Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
File:                     YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json)
Hash identifier:          XBYW1cZhrgBEtn2+GFfHAdDOWVFj/guZc7t38jS/unI=
Subject key identifier:   EA:82:DA:C6:4F:1F:8D:77:18:E0:4D:F9:B3:01:22:E0:AF:48:01:B2
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Certificate issuer:       /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial:       01962FAB0CFBA32B447300BC7798AA086C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
Manifest number:          0359
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 149n__WzdkzcvdiXj75CSwt4Ke0.roa (hash: oADfnpg1xyxZ/pO3JlbyLqogHqwwtBMcwMf9vhuxjOk=)
                          2: 1QgqhoL1f8rVrZsBTbv_ukiW3_U.roa (hash: FtHGg2smc+8B3MpNfm7Vb9xIWP4EyZ43pe81r6EdMLE=)
                          3: Bs4lhpAgPxLI2sivKmGtlx_Lp3k.roa (hash: qE6cO8k8x/RBn9klunLlEIx8ylpZgmFO4HaBZgdaXEY=)
                          4: H5ysVvFP9uugn7UMgVFU6mDqqJo.roa (hash: wod2c4UZcbTgGm1p5jx7N59EiAjvlr1HWLQEomhwG3U=)
                          5: J16kp0dolEOcPzZi0oKr2BD75BI.roa (hash: mBVv2zMp/NRzR+bYpY82u+arKMz/jM+I0mvUD0HUt84=)
                          6: MQ2EgPtIqGeY6J-TWaJXDqs9Nug.roa (hash: DTWQ1BaF1eB35acgiW005UdG4BqBQvAvS2KuGYP/fIY=)
                          7: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=)
                          8: WNd31FKfDVJsTEByrggsuNBHueg.roa (hash: tedpCisNTHVOKJzXOyZVhC8FIa9J18s6krEoaMi/yH0=)
                          9: X8dBAOgbQmMZTDWCVOoHFaPqdGo.roa (hash: FKP0JnrxsHmdLjO3RxgRsJIjvK6vevaI8Id8nvFYZkk=)
                          10: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: PGatb4CZjUbgjElAapN9Ps9me8H2CghiSKcldhvpsbE=)
                          11: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=)
                          12: _irPLRofiW2yAiqGHceh7pxbGfo.roa (hash: LcENOil0eGI9fBrHK+Rr0FvqGbc2XbDucHTRV9ZcpPY=)
                          13: j7OTX4J28Js-0w5isT2PIZS_18Q.roa (hash: frKELQxJcl50qW1No3dGQO6ukFhHZwkNa2ShR84gmOI=)
                          14: mJz6Vh5vX_Z8nl77wAqDRKiONe0.roa (hash: kZsXj53UOHVZH65D+DagMxEuLkLg5qPiHvCvjzQpYs0=)
                          15: wtC2uqCyAY1EaN9QwS8TP1Kn0VI.roa (hash: db0oe3co74b5HA+JQAKN4n6gQCMTGZCJAz+X0/LsIjQ=)
                          16: y0NhIWgTEJUn3OyUdcDPuX30xHU.roa (hash: RhHl7+/yQQJ2O2zcuVJ2Qb8j0j9FdT6wy4ZLGMABh6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0c:fb:a3:2b:44:73:00:bc:77:98:aa:08:6c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=ea82dac64f1f8d7718e04df9b30122e0af4801b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:3f:18:fc:f1:b4:ca:bc:0f:46:90:1a:24:
                    a6:c8:a5:d3:62:97:c9:99:c7:12:27:c3:9b:1a:e0:
                    25:ca:0b:76:e0:a7:66:84:25:c9:67:ae:17:17:03:
                    fc:80:69:18:8c:a3:ae:be:05:74:fb:82:b7:4c:56:
                    57:0c:12:da:9a:9f:0d:d4:51:d7:bd:ba:33:97:bd:
                    8d:51:50:ed:87:38:d2:16:a4:29:b0:41:82:b2:89:
                    d4:f2:1d:81:5f:e4:3c:78:de:1d:63:40:b9:a4:1d:
                    ab:b3:cd:f8:b5:ab:81:6a:59:54:fe:8d:49:02:69:
                    a1:14:67:2b:96:eb:c1:04:7e:19:ee:1e:75:e9:a6:
                    47:ec:41:8e:12:2c:ce:8c:57:09:18:dc:d3:9c:21:
                    d6:f2:f1:65:53:83:48:12:75:e5:b2:f7:3a:90:d5:
                    9b:16:23:16:5a:4a:72:91:c2:7e:ce:52:21:5d:c1:
                    d8:c6:9d:b5:9a:5e:53:12:d9:ee:f7:6e:cb:d2:99:
                    88:c1:da:97:e5:43:15:af:7e:fe:07:a4:c3:09:e3:
                    de:27:7c:f3:84:1e:d8:93:56:e0:79:16:75:86:8e:
                    43:0a:54:22:e4:57:ca:ec:5d:fe:12:58:dc:9e:89:
                    52:e3:3d:66:d1:09:a9:98:88:2c:6c:99:02:91:ce:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:DA:C6:4F:1F:8D:77:18:E0:4D:F9:B3:01:22:E0:AF:48:01:B2
            X509v3 Authority Key Identifier:
                keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:30:52:01:8b:5d:83:84:fa:99:80:ec:41:3f:e9:71:59:c5:
         9c:ae:c8:f9:8b:1b:0c:9c:9c:62:f4:98:88:36:60:cf:84:bc:
         2d:20:44:4f:52:70:e8:8c:48:17:c1:f0:71:77:17:2e:81:13:
         1a:d9:a8:f9:80:fc:87:db:a5:e5:06:f4:59:6c:dc:90:97:89:
         09:f4:12:3b:4a:40:51:ae:87:77:72:69:08:6e:62:42:b7:e4:
         2d:23:01:07:5a:35:f0:79:c9:af:c6:6a:dd:e0:96:32:e8:6d:
         70:b0:33:b2:0d:89:69:64:07:23:ac:5b:54:34:83:70:c4:3f:
         7a:30:bb:d9:26:a9:42:c2:2c:13:5f:68:32:63:03:6d:a7:7d:
         47:1b:cf:e2:b8:21:0d:5c:b9:e2:ed:8f:09:d9:3b:9d:c8:df:
         3d:81:3c:d9:f7:86:cf:09:bb:f9:fd:ab:cb:fc:35:f0:cb:7a:
         40:62:3e:3b:93:27:c4:19:97:43:c7:56:41:d2:aa:7b:f7:8c:
         71:6b:dd:d6:02:5d:24:17:6d:55:4e:24:0f:6a:93:3b:3a:dd:
         8d:15:f1:7f:3a:d9:bf:6f:7f:d6:93:c0:75:0a:d3:e6:44:c2:
         82:bb:76:58:6b:e1:ec:6c:c5:56:ef:00:ce:54:5f:69:16:db:
         ea:e0:bb:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwz7oytEcwC8d5iqCGx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjUwNDEzMTUwMTAxWhcNMjUwNDE0MTUwMTAxWjAzMTEwLwYDVQQD
EyhlYTgyZGFjNjRmMWY4ZDc3MThlMDRkZjliMzAxMjJlMGFmNDgwMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttw/GPzxtMq8D0aQGiSmyKXTYpfJ
mccSJ8ObGuAlygt24KdmhCXJZ64XFwP8gGkYjKOuvgV0+4K3TFZXDBLamp8N1FHX
vbozl72NUVDthzjSFqQpsEGCsonU8h2BX+Q8eN4dY0C5pB2rs834tauBallU/o1J
AmmhFGcrluvBBH4Z7h516aZH7EGOEizOjFcJGNzTnCHW8vFlU4NIEnXlsvc6kNWb
FiMWWkpykcJ+zlIhXcHYxp21ml5TEtnu927L0pmIwdqX5UMVr37+B6TDCePeJ3zz
hB7Yk1bgeRZ1ho5DClQi5FfK7F3+EljcnolS4z1m0QmpmIgsbJkCkc5NDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqC2sZPH413GOBN+bMBIuCvSAGyMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTBSAYtd
g4T6mYDsQT/pcVnFnK7I+YsbDJycYvSYiDZgz4S8LSBET1Jw6IxIF8HwcXcXLoET
Gtmo+YD8h9ul5Qb0WWzckJeJCfQSO0pAUa6Hd3JpCG5iQrfkLSMBB1o18HnJr8Zq
3eCWMuhtcLAzsg2JaWQHI6xbVDSDcMQ/ejC72SapQsIsE19oMmMDbad9RxvP4rgh
DVy54u2PCdk7ncjfPYE82feGzwm7+f2ry/w18Mt6QGI+O5MnxBmXQ8dWQdKqe/eM
cWvd1gJdJBdtVU4kD2qTOzrdjRXxfzrZv29/1pPAdQrT5kTCgrt2WGvh7GzFVu8A
zlRfaRbb6uC71g==
-----END CERTIFICATE-----