Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File:                     YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier:          aow+WepvbT8p6xAVqhLXWOXn0fyTSyJiFAoKKPLwMGI=
Subject key identifier:   92:DB:54:27:1A:DD:2B:C8:54:5F:A7:D3:8B:C1:74:A7:E1:87:84:57
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer:       /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial:       01962F07058089E1FB0DBC0EE1CE0863B85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number:          0696
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=)
                          2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: woxwGGGfK0tzWGr0BliW0JJ/kk0OJmv3N75tjPCCo5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:80:89:e1:fb:0d:bc:0e:e1:ce:08:63:b8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=92db54271add2bc8545fa7d38bc174a7e1878457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:23:57:ea:85:98:07:37:c5:2b:71:9f:16:
                    35:0a:1f:5b:30:73:94:f4:28:76:f5:52:4a:c8:3b:
                    fb:73:2c:70:fe:a3:aa:2d:bf:b5:61:48:a8:be:4a:
                    c1:cc:c2:83:a9:b6:fb:b5:73:03:85:fb:29:4a:3c:
                    e2:f2:12:0f:78:2c:2e:0b:54:1b:ea:7d:7e:26:12:
                    50:4f:81:97:b2:53:49:11:14:cf:ad:b2:11:22:cf:
                    5a:d1:a6:91:67:da:1e:b9:2d:93:1c:1b:86:3b:7a:
                    50:81:f7:d1:ee:11:3c:8e:d4:91:29:b9:00:7e:2f:
                    9f:cb:7e:14:33:da:1a:98:18:ad:4c:0a:ea:2d:4e:
                    51:e2:02:34:a7:91:1e:55:2e:93:3d:8b:dc:8f:b5:
                    93:09:7a:32:5e:00:82:5f:b7:14:f7:77:03:f3:6d:
                    81:02:d2:0a:e9:25:83:4a:67:36:db:8b:39:65:61:
                    5b:bc:3b:df:02:c7:7e:85:ce:00:be:d6:7e:87:14:
                    c5:09:ae:75:25:42:34:e6:b6:42:54:78:e6:dd:87:
                    d2:36:9e:f3:28:ad:25:5c:4f:bc:c9:ec:13:d9:dd:
                    76:73:ed:d8:fc:f6:f5:79:6b:96:26:e2:79:d9:3e:
                    60:4d:c8:5f:4d:f8:ec:e2:56:1d:67:29:69:42:da:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DB:54:27:1A:DD:2B:C8:54:5F:A7:D3:8B:C1:74:A7:E1:87:84:57
            X509v3 Authority Key Identifier:
                keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:97:5f:25:46:ce:35:08:49:5f:ac:fd:dd:ac:46:82:3a:b3:
         ec:49:12:6a:fd:52:73:58:43:c5:43:4e:86:3d:92:cc:86:d3:
         cf:04:6e:54:7c:fc:eb:39:b4:1e:37:d4:05:0a:0f:24:0e:14:
         e8:ad:76:20:99:f7:45:61:33:2a:fe:1b:89:f4:2c:11:11:97:
         1a:cf:f6:4f:21:52:cc:59:40:dd:24:84:36:79:d1:32:8a:49:
         56:34:ed:22:e9:cf:cb:03:fc:d0:47:dc:4e:c4:4e:57:ad:32:
         2c:63:94:1d:f0:dc:dd:a7:52:38:ab:b3:fc:bc:53:2e:f6:74:
         4f:84:77:4a:50:78:e9:fd:ed:c9:b7:90:93:96:9a:f9:9a:9e:
         d9:0b:fa:23:03:d6:01:19:af:46:b6:09:d8:bb:93:61:c4:ad:
         93:25:c7:51:9e:9b:39:0f:a4:a3:ae:6c:3f:c8:e2:38:01:01:
         b4:65:75:f4:cf:58:58:30:ba:d0:11:99:a6:4d:72:d1:62:86:
         99:6e:31:41:8c:0a:9f:ac:f1:ea:eb:9b:d1:5d:43:88:6d:87:
         07:0b:5d:1b:2f:a1:52:e2:cf:e7:77:17:a9:52:d9:99:51:47:
         d6:f7:ba:12:f6:6b:68:25:09:fa:4f:fc:c1:a4:eb:1c:bc:bd:
         a0:23:55:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwWAieH7DbwO4c4IY7heMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGM1YTAwMzY4ZDhhZTFmYmE5OTU0MzFmMDNhNDEzMWFk
ZDhhOWEwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
Eyg5MmRiNTQyNzFhZGQyYmM4NTQ1ZmE3ZDM4YmMxNzRhN2UxODc4NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8sjV+qFmAc3xStxnxY1Ch9bMHOU
9Ch29VJKyDv7cyxw/qOqLb+1YUiovkrBzMKDqbb7tXMDhfspSjzi8hIPeCwuC1Qb
6n1+JhJQT4GXslNJERTPrbIRIs9a0aaRZ9oeuS2THBuGO3pQgffR7hE8jtSRKbkA
fi+fy34UM9oamBitTArqLU5R4gI0p5EeVS6TPYvcj7WTCXoyXgCCX7cU93cD822B
AtIK6SWDSmc224s5ZWFbvDvfAsd+hc4AvtZ+hxTFCa51JUI05rZCVHjm3YfSNp7z
KK0lXE+8yewT2d12c+3Y/Pb1eWuWJuJ52T5gTchfTfjs4lYdZylpQtq5xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLbVCca3SvIVF+n04vBdKfhh4RXMB8GA1UdIwQY
MBaAFGDcWgA2jYrh+6mVQx8DpBMa3YqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYt
ZWJiMzk4MmMyZWIwLzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYtZWJiMzk4MmMyZWIw
LzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJdfJUbO
NQhJX6z93axGgjqz7EkSav1Sc1hDxUNOhj2SzIbTzwRuVHz86zm0HjfUBQoPJA4U
6K12IJn3RWEzKv4bifQsERGXGs/2TyFSzFlA3SSENnnRMopJVjTtIunPywP80Efc
TsROV60yLGOUHfDc3adSOKuz/LxTLvZ0T4R3SlB46f3tybeQk5aa+Zqe2Qv6IwPW
ARmvRrYJ2LuTYcStkyXHUZ6bOQ+ko65sP8jiOAEBtGV19M9YWDC60BGZpk1y0WKG
mW4xQYwKn6zx6uub0V1DiG2HBwtdGy+hUuLP53cXqVLZmVFH1ve6EvZraCUJ+k/8
waTrHLy9oCNVIA==
-----END CERTIFICATE-----