Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File:                     YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier:          s9kIDC+ry7vxDbsV+OHfpP9NFAva9nekBna+YmlJjTw=
Subject key identifier:   B0:3B:3D:87:CD:8E:E5:C3:8C:53:BD:DA:3F:55:40:23:FE:9A:EE:2B
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer:       /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial:       01962E61E8380B7F3FB0F36B464B22568F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number:          0471
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (hash: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=)
                          2: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: KlEwM4VGgzgGrQyF38+vJ8Wkoyv4AeXJ9j+Uv2wxzHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e8:38:0b:7f:3f:b0:f3:6b:46:4b:22:56:8f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=b03b3d87cd8ee5c38c53bdda3f554023fe9aee2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:f0:c5:37:31:d6:3f:b1:10:78:c4:91:71:
                    e0:b7:81:c4:0f:75:c4:dc:60:5c:2a:46:87:5a:cf:
                    4a:73:78:01:81:6f:1a:29:26:d1:4c:cb:39:4b:2d:
                    9c:56:06:af:49:de:66:13:9f:30:81:0e:11:ea:dc:
                    d7:89:79:df:1f:dc:0d:d9:68:2c:2e:d8:1e:10:fb:
                    1d:6f:df:45:62:53:f0:cd:c7:30:36:f2:48:ff:60:
                    0e:3f:8e:e0:6c:b9:cc:ec:ff:93:ac:48:ed:e5:fd:
                    32:d8:57:24:9f:f7:db:22:07:c3:04:cb:bc:6c:57:
                    89:f5:fe:d6:03:3f:70:ac:84:7b:bd:58:d6:a9:43:
                    d8:f6:7f:18:ef:88:ac:31:c4:f6:54:ab:4d:5c:ee:
                    e6:d5:86:0e:83:47:e7:95:36:b6:0c:d2:6c:e2:a1:
                    bf:25:64:af:26:13:0a:29:48:2d:1d:80:3d:3b:8b:
                    98:b0:fc:89:12:62:b2:e8:d8:fb:f7:fb:f1:95:d8:
                    37:ad:dc:a3:2b:bf:38:64:7e:ae:65:46:a3:dd:cf:
                    56:2b:76:56:a4:7a:24:0b:72:e7:1f:f3:ce:1b:52:
                    78:5a:8b:2a:7a:44:ea:ed:89:55:4d:cb:58:3b:f4:
                    af:0d:23:4d:32:bd:83:18:05:34:32:7e:6c:d0:de:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:3D:87:CD:8E:E5:C3:8C:53:BD:DA:3F:55:40:23:FE:9A:EE:2B
            X509v3 Authority Key Identifier:
                keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0b:33:50:5f:68:2b:82:e3:c4:62:55:6a:34:eb:b1:b7:da:
         f9:e8:a0:3f:fc:12:4e:a0:74:c8:a1:ca:4d:3a:4e:2e:8b:b4:
         36:7c:84:96:c4:9b:1e:eb:fd:51:91:1a:08:a1:11:49:f2:16:
         2a:80:bb:92:78:96:94:d7:3f:35:07:a6:f8:07:9c:f2:f4:8e:
         ab:f9:e0:c2:20:07:49:9e:6d:8d:f6:ac:09:5c:a9:b7:80:ca:
         3c:e7:6c:17:ea:4e:29:ac:ec:9e:80:10:a0:05:72:2f:fb:97:
         b9:47:1f:00:ea:86:dd:df:47:92:88:2a:50:46:56:96:14:1d:
         a4:4b:1e:68:8f:bb:4e:ce:1b:fc:89:97:3a:e6:dd:94:9e:e9:
         8a:a6:b1:54:49:52:90:96:d1:24:c0:7a:b5:ab:df:e5:b6:5f:
         f4:b5:36:af:6b:86:e1:f4:f4:5b:96:29:39:08:96:a3:70:28:
         35:a0:03:0a:67:12:b4:29:8b:54:3d:5a:c0:e9:cf:c9:bb:12:
         bb:45:8f:23:46:07:d7:5a:e2:25:75:9b:72:39:05:36:ee:4b:
         80:fd:0e:f5:e8:90:31:39:30:91:a6:d3:23:27:e7:ac:ba:a2:
         f2:de:db:0b:f8:12:ce:7c:7e:9a:af:47:e1:b4:49:b7:4c:56:
         eb:cc:af:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeg4C38/sPNrRksiVo88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyODU0ZThhNWVlMWRlYzg5ZjI1YjJhNzg1OTAyM2ZmYjEy
M2I5ZjgwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
EyhiMDNiM2Q4N2NkOGVlNWMzOGM1M2JkZGEzZjU1NDAyM2ZlOWFlZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0DwxTcx1j+xEHjEkXHgt4HED3XE
3GBcKkaHWs9Kc3gBgW8aKSbRTMs5Sy2cVgavSd5mE58wgQ4R6tzXiXnfH9wN2Wgs
LtgeEPsdb99FYlPwzccwNvJI/2AOP47gbLnM7P+TrEjt5f0y2Fckn/fbIgfDBMu8
bFeJ9f7WAz9wrIR7vVjWqUPY9n8Y74isMcT2VKtNXO7m1YYOg0fnlTa2DNJs4qG/
JWSvJhMKKUgtHYA9O4uYsPyJEmKy6Nj79/vxldg3rdyjK784ZH6uZUaj3c9WK3ZW
pHokC3LnH/POG1J4WosqekTq7YlVTctYO/SvDSNNMr2DGAU0Mn5s0N5k4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA7PYfNjuXDjFO92j9VQCP+mu4rMB8GA1UdIwQY
MBaAFGKFTope4d7InyWyp4WQI/+xI7n4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgt
MzViMWM1YjhhZDM0LzEvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgtMzViMWM1YjhhZDM0
LzEvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQszUF9o
K4LjxGJVajTrsbfa+eigP/wSTqB0yKHKTTpOLou0NnyElsSbHuv9UZEaCKERSfIW
KoC7kniWlNc/NQem+Aec8vSOq/ngwiAHSZ5tjfasCVypt4DKPOdsF+pOKazsnoAQ
oAVyL/uXuUcfAOqG3d9HkogqUEZWlhQdpEseaI+7Ts4b/ImXOubdlJ7piqaxVElS
kJbRJMB6tavf5bZf9LU2r2uG4fT0W5YpOQiWo3AoNaADCmcStCmLVD1awOnPybsS
u0WPI0YH11riJXWbcjkFNu5LgP0O9eiQMTkwkabTIyfnrLqi8t7bC/gSznx+mq9H
4bRJt0xW68yviQ==
-----END CERTIFICATE-----