Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File:                     1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier:          EMw6ZS9UWc4j+8HFca/CpZhPNma/cDcIYtwlw9U1JmU=
Subject key identifier:   D0:88:82:9F:95:5A:EE:24:F9:45:A8:42:ED:EF:82:33:31:B5:A5:64
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer:       /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial:       01962DF44028CAAED486FCDC4802A2691EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number:          0583
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: gMGlEgHS/rawSub7xNPOlSeLbJnfbyMjNyeq7iOoX+0=)
                          2: 1Xq5NcZrjlFL23QLXPQ2cW-IBls.roa (hash: HbBq96j6XF4InfiwCDfEHXOlCXag1YicK/gCEex0C0Y=)
                          3: WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa (hash: mxYAtiu5jjm0C1BeKBzzTHZkmyPXrcSCe59vx0mWEsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:40:28:ca:ae:d4:86:fc:dc:48:02:a2:69:1e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=d088829f955aee24f945a842edef823331b5a564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:e2:00:09:4c:95:7b:2a:94:fa:d0:89:f1:
                    5d:a4:6a:41:77:29:19:71:64:4e:0c:3a:78:61:d1:
                    91:95:f6:54:71:1c:12:28:8b:53:02:64:a1:7a:74:
                    7b:49:94:76:4c:63:d4:25:b1:1d:1a:c6:42:88:f4:
                    79:ee:f3:1d:7a:8c:ef:cd:57:9c:44:b4:c5:29:09:
                    bd:6a:23:2d:91:2d:3b:04:47:1c:8a:2f:37:81:0c:
                    12:19:bc:63:a1:c3:53:2c:9d:b0:87:c0:e1:c3:0b:
                    f8:cd:98:65:fd:19:67:26:d0:07:47:29:ee:2c:dd:
                    5e:54:13:73:a9:a4:03:15:ab:0d:5b:26:38:25:8c:
                    3f:81:9b:50:c6:2e:b3:65:8c:a1:a1:63:a8:8a:53:
                    83:a1:52:ce:d1:4b:7c:2b:fb:08:ef:5d:47:ec:fd:
                    53:09:8c:2d:70:c1:d5:03:19:ff:8d:62:a9:1d:ed:
                    d9:99:54:88:e7:80:f0:2f:db:82:fb:d7:f5:c8:63:
                    fe:e6:1b:64:9c:38:ff:b8:ef:eb:d5:7c:c8:8e:8f:
                    56:c3:8c:32:cc:30:1f:d2:1c:68:54:ad:ad:e9:44:
                    ba:87:f8:9d:58:98:34:33:f3:f9:8f:0f:78:eb:a5:
                    5f:23:19:26:dd:d4:ac:e2:80:6d:ba:bb:64:27:e1:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:88:82:9F:95:5A:EE:24:F9:45:A8:42:ED:EF:82:33:31:B5:A5:64
            X509v3 Authority Key Identifier:
                keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a0:d5:dd:b2:86:de:1c:c5:4d:18:ea:91:7f:1f:46:de:60:
         c8:74:e8:83:0b:04:de:f3:41:59:e1:93:ab:dc:09:af:88:2e:
         91:6c:0d:cc:f4:44:82:38:4d:f7:e0:31:8b:39:4f:ab:35:d3:
         64:83:08:b4:63:a4:1d:ac:8c:1c:49:b0:c8:e1:be:eb:be:86:
         f5:8f:14:99:b2:d6:2e:8a:e1:f9:33:01:e2:81:a0:a8:69:57:
         1c:a7:d4:67:84:88:71:4e:dc:5a:dc:af:ed:28:9a:18:ca:76:
         7d:71:85:7d:01:e7:fc:80:b0:4d:52:ae:81:c1:2a:f6:08:24:
         37:07:91:d2:48:ae:8d:a1:eb:36:db:06:d4:bd:91:47:8c:99:
         e0:5a:89:c8:b6:fc:24:7e:a9:23:a8:0f:ff:cb:7d:f5:c7:5c:
         32:ed:22:0b:6b:a6:00:35:d3:af:a6:ef:b1:ec:ec:4a:50:ce:
         10:85:01:01:f0:fa:2f:f7:18:fc:a3:14:57:79:67:ab:08:c0:
         b3:dd:cf:c2:3d:3f:de:c6:29:66:95:3b:e6:b2:53:39:60:d6:
         53:9e:f0:56:a6:14:92:d1:9a:5c:00:72:40:f1:92:1b:7d:05:
         7a:47:68:27:8c:49:e1:d8:f2:8f:7f:db:5b:23:3f:a6:a6:c6:
         c9:18:22:64
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYt9EAoyq7UhvzcSAKiaR66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2
NDQwODEwHhcNMjUwNDEzMDcwMTQ0WhcNMjUwNDE0MDcwMTQ0WjAzMTEwLwYDVQQD
EyhkMDg4ODI5Zjk1NWFlZTI0Zjk0NWE4NDJlZGVmODIzMzMxYjVhNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb/iAAlMlXsqlPrQifFdpGpBdykZ
cWRODDp4YdGRlfZUcRwSKItTAmShenR7SZR2TGPUJbEdGsZCiPR57vMdeozvzVec
RLTFKQm9aiMtkS07BEccii83gQwSGbxjocNTLJ2wh8Dhwwv4zZhl/RlnJtAHRynu
LN1eVBNzqaQDFasNWyY4JYw/gZtQxi6zZYyhoWOoilODoVLO0Ut8K/sI711H7P1T
CYwtcMHVAxn/jWKpHe3ZmVSI54DwL9uC+9f1yGP+5htknDj/uO/r1XzIjo9Ww4wy
zDAf0hxoVK2t6US6h/idWJg0M/P5jw9466VfIxkm3dSs4oBturtkJ+H2ZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNCIgp+VWu4k+UWoQu3vgjMxtaVkMB8GA1UdIwQY
MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk
LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi
M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqDV
3bKG3hzFTRjqkX8fRt5gyHTogwsE3vNBWeGTq9wJr4gukWwNzPREgjhN9+AxizlP
qzXTZIMItGOkHayMHEmwyOG+676G9Y8UmbLWLorh+TMB4oGgqGlXHKfUZ4SIcU7c
Wtyv7SiaGMp2fXGFfQHn/ICwTVKugcEq9ggkNweR0kiujaHrNtsG1L2RR4yZ4FqJ
yLb8JH6pI6gP/8t99cdcMu0iC2umADXTr6bvsezsSlDOEIUBAfD6L/cY/KMUV3ln
qwjAs93Pwj0/3sYpZpU75rJTOWDWU57wVqYUktGaXAByQPGSG30FekdoJ4xJ4djy
j3/bWyM/pqbGyRgiZA==
-----END CERTIFICATE-----