Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
File:                     ySynGDiuM8zsxfEKtU7D_HG_u4I.mft (raw, json)
Hash identifier:          VlHswk7xjhnHqVMu6RF8sRuX29Jj9zQ+cBDZWBF1fTQ=
Subject key identifier:   EF:85:47:CB:A9:78:9A:8F:D0:BB:44:60:78:A8:BA:C4:86:8B:D2:E9
Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
Certificate issuer:       /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Certificate serial:       01962DF3A8890D6B472FBCF1D4E54CEA7150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
Manifest number:          06C1
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: ySynGDiuM8zsxfEKtU7D_HG_u4I.crl (hash: PBgk6TskhbM9NqEQ5UAVi186Q1JcQlPriUfkwTrOpNk=)
                          2: zvBXOGhz3yT7vvMi09ydKdR3St4.roa (hash: 74R93MmSYu/Sf7aVGk3wE3AF+gpETbgTfHomBAiI6ZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:89:0d:6b:47:2f:bc:f1:d4:e5:4c:ea:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=ef8547cba9789a8fd0bb446078a8bac4868bd2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:eb:fe:9f:7d:02:dd:aa:35:7c:f6:33:db:
                    bb:4b:bb:6d:33:fa:4d:6e:13:e8:14:11:59:78:4f:
                    53:7d:d0:32:83:6a:cf:ee:7c:80:01:23:73:83:f4:
                    eb:c0:01:a7:5c:e0:43:ff:1c:85:3c:bd:1e:bd:9e:
                    71:27:93:82:8f:e0:3d:ed:1f:2d:8b:60:14:4f:f8:
                    60:77:5e:7b:90:fb:29:d8:e8:71:3d:77:05:cc:3a:
                    51:b0:6e:79:42:bd:50:ed:6c:24:ed:e1:f2:65:3a:
                    e5:53:35:31:a0:ed:7d:d5:66:bc:54:a3:7a:ba:23:
                    0a:c8:b0:12:57:2c:35:e0:b0:b2:5d:7e:6a:81:17:
                    31:b5:5e:39:e3:eb:ad:c3:12:59:55:ee:d7:e2:f9:
                    f7:11:a8:af:e2:ed:bc:fb:61:32:47:e8:2e:b2:51:
                    ba:62:11:62:68:74:51:57:ce:35:db:1f:72:0f:be:
                    fd:b2:e7:20:6e:5e:32:d7:f5:57:77:24:18:bd:88:
                    99:8d:0d:ab:cc:e8:b1:de:d1:6d:18:68:f7:51:1f:
                    19:95:a2:f9:10:90:0f:70:16:b8:48:a5:d3:6c:5f:
                    16:a2:ba:6f:3c:39:d1:1e:2f:54:94:01:38:2d:9d:
                    c5:ee:2f:26:d9:85:b1:fd:31:8a:9b:18:92:8a:9d:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:47:CB:A9:78:9A:8F:D0:BB:44:60:78:A8:BA:C4:86:8B:D2:E9
            X509v3 Authority Key Identifier:
                keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:6e:00:50:bb:d2:b1:55:a2:1b:03:e5:6f:4f:c6:ed:e3:
         78:b0:ce:9a:a4:e0:98:77:38:be:02:05:63:2c:1c:fb:77:fd:
         44:d7:f4:3c:1a:d2:88:c2:23:8d:cb:8f:ca:f4:ff:08:02:1d:
         54:68:00:43:0a:96:b5:2d:a6:d5:71:4d:f6:2c:dc:f0:e5:0a:
         53:32:69:dd:14:ca:e1:81:ea:76:33:89:c0:31:d9:0e:bb:32:
         8c:e8:2c:b4:1b:d1:ab:44:30:41:e2:f8:ce:14:9a:cc:08:dd:
         b8:90:1f:9d:f7:4c:27:cd:55:38:3e:de:f9:94:cf:d3:37:b4:
         49:82:3a:95:a7:d9:ca:ed:b3:a3:83:91:5d:f5:21:2d:cb:7e:
         3b:e7:4b:ee:ee:c5:bf:19:21:0e:94:16:c5:3c:5a:24:b4:c8:
         13:5d:0d:e8:8e:41:e1:22:fc:fd:68:a5:ad:ff:a3:a1:dd:99:
         54:eb:fa:35:5f:94:5c:90:9c:cc:45:96:4e:f9:1a:2a:d0:fd:
         62:6f:fe:73:f8:64:5e:f8:df:86:45:68:a7:e3:8b:d8:6f:22:
         07:c4:fa:4c:61:47:3f:10:9c:3d:2b:3a:67:db:4e:72:cf:4f:
         b3:0c:11:eb:94:c6:26:2b:31:78:5e:2b:8e:68:88:70:b4:09:
         6e:c8:60:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86iJDWtHL7zx1OVM6nFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MmNhNzE4MzhhZTMzY2NlY2M1ZjEwYWI1NGVjM2ZjNzFi
ZmJiODIwHhcNMjUwNDEzMDcwMTA1WhcNMjUwNDE0MDcwMTA1WjAzMTEwLwYDVQQD
EyhlZjg1NDdjYmE5Nzg5YThmZDBiYjQ0NjA3OGE4YmFjNDg2OGJkMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppjr/p99At2qNXz2M9u7S7ttM/pN
bhPoFBFZeE9TfdAyg2rP7nyAASNzg/TrwAGnXOBD/xyFPL0evZ5xJ5OCj+A97R8t
i2AUT/hgd157kPsp2OhxPXcFzDpRsG55Qr1Q7Wwk7eHyZTrlUzUxoO191Wa8VKN6
uiMKyLASVyw14LCyXX5qgRcxtV454+utwxJZVe7X4vn3Eaiv4u28+2EyR+guslG6
YhFiaHRRV8412x9yD779sucgbl4y1/VXdyQYvYiZjQ2rzOix3tFtGGj3UR8ZlaL5
EJAPcBa4SKXTbF8WorpvPDnRHi9UlAE4LZ3F7i8m2YWx/TGKmxiSip2paQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+FR8upeJqP0LtEYHiousSGi9LpMB8GA1UdIwQY
MBaAFMkspxg4rjPM7MXxCrVOw/xxv7uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNDZlM2EtYThjNi00NTk3LTkyODEt
OWQyNGI0MGY4ZjcyLzEveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNDZlM2EtYThjNi00NTk3LTkyODEtOWQyNGI0MGY4Zjcy
LzEveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDJuAFC7
0rFVohsD5W9Pxu3jeLDOmqTgmHc4vgIFYywc+3f9RNf0PBrSiMIjjcuPyvT/CAId
VGgAQwqWtS2m1XFN9izc8OUKUzJp3RTK4YHqdjOJwDHZDrsyjOgstBvRq0QwQeL4
zhSazAjduJAfnfdMJ81VOD7e+ZTP0ze0SYI6lafZyu2zo4ORXfUhLct+O+dL7u7F
vxkhDpQWxTxaJLTIE10N6I5B4SL8/Wilrf+jod2ZVOv6NV+UXJCczEWWTvkaKtD9
Ym/+c/hkXvjfhkVop+OL2G8iB8T6TGFHPxCcPSs6Z9tOcs9PswwR65TGJisxeF4r
jmiIcLQJbshgkA==
-----END CERTIFICATE-----