Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File:                     _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier:          pVyYERIZASLtaWqqd3BO4BPDp7K5TuiSmjmwu7eNNYQ=
Subject key identifier:   4A:87:9D:8E:01:78:13:B1:D4:30:E6:CF:94:84:BD:D3:51:E4:41:10
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer:       /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial:       01962E9916A5207F9A0BA5DD04D86F49BC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number:          02F5
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
                          2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: r/sPkYdTZXNviV8sALYnUG43wEbGAMo98qR5GcjqS88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:a5:20:7f:9a:0b:a5:dd:04:d8:6f:49:bc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=4a879d8e017813b1d430e6cf9484bdd351e44110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:18:6e:91:2f:d4:22:ac:04:50:0b:30:53:
                    75:c0:4a:40:05:cc:d4:35:3b:2a:ea:e2:ef:73:a9:
                    97:44:95:92:f5:1b:6d:bc:52:70:e5:4d:72:1f:ea:
                    15:0d:91:ab:b0:a5:2e:4a:dd:3c:ce:67:50:00:1a:
                    b4:6b:44:82:53:52:9e:14:83:d7:e4:3e:13:56:ed:
                    ba:90:62:a1:b2:6e:09:fc:0d:15:c2:f1:90:e8:e7:
                    6f:11:b7:c7:7d:3f:52:ed:05:01:1b:88:b0:29:43:
                    d8:7e:56:d8:c1:6e:b0:c8:d1:44:2b:c3:8e:1a:58:
                    af:92:e1:54:42:fc:30:4f:85:02:81:3c:c0:90:fc:
                    26:92:bc:49:aa:a8:76:eb:82:c3:63:91:80:46:40:
                    83:9d:ae:72:c6:56:3e:9b:78:6f:91:e4:4a:96:64:
                    ae:12:36:8e:90:62:fc:fd:52:9f:91:25:63:3a:34:
                    b2:d9:d3:5a:c4:a0:fb:05:3e:32:33:3d:38:6f:7c:
                    1d:b5:b3:3a:43:0f:29:05:7b:65:66:09:1c:f1:95:
                    ff:39:6b:74:2c:da:39:1f:d3:8e:b6:18:b7:a1:0c:
                    54:d2:fa:2b:01:56:d6:34:ba:3b:6b:d4:40:cb:4b:
                    b5:c8:1d:93:2d:12:43:9a:0b:29:a4:30:35:c4:78:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:87:9D:8E:01:78:13:B1:D4:30:E6:CF:94:84:BD:D3:51:E4:41:10
            X509v3 Authority Key Identifier:
                keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:93:c6:11:a9:36:0b:f3:dc:34:52:e4:fd:2f:a6:e7:2a:
         da:ef:64:d9:bc:15:fe:fc:6a:5d:15:44:6f:27:55:28:fc:be:
         d8:47:0c:30:bd:91:d9:1d:2c:30:88:25:9e:cc:d0:0b:3b:e7:
         b0:89:bb:b0:2f:7f:e8:38:56:a5:4d:6a:c2:35:ce:96:aa:1f:
         50:18:46:18:97:48:7e:1b:45:08:ac:63:ff:0d:e8:49:3e:5e:
         59:e1:24:58:a4:f8:6c:ae:e2:92:66:fd:ab:3e:0e:19:eb:a0:
         77:9b:a3:51:b8:70:83:14:66:40:f2:db:eb:20:95:09:e2:c7:
         89:7b:4d:48:e5:cd:e4:2d:97:5a:4b:e3:c6:a0:12:bd:a7:e8:
         e7:ee:2f:0d:9d:fb:45:9c:ac:a5:8f:ff:48:d0:d1:4e:ee:ba:
         43:fe:77:d2:3c:08:d5:52:e5:82:dd:3c:16:d2:99:ca:92:5e:
         2b:40:fc:c1:d3:58:0b:c5:56:84:da:a5:8f:47:6c:d6:10:2c:
         d3:9f:f0:63:30:8b:f0:9d:33:dc:f6:b7:21:02:84:8f:cf:b2:
         e6:87:ca:2f:63:0e:30:21:30:93:03:fe:a3:da:99:64:5e:a8:
         ef:b9:9d:7f:31:57:8d:76:43:86:78:fe:b6:7d:fd:e2:43:b6:
         23:d9:66:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRalIH+aC6XdBNhvSbyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw
NGU3ZGUwHhcNMjUwNDEzMTAwMTQ2WhcNMjUwNDE0MTAwMTQ2WjAzMTEwLwYDVQQD
Eyg0YTg3OWQ4ZTAxNzgxM2IxZDQzMGU2Y2Y5NDg0YmRkMzUxZTQ0MTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U0YbpEv1CKsBFALMFN1wEpABczU
NTsq6uLvc6mXRJWS9RttvFJw5U1yH+oVDZGrsKUuSt08zmdQABq0a0SCU1KeFIPX
5D4TVu26kGKhsm4J/A0VwvGQ6OdvEbfHfT9S7QUBG4iwKUPYflbYwW6wyNFEK8OO
GlivkuFUQvwwT4UCgTzAkPwmkrxJqqh264LDY5GARkCDna5yxlY+m3hvkeRKlmSu
EjaOkGL8/VKfkSVjOjSy2dNaxKD7BT4yMz04b3wdtbM6Qw8pBXtlZgkc8ZX/OWt0
LNo5H9OOthi3oQxU0vorAVbWNLo7a9RAy0u1yB2TLRJDmgsppDA1xHji7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqHnY4BeBOx1DDmz5SEvdNR5EEQMB8GA1UdIwQY
MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt
Y2FmMmY3YTViNWY0LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0
LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIWTxhGp
Ngvz3DRS5P0vpucq2u9k2bwV/vxqXRVEbydVKPy+2EcMML2R2R0sMIglnszQCzvn
sIm7sC9/6DhWpU1qwjXOlqofUBhGGJdIfhtFCKxj/w3oST5eWeEkWKT4bK7ikmb9
qz4OGeugd5ujUbhwgxRmQPLb6yCVCeLHiXtNSOXN5C2XWkvjxqASvafo5+4vDZ37
RZyspY//SNDRTu66Q/530jwI1VLlgt08FtKZypJeK0D8wdNYC8VWhNqlj0ds1hAs
05/wYzCL8J0z3Pa3IQKEj8+y5ofKL2MOMCEwkwP+o9qZZF6o77mdfzFXjXZDhnj+
tn394kO2I9lm3g==
-----END CERTIFICATE-----