Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File:                     0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier:          MYYL7Ud+f/ZFx/ciHdj5WfAWJeKZ4ckdCoQfIJK7R6I=
Subject key identifier:   FB:57:13:62:0A:DA:6A:31:23:64:E1:C6:6D:6D:D4:C8:84:42:73:5C
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer:       /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial:       01962DF43C1501E4184F10AEB25116024375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number:          1131
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: qdz1CMUV2cLIG7sS/toDgYpYHaRW/3UIiqtR8eHnI+E=)
                          2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:15:01:e4:18:4f:10:ae:b2:51:16:02:43:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=fb5713620ada6a312364e1c66d6dd4c88442735c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:f3:0e:14:13:45:3f:da:6a:19:82:f5:e9:
                    df:31:48:93:e9:fe:c9:8b:5e:0d:21:24:d5:13:40:
                    88:ca:c6:5e:86:47:22:35:e6:84:62:aa:66:63:c1:
                    bb:a7:43:a5:54:0b:7b:7b:df:92:9f:c1:93:8f:99:
                    70:d9:f5:7e:02:f6:11:af:db:50:d9:dc:13:ed:e7:
                    d1:9b:cc:6c:47:c9:e9:39:c7:91:ac:7f:7c:c1:a4:
                    a0:3d:29:47:27:08:16:31:92:9d:73:67:d2:da:39:
                    6d:49:e9:d9:c3:a5:d5:06:6e:a4:7e:6e:f6:71:25:
                    fd:c3:2b:ae:6d:5b:ca:e9:ee:e9:cf:ea:53:9e:ba:
                    6c:5c:3d:b7:d6:97:b9:41:5b:53:0f:83:e0:c9:90:
                    db:dd:19:90:17:92:69:4c:cf:cd:fd:b9:e0:da:13:
                    9a:46:70:74:c9:df:2b:bf:21:a3:6c:8b:1a:9a:f2:
                    84:41:71:f0:6d:6c:33:3b:88:81:95:59:e5:c9:26:
                    0e:c9:f3:44:ee:6a:3b:3d:fb:81:44:6c:9e:64:bc:
                    1f:90:76:bd:ab:3b:64:06:2c:e2:21:b9:8f:3c:43:
                    d9:76:17:e2:5b:a5:46:ac:11:74:b7:c7:85:ba:36:
                    f4:50:d7:c6:95:ca:07:ec:00:e6:96:2d:2e:77:22:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:13:62:0A:DA:6A:31:23:64:E1:C6:6D:6D:D4:C8:84:42:73:5C
            X509v3 Authority Key Identifier:
                keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:de:af:61:91:4a:ba:45:c0:28:6f:be:1d:3e:e2:3c:4b:32:
         e0:af:df:07:36:50:65:b8:a4:56:c6:e2:e4:0c:26:eb:cc:b4:
         cd:6f:6c:58:ec:1a:20:3c:e4:7d:47:37:13:13:b9:ad:fd:47:
         e0:53:65:3b:5e:66:a4:77:48:e7:66:46:ca:ca:7f:b4:db:07:
         ad:4b:d8:9b:31:cf:b7:af:39:1f:c7:45:5a:85:d6:5c:2d:4e:
         1f:c0:b8:4e:1b:1d:ef:ee:39:e4:8c:84:42:9d:8b:74:ee:70:
         35:ba:a1:94:73:58:2f:c7:24:57:28:be:dc:c5:1d:23:b1:2a:
         84:18:b2:9b:30:f7:05:61:36:28:ba:9c:0c:6e:64:5b:7a:85:
         c6:c3:bd:ea:6c:a0:bc:21:b5:ac:3c:2f:d9:a6:94:fc:7a:c1:
         07:f3:c2:1e:43:f4:d0:cb:51:20:92:9c:c3:1d:d7:5a:a3:2e:
         91:a2:9f:f6:3e:d9:dc:e4:18:e6:44:5c:1f:f1:98:7d:c8:a9:
         7e:23:71:25:79:54:7d:2e:0b:ab:72:ff:8a:7e:9b:1a:36:cf:
         8a:40:dc:78:a2:be:d3:de:89:0e:35:65:8b:af:20:db:73:34:
         92:aa:b4:61:b3:44:fc:ef:18:fc:0c:7d:f3:6a:6e:23:42:eb:
         6a:0c:3a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DwVAeQYTxCuslEWAkN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODhhODhkNTk1ZGMyZWQ4YzJmOTIzOTY0NWM0ZThjNWU3
MzdkMzEwHhcNMjUwNDEzMDcwMTQyWhcNMjUwNDE0MDcwMTQyWjAzMTEwLwYDVQQD
EyhmYjU3MTM2MjBhZGE2YTMxMjM2NGUxYzY2ZDZkZDRjODg0NDI3MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDzDhQTRT/aahmC9enfMUiT6f7J
i14NISTVE0CIysZehkciNeaEYqpmY8G7p0OlVAt7e9+Sn8GTj5lw2fV+AvYRr9tQ
2dwT7efRm8xsR8npOceRrH98waSgPSlHJwgWMZKdc2fS2jltSenZw6XVBm6kfm72
cSX9wyuubVvK6e7pz+pTnrpsXD231pe5QVtTD4PgyZDb3RmQF5JpTM/N/bng2hOa
RnB0yd8rvyGjbIsamvKEQXHwbWwzO4iBlVnlySYOyfNE7mo7PfuBRGyeZLwfkHa9
qztkBiziIbmPPEPZdhfiW6VGrBF0t8eFujb0UNfGlcoH7ADmli0udyLf7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtXE2IK2moxI2Thxm1t1MiEQnNcMB8GA1UdIwQY
MBaAFNGIqI1ZXcLtjC+SOWRcToxec30xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAt
ZDk1M2Y0ODU0NzU3LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAtZDk1M2Y0ODU0NzU3
LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqd6vYZFK
ukXAKG++HT7iPEsy4K/fBzZQZbikVsbi5Awm68y0zW9sWOwaIDzkfUc3ExO5rf1H
4FNlO15mpHdI52ZGysp/tNsHrUvYmzHPt685H8dFWoXWXC1OH8C4Thsd7+455IyE
Qp2LdO5wNbqhlHNYL8ckVyi+3MUdI7EqhBiymzD3BWE2KLqcDG5kW3qFxsO96myg
vCG1rDwv2aaU/HrBB/PCHkP00MtRIJKcwx3XWqMukaKf9j7Z3OQY5kRcH/GYfcip
fiNxJXlUfS4Lq3L/in6bGjbPikDceKK+096JDjVli68g23M0kqq0YbNE/O8Y/Ax9
82puI0Lragw6sg==
-----END CERTIFICATE-----