Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
File:                     JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json)
Hash identifier:          cx6QQK4rv8gjgqzQt3yWfOTiJkGrvMInRp8jmzELxy0=
Subject key identifier:   06:6A:22:93:27:BF:9D:37:CF:B5:F8:A5:48:56:15:29:2A:11:CE:6C
Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Certificate issuer:       /CN=258906554d8c8b428ede8cb35026860d3d7771df
Certificate serial:       01962F0736459B7F37ED29AF5B1A1627F281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: TydXwhvWbFcHEsEKk1Dbz1pxD7+r5ot1giB53iNdejM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:45:9b:7f:37:ed:29:af:5b:1a:16:27:f2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=066a229327bf9d37cfb5f8a5485615292a11ce6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:46:43:ca:bf:a7:51:c0:ec:09:ad:ef:bf:
                    d3:0d:7c:ce:fb:a6:d0:95:bf:be:14:d9:3e:06:f0:
                    94:71:58:41:af:29:9d:a9:f3:6f:2c:0b:2b:e3:93:
                    c7:90:4e:62:3f:a5:fc:9d:3c:bb:37:47:47:65:1c:
                    40:5d:cf:83:22:09:f7:a3:c3:80:7a:04:98:e5:15:
                    83:34:4e:83:54:7e:51:91:88:08:5e:bb:b2:c8:66:
                    ff:7a:06:92:89:72:82:b1:4f:b7:0d:85:8e:68:79:
                    f6:81:19:3d:b8:ce:dc:6e:ee:aa:e1:91:7f:9d:2b:
                    1f:fd:5c:f7:a9:49:f4:0b:7a:df:cf:9d:11:5e:36:
                    f1:9d:ed:48:12:50:0f:fd:58:60:a4:50:03:e2:c8:
                    56:f4:67:dc:bd:cd:03:f9:06:f9:3f:75:d7:41:88:
                    fa:22:6b:dc:0e:42:19:3e:b6:bb:3d:4d:e5:02:dd:
                    9a:62:a2:52:a5:b0:6c:00:67:d1:9c:ae:9b:28:a5:
                    a0:34:26:b3:f6:96:9d:03:c0:6b:40:63:be:43:ad:
                    d6:af:6d:e8:67:97:42:18:4b:49:eb:29:a5:45:c3:
                    a8:a0:bb:34:ee:eb:8f:2f:96:81:c9:82:c0:b3:a0:
                    d1:8c:05:47:62:36:7b:a0:67:12:9d:65:43:44:8f:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6A:22:93:27:BF:9D:37:CF:B5:F8:A5:48:56:15:29:2A:11:CE:6C
            X509v3 Authority Key Identifier:
                keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:2d:ac:f3:d8:3c:3b:b9:02:af:8b:38:84:fe:02:2f:a0:
         2c:67:63:fb:90:a0:2b:3a:6b:41:34:27:15:69:d6:47:73:35:
         b5:21:30:50:37:d3:04:57:cb:85:7b:f3:93:9c:81:27:17:41:
         85:9f:9a:6b:03:79:16:ed:27:c6:61:bf:5e:21:41:4d:a9:53:
         f2:c3:f4:f0:5a:cc:a7:a4:cb:14:d1:a7:09:be:6f:a9:e4:9f:
         05:30:45:f0:26:a2:be:f9:22:ca:fc:ac:03:e5:02:3d:63:f2:
         79:0f:20:30:c4:a4:17:06:8a:1c:cb:de:85:3b:b2:6e:a9:c1:
         b3:6c:bd:2a:6c:28:a2:4e:f6:2e:b9:be:b6:58:f2:50:5a:9e:
         bf:f3:29:1c:e0:cf:f3:cc:82:ba:14:a2:6d:4f:66:b5:1b:51:
         f8:10:d7:a4:0e:3d:f8:b3:7e:1d:10:62:de:ce:27:f8:83:75:
         c4:41:bb:e3:b5:ff:46:20:06:9f:30:27:9b:a8:b8:b2:bd:c1:
         44:ce:19:ee:4a:f0:62:4a:4c:0a:1e:5c:6d:a9:d9:73:dd:3c:
         1f:9f:2a:3c:f9:a3:ef:10:e1:c2:e2:d5:8b:58:e3:5b:ac:b1:
         c0:6e:b7:6b:1d:c3:66:73:27:a6:90:35:2d:72:ed:fe:0e:46:
         81:86:26:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzZFm3837SmvWxoWJ/KBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODkwNjU1NGQ4YzhiNDI4ZWRlOGNiMzUwMjY4NjBkM2Q3
NzcxZGYwHhcNMjUwNDEzMTIwMjAzWhcNMjUwNDE0MTIwMjAzWjAzMTEwLwYDVQQD
EygwNjZhMjI5MzI3YmY5ZDM3Y2ZiNWY4YTU0ODU2MTUyOTJhMTFjZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J5GQ8q/p1HA7Amt77/TDXzO+6bQ
lb++FNk+BvCUcVhBrymdqfNvLAsr45PHkE5iP6X8nTy7N0dHZRxAXc+DIgn3o8OA
egSY5RWDNE6DVH5RkYgIXruyyGb/egaSiXKCsU+3DYWOaHn2gRk9uM7cbu6q4ZF/
nSsf/Vz3qUn0C3rfz50RXjbxne1IElAP/VhgpFAD4shW9Gfcvc0D+Qb5P3XXQYj6
ImvcDkIZPra7PU3lAt2aYqJSpbBsAGfRnK6bKKWgNCaz9padA8BrQGO+Q63Wr23o
Z5dCGEtJ6ymlRcOooLs07uuPL5aByYLAs6DRjAVHYjZ7oGcSnWVDRI9kawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZqIpMnv503z7X4pUhWFSkqEc5sMB8GA1UdIwQY
MBaAFCWJBlVNjItCjt6Ms1Amhg09d3HfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YjU3YWItNmNhMi00YWE4LTgzODct
YWZkZDUzODI3ZTkzLzEvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YjU3YWItNmNhMi00YWE4LTgzODctYWZkZDUzODI3ZTkz
LzEvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmstrPPY
PDu5Aq+LOIT+Ai+gLGdj+5CgKzprQTQnFWnWR3M1tSEwUDfTBFfLhXvzk5yBJxdB
hZ+aawN5Fu0nxmG/XiFBTalT8sP08FrMp6TLFNGnCb5vqeSfBTBF8Caivvkiyvys
A+UCPWPyeQ8gMMSkFwaKHMvehTuybqnBs2y9Kmwook72Lrm+tljyUFqev/MpHODP
88yCuhSibU9mtRtR+BDXpA49+LN+HRBi3s4n+IN1xEG747X/RiAGnzAnm6i4sr3B
RM4Z7krwYkpMCh5cbanZc908H58qPPmj7xDhwuLVi1jjW6yxwG63ax3DZnMnppA1
LXLt/g5GgYYmhg==
-----END CERTIFICATE-----