Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File:                     r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier:          9HpRu8+cIpjxFIV87Rt0w7YwsOk/QKnwRboERoAAdgQ=
Subject key identifier:   2A:C9:E2:FD:49:B2:BC:BF:D6:51:6A:36:2F:86:59:1A:8E:E5:28:06
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer:       /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial:       01962F3D697F7E3236688CE3D2F61707572B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number:          0254
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: AwvdFH2fKxZABxZKkxXwAzmTcKJlAFDqb8BGJOkCxVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:69:7f:7e:32:36:68:8c:e3:d2:f6:17:07:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=2ac9e2fd49b2bcbfd6516a362f86591a8ee52806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:8e:2a:90:8b:4e:d3:2a:0c:c5:c5:72:1b:
                    c1:a3:da:ed:1b:86:a7:1b:c7:25:5e:e3:a3:8c:a7:
                    0e:71:c6:c4:3e:fb:f0:77:80:d4:5c:57:bf:bc:c3:
                    e7:6e:0b:f4:bd:97:16:f9:06:ca:c2:7f:31:e2:36:
                    45:89:b5:aa:51:05:ea:79:86:a2:6f:a1:22:92:5c:
                    17:3e:1f:d1:14:56:46:b4:d8:fe:fc:d5:23:73:59:
                    b7:e8:02:ee:cd:f7:3e:6e:22:4a:94:1b:f9:92:81:
                    02:a5:7f:50:f7:ff:fe:c3:7d:67:61:9f:d9:e6:9e:
                    a2:f0:4c:e4:72:b8:20:b7:04:c8:b8:fe:da:0f:69:
                    e8:fc:c2:0c:cc:79:a8:5e:86:e1:e7:d5:55:58:4d:
                    81:1d:04:4a:68:7b:4e:9d:86:83:5d:a1:e0:98:d6:
                    5d:c4:76:be:09:b6:ca:e3:47:fd:ae:3a:e0:dd:20:
                    06:32:6a:c6:a9:08:30:f3:99:c6:69:1c:c4:25:bf:
                    cf:cd:c5:e3:10:e0:9b:50:4c:f0:aa:3a:80:82:e5:
                    d2:79:3e:c8:80:0b:1c:6c:ff:5a:6a:6d:47:66:72:
                    6c:0c:bb:f2:cc:76:5a:f9:56:96:ce:79:eb:50:b9:
                    46:33:53:11:06:06:8b:41:6b:72:9c:9d:e8:af:f3:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C9:E2:FD:49:B2:BC:BF:D6:51:6A:36:2F:86:59:1A:8E:E5:28:06
            X509v3 Authority Key Identifier:
                keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2f:58:66:76:3b:7d:8d:19:6b:0c:b9:d6:4a:92:ca:6a:68:
         93:56:39:45:9d:1e:bb:3a:c9:39:64:3a:9b:f8:f8:b7:04:9e:
         ae:35:5c:38:05:e0:92:fb:5f:b8:50:ec:b4:e8:09:81:fd:94:
         c2:62:b7:b3:5b:2c:6b:06:f0:f7:31:8f:38:0f:ad:18:49:c4:
         ce:1d:73:29:1f:db:aa:7a:d1:1f:b2:d7:ca:b3:4d:d5:51:3e:
         98:84:97:9c:d4:38:19:74:64:65:85:52:cd:8c:4b:91:98:55:
         1d:76:a8:de:0a:3e:ee:23:80:e0:41:f5:1e:17:c7:b5:63:ea:
         4c:90:b3:7d:2d:17:ef:c4:24:84:0b:a0:e8:81:62:7f:61:2e:
         3b:8f:85:91:99:04:a9:b9:74:4e:4b:46:d8:69:e2:dd:96:7b:
         c7:cc:60:b0:9a:e2:10:08:8a:55:d9:8f:c2:ad:f0:4d:40:77:
         e0:ce:65:30:b0:2e:f9:4f:4d:53:0e:2e:1e:4c:79:2b:a1:00:
         56:64:59:92:5c:9a:70:8e:dc:9b:bd:0b:72:68:c6:ab:98:08:
         f5:78:29:c2:a6:30:a6:4d:eb:c2:70:ad:3d:fd:8a:a4:f7:84:
         8e:9a:4d:d1:25:e2:a7:fe:d2:e7:d1:55:5c:a5:dc:07:c7:e6:
         e3:28:15:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWl/fjI2aIzj0vYXB1crMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmNhN2Y2ZGE2ODljYzU0NWJiYmI5NTAzOThiYWM0MDc5
NzlhYTMwHhcNMjUwNDEzMTMwMTE1WhcNMjUwNDE0MTMwMTE1WjAzMTEwLwYDVQQD
EygyYWM5ZTJmZDQ5YjJiY2JmZDY1MTZhMzYyZjg2NTkxYThlZTUyODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveKOKpCLTtMqDMXFchvBo9rtG4an
G8clXuOjjKcOccbEPvvwd4DUXFe/vMPnbgv0vZcW+QbKwn8x4jZFibWqUQXqeYai
b6EiklwXPh/RFFZGtNj+/NUjc1m36ALuzfc+biJKlBv5koECpX9Q9//+w31nYZ/Z
5p6i8EzkcrggtwTIuP7aD2no/MIMzHmoXobh59VVWE2BHQRKaHtOnYaDXaHgmNZd
xHa+CbbK40f9rjrg3SAGMmrGqQgw85nGaRzEJb/PzcXjEOCbUEzwqjqAguXSeT7I
gAscbP9aam1HZnJsDLvyzHZa+VaWznnrULlGM1MRBgaLQWtynJ3or/MQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrJ4v1Jsry/1lFqNi+GWRqO5SgGMB8GA1UdIwQY
MBaAFK/8p/baaJzFRbu7lQOYusQHl5qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEt
MTk4NWIwYjA4MjVlLzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEtMTk4NWIwYjA4MjVl
LzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPC9YZnY7
fY0Zawy51kqSympok1Y5RZ0euzrJOWQ6m/j4twSerjVcOAXgkvtfuFDstOgJgf2U
wmK3s1ssawbw9zGPOA+tGEnEzh1zKR/bqnrRH7LXyrNN1VE+mISXnNQ4GXRkZYVS
zYxLkZhVHXao3go+7iOA4EH1HhfHtWPqTJCzfS0X78QkhAug6IFif2EuO4+FkZkE
qbl0TktG2Gni3ZZ7x8xgsJriEAiKVdmPwq3wTUB34M5lMLAu+U9NUw4uHkx5K6EA
VmRZklyacI7cm70LcmjGq5gI9XgpwqYwpk3rwnCtPf2KpPeEjppN0SXip/7S59FV
XKXcB8fm4ygVQA==
-----END CERTIFICATE-----