RzVhXCSeQi9NYbRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:29:28:a2:6c:f7:15:57:91:5f:78:e0:d0:1d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=817b4a650182f35bfc556532c11e489fbd7b92af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:c3:68:6b:cd:92:2b:62:a8:3c:9d:90:77:
                    c4:35:79:0a:e9:72:b7:32:e3:63:ad:78:e6:0c:a3:
                    45:8e:ba:62:aa:e7:b5:55:c0:55:17:87:7e:32:76:
                    d5:99:45:e3:81:ce:d0:46:d8:a1:f9:8c:63:72:b0:
                    b8:ff:0e:c8:74:da:ed:b9:25:dc:39:49:cf:af:4b:
                    18:f7:bf:b5:33:51:b3:0e:33:48:e1:ef:99:57:8b:
                    a5:0b:30:36:35:34:62:a8:ca:3a:6f:5e:6d:34:52:
                    63:a4:a5:f7:f9:9d:63:3d:dc:d1:d3:a9:67:2f:65:
                    97:c9:f0:d4:f5:47:33:48:9a:fc:c8:8b:17:df:cd:
                    d0:28:1b:18:83:a0:d9:bf:fa:69:05:30:24:c5:f5:
                    41:ba:bc:ec:22:6e:3a:87:d7:38:9c:37:e6:b9:a1:
                    c4:12:d3:3c:51:6c:3c:09:26:f8:23:6d:99:ce:1a:
                    97:d0:d3:11:14:1e:24:2e:48:3e:69:2e:0d:a6:d8:
                    0e:08:28:de:56:de:70:b7:17:68:4b:18:4b:8c:4a:
                    17:2d:4a:38:31:53:2a:77:83:ca:72:2d:9a:28:a7:
                    00:d2:b2:14:02:ec:c4:e8:e1:08:3e:a3:39:47:3f:
                    f8:15:4f:33:47:13:ef:ed:c6:63:30:84:db:a0:3b:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7B:4A:65:01:82:F3:5B:FC:55:65:32:C1:1E:48:9F:BD:7B:92:AF
            X509v3 Authority Key Identifier:
                keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:42:01:42:99:d1:42:50:24:44:e1:15:98:e1:78:0f:14:1f:
         c9:f1:99:0c:4e:d7:8e:40:65:cc:93:d6:4e:47:c4:3a:2b:e7:
         e2:17:af:f3:1d:69:17:77:46:17:d9:2a:fc:14:39:0a:22:c4:
         ae:90:45:f5:13:9e:41:92:e1:0b:9b:71:69:35:a5:f8:ed:be:
         39:75:71:11:f4:6a:5e:01:c3:d6:3c:5b:3b:a4:27:00:01:57:
         ef:a2:12:63:82:ca:89:05:ab:ef:c7:ae:4e:e6:6f:26:b8:fa:
         57:a5:33:d6:1c:34:45:ee:40:21:44:71:2a:f1:73:b3:ad:84:
         9f:8d:37:eb:81:ba:5d:f3:cf:f2:e5:95:60:e1:43:b2:aa:5b:
         65:c3:87:88:df:22:b7:f4:ad:07:67:08:6f:ef:ae:5d:95:5d:
         bd:9b:46:8b:7b:8e:28:3c:da:e6:33:99:d0:e8:69:43:b4:11:
         9a:09:eb:72:d3:9b:52:fe:0a:f2:13:db:a1:80:de:ff:25:58:
         2b:25:a4:44:80:24:1f:7e:50:80:d3:a0:60:81:9f:41:08:c8:
         59:4d:b1:21:3f:22:33:8d:90:d7:f1:d0:10:d0:ab:eb:6d:f8:
         dd:bc:f8:a6:87:10:5d:9c:27:70:bc:32:c8:e3:b0:e2:f6:60:
         b4:46:2f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCkoomz3FVeRX3jg0B3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjc0ODNkYzE2YzMxOGU1YWZmZjgzMjI5MzBjODE3ZmQx
OTJjOTEwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
Eyg4MTdiNGE2NTAxODJmMzViZmM1NTY1MzJjMTFlNDg5ZmJkN2I5MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz53DaGvNkitiqDydkHfENXkK6XK3
MuNjrXjmDKNFjrpique1VcBVF4d+MnbVmUXjgc7QRtih+YxjcrC4/w7IdNrtuSXc
OUnPr0sY97+1M1GzDjNI4e+ZV4ulCzA2NTRiqMo6b15tNFJjpKX3+Z1jPdzR06ln
L2WXyfDU9UczSJr8yIsX383QKBsYg6DZv/ppBTAkxfVBurzsIm46h9c4nDfmuaHE
EtM8UWw8CSb4I22ZzhqX0NMRFB4kLkg+aS4NptgOCCjeVt5wtxdoSxhLjEoXLUo4
MVMqd4PKci2aKKcA0rIUAuzE6OEIPqM5Rz/4FU8zRxPv7cZjMITboDubXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF7SmUBgvNb/FVlMsEeSJ+9e5KvMB8GA1UdIwQY
MBaAFIsnSD3BbDGOWv/4MikwyBf9GSyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4Yzct
ZmI4OTNlMzkwOGQyLzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4YzctZmI4OTNlMzkwOGQy
LzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEIBQpnR
QlAkROEVmOF4DxQfyfGZDE7XjkBlzJPWTkfEOivn4hev8x1pF3dGF9kq/BQ5CiLE
rpBF9ROeQZLhC5txaTWl+O2+OXVxEfRqXgHD1jxbO6QnAAFX76ISY4LKiQWr78eu
TuZvJrj6V6Uz1hw0Re5AIURxKvFzs62En40364G6XfPP8uWVYOFDsqpbZcOHiN8i
t/StB2cIb++uXZVdvZtGi3uOKDza5jOZ0OhpQ7QRmgnrctObUv4K8hPboYDe/yVY
KyWkRIAkH35QgNOgYIGfQQjIWU2xIT8iM42Q1/HQENCr62343bz4pocQXZwncLwy
yOOw4vZgtEYvOg==
-----END CERTIFICATE-----