Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File:                     d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier:          rkLBD6Hwdqg6LsIWzYCmM01HhOofy7Ro1sphSp7mJ5M=
Subject key identifier:   9C:96:33:42:F6:53:AD:D9:9F:35:D4:90:7D:B6:40:75:69:FF:CE:8E
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer:       /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial:       01962FAB274BC25BA27DC927E4350DE56453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number:          0540
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
                          2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: dFJcz7s54Xv7ycM6hgAcfMhpMdUqe/4WZ9hEzHHNVAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:27:4b:c2:5b:a2:7d:c9:27:e4:35:0d:e5:64:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=9c963342f653add99f35d4907db6407569ffce8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:92:a9:95:c9:c2:d5:be:4e:66:63:33:44:
                    ba:31:f1:90:da:71:b7:c5:39:54:5a:aa:ea:94:33:
                    e5:f1:d6:4c:f4:76:68:4c:be:ad:cb:bb:93:33:e4:
                    25:40:26:27:e0:08:c8:99:8e:23:d0:99:90:7a:b7:
                    a0:e3:fb:c3:3f:87:f9:71:1e:b2:e8:36:48:4b:78:
                    e1:9e:0b:bd:38:77:ab:62:00:b0:52:b8:42:62:55:
                    73:cb:91:55:f8:2c:1f:18:56:78:ff:52:63:78:b0:
                    08:73:2c:15:17:5b:b1:17:e7:0d:78:30:52:cd:b2:
                    17:82:b2:84:ed:80:61:2f:3a:a9:18:8f:d3:97:22:
                    dd:68:15:cf:e4:d3:d6:fa:80:a2:f3:ea:35:0e:19:
                    9e:08:f9:f7:64:98:1a:0a:a5:03:d2:5f:f0:fe:c2:
                    d1:70:cd:1e:a0:c0:dd:00:2b:f3:67:8c:23:28:3b:
                    35:4d:9e:ac:da:fc:82:d0:a9:88:b1:73:c1:53:02:
                    f3:83:12:69:1e:83:8e:46:1c:10:97:7c:9a:37:f3:
                    06:fc:7e:89:8c:7e:92:61:12:e5:b9:e6:43:a3:35:
                    4f:e8:bc:0d:70:ed:77:33:60:be:55:44:33:88:dd:
                    26:88:6d:ec:ac:75:2c:a2:b9:95:f6:fc:8d:0c:bf:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:96:33:42:F6:53:AD:D9:9F:35:D4:90:7D:B6:40:75:69:FF:CE:8E
            X509v3 Authority Key Identifier:
                keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:83:46:95:ac:47:9b:3a:47:09:6a:f3:a9:c5:d9:c6:9b:
         ae:f2:60:2e:c8:64:a6:5c:0b:a0:67:56:a0:3c:3c:01:eb:6d:
         1c:a6:48:b4:51:d6:38:53:ac:f9:7e:00:84:e2:b1:9a:59:0a:
         52:d1:5e:83:84:b3:0d:f2:aa:bc:c2:57:e4:d6:0d:57:fe:97:
         e7:26:3a:1a:e0:8d:55:40:72:5e:ca:06:a0:4d:c2:ea:d6:c0:
         cf:c8:2e:55:2a:1f:98:df:b9:fc:9b:43:8a:ca:ad:fd:13:28:
         a1:8a:df:ee:87:20:af:a5:02:1a:7a:f4:7a:5b:53:fe:c2:92:
         b0:8d:59:26:31:eb:b9:a6:1e:51:50:28:9d:5c:b4:13:37:19:
         26:22:5e:ed:e6:7b:dc:f6:a9:85:2a:16:cf:f2:18:56:2c:ce:
         95:88:84:1f:eb:89:e5:16:fc:97:eb:70:9e:93:b3:39:f1:23:
         8c:5c:b8:7d:12:4d:e9:61:45:a6:53:08:b1:62:3f:0e:4b:c7:
         2b:04:55:77:77:7f:dd:3f:be:7c:a9:91:9c:fe:34:e5:b7:2a:
         89:92:6a:ef:c3:93:d0:31:cd:15:da:da:09:8a:63:16:f9:16:
         83:32:d2:b5:fb:df:3f:61:ed:e1:1a:37:93:6c:ea:08:ce:60:
         cf:be:c5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqydLwluifckn5DUN5WRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzJkOGE2MDE5N2ZjN2JkZTY0ZmMzZmFkMTBlYjJkYTRm
ZTg3NzkwHhcNMjUwNDEzMTUwMTA3WhcNMjUwNDE0MTUwMTA3WjAzMTEwLwYDVQQD
Eyg5Yzk2MzM0MmY2NTNhZGQ5OWYzNWQ0OTA3ZGI2NDA3NTY5ZmZjZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rOSqZXJwtW+TmZjM0S6MfGQ2nG3
xTlUWqrqlDPl8dZM9HZoTL6ty7uTM+QlQCYn4AjImY4j0JmQereg4/vDP4f5cR6y
6DZIS3jhngu9OHerYgCwUrhCYlVzy5FV+CwfGFZ4/1JjeLAIcywVF1uxF+cNeDBS
zbIXgrKE7YBhLzqpGI/TlyLdaBXP5NPW+oCi8+o1DhmeCPn3ZJgaCqUD0l/w/sLR
cM0eoMDdACvzZ4wjKDs1TZ6s2vyC0KmIsXPBUwLzgxJpHoOORhwQl3yaN/MG/H6J
jH6SYRLlueZDozVP6LwNcO13M2C+VUQziN0miG3srHUsormV9vyNDL9sOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyWM0L2U63ZnzXUkH22QHVp/86OMB8GA1UdIwQY
MBaAFHfC2KYBl/x73mT8P60Q6y2k/od5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAt
OGYyYWY5YjUxYzViLzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAtOGYyYWY5YjUxYzVi
LzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbiDRpWs
R5s6Rwlq86nF2cabrvJgLshkplwLoGdWoDw8AettHKZItFHWOFOs+X4AhOKxmlkK
UtFeg4SzDfKqvMJX5NYNV/6X5yY6GuCNVUByXsoGoE3C6tbAz8guVSofmN+5/JtD
isqt/RMooYrf7ocgr6UCGnr0eltT/sKSsI1ZJjHruaYeUVAonVy0EzcZJiJe7eZ7
3PaphSoWz/IYVizOlYiEH+uJ5Rb8l+twnpOzOfEjjFy4fRJN6WFFplMIsWI/DkvH
KwRVd3d/3T++fKmRnP405bcqiZJq78OT0DHNFdraCYpjFvkWgzLStfvfP2Ht4Ro3
k2zqCM5gz77F/Q==
-----END CERTIFICATE-----