Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File:                     YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier:          ErMsl7QqsQfeFkUE2wCmGSHjV/AD4t3kRH9gDJFnwH0=
Subject key identifier:   2E:A0:02:23:01:7D:85:93:BA:E8:5C:EF:A8:9B:62:B3:BF:87:F6:47
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer:       /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial:       01962F74479878D07F43236FD0C782C7B6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number:          0546
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
                          2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: rYOUSHBf3Dxqc3wyGo9YxK6hzwUABgH4Qip0OZ32ECA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:47:98:78:d0:7f:43:23:6f:d0:c7:82:c7:b6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602d570b542e7302885d367418df802f99494f26
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=2ea00223017d8593bae85cefa89b62b3bf87f647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:e3:06:b0:22:2b:4e:94:ee:c4:a2:c9:d3:
                    9d:db:4b:21:df:9c:32:e6:fc:76:4d:7b:44:1a:b6:
                    fe:7c:d5:f3:b6:a0:02:a8:fa:ad:81:82:0f:49:1d:
                    96:cc:f3:1b:2d:0b:68:ff:0a:99:c7:f6:6a:fa:32:
                    25:a8:5d:4e:08:95:4c:c6:fd:d2:bf:c7:62:8f:b1:
                    f5:cd:5e:14:fb:5d:5f:18:cc:d1:f1:d4:93:02:c7:
                    ff:f8:9f:88:af:be:fc:3f:37:91:6e:1f:ab:45:f6:
                    bf:07:f0:d5:5c:37:6f:06:4f:3a:9d:59:3a:e8:72:
                    9b:9b:86:f1:f1:c4:90:3c:4f:e4:3c:5c:2e:8f:46:
                    5b:e0:e5:ae:97:76:b2:c2:2a:6c:07:ea:fa:c6:b6:
                    8a:f2:f3:d6:c8:da:a0:b3:32:59:ef:9e:46:a4:1b:
                    f7:5c:bf:19:e5:f7:5c:25:29:4f:78:f4:8f:1f:9f:
                    98:d4:da:ee:80:e7:da:80:50:d3:09:ee:7d:04:cf:
                    c6:86:5b:e8:e8:8c:8a:b0:6c:9f:48:3f:f4:7d:82:
                    86:14:9a:aa:c0:13:23:93:e2:14:f7:7f:2a:0a:83:
                    cd:78:8b:3e:6f:4e:56:bb:cb:9e:8e:1d:03:b7:59:
                    ff:ad:5d:df:d2:36:86:be:56:f7:64:65:dd:1c:6a:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:02:23:01:7D:85:93:BA:E8:5C:EF:A8:9B:62:B3:BF:87:F6:47
            X509v3 Authority Key Identifier:
                keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:55:17:92:14:30:3b:79:ff:5e:22:4c:9f:a2:3d:c9:b9:5f:
         87:53:94:98:cf:32:5a:71:37:d5:10:37:2b:79:0d:fb:95:22:
         c9:2f:9b:a8:5e:d6:c7:5e:9b:b1:43:fd:cb:99:a3:55:01:b8:
         bb:fa:fc:2c:98:55:d8:7d:32:1b:f1:f7:8a:c4:19:ad:42:76:
         f3:86:d4:ed:96:54:89:69:3d:32:01:c2:0d:bc:cf:89:44:7a:
         3e:e0:4f:8e:19:0b:73:6d:4d:46:dd:e2:6f:ee:00:f4:f4:38:
         46:00:4a:02:f4:93:d2:3d:02:70:d3:71:dd:b6:92:e1:41:db:
         3c:38:76:e1:89:04:41:b3:ea:e2:e8:a1:06:d6:8e:52:48:1c:
         55:74:e9:ff:15:ad:f6:f3:54:04:6a:9b:7b:c9:b8:38:5d:8f:
         f9:ae:da:69:97:1f:1a:93:70:86:99:4d:6d:d2:39:17:5e:e3:
         97:7c:8f:64:6d:53:34:c9:3e:fd:8e:a2:2a:e6:ba:14:d1:c4:
         f8:3b:66:58:42:67:5e:d6:8a:d0:08:00:e5:ee:46:10:e9:12:
         eb:1b:09:fb:c6:3c:18:43:b6:0b:82:ae:89:95:7d:0e:f0:82:
         83:ed:06:f9:98:be:17:8f:27:61:d5:b9:b3:51:0b:22:9b:78:
         3a:45:38:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEeYeNB/QyNv0MeCx7a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmQ1NzBiNTQyZTczMDI4ODVkMzY3NDE4ZGY4MDJmOTk0
OTRmMjYwHhcNMjUwNDEzMTQwMTExWhcNMjUwNDE0MTQwMTExWjAzMTEwLwYDVQQD
EygyZWEwMDIyMzAxN2Q4NTkzYmFlODVjZWZhODliNjJiM2JmODdmNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrTjBrAiK06U7sSiydOd20sh35wy
5vx2TXtEGrb+fNXztqACqPqtgYIPSR2WzPMbLQto/wqZx/Zq+jIlqF1OCJVMxv3S
v8dij7H1zV4U+11fGMzR8dSTAsf/+J+Ir778PzeRbh+rRfa/B/DVXDdvBk86nVk6
6HKbm4bx8cSQPE/kPFwuj0Zb4OWul3aywipsB+r6xraK8vPWyNqgszJZ755GpBv3
XL8Z5fdcJSlPePSPH5+Y1NrugOfagFDTCe59BM/Ghlvo6IyKsGyfSD/0fYKGFJqq
wBMjk+IU938qCoPNeIs+b05Wu8uejh0Dt1n/rV3f0jaGvlb3ZGXdHGpbVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6gAiMBfYWTuuhc76ibYrO/h/ZHMB8GA1UdIwQY
MBaAFGAtVwtULnMCiF02dBjfgC+ZSU8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQt
YTNkM2RlZGIyNjA4LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQtYTNkM2RlZGIyNjA4
LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllUXkhQw
O3n/XiJMn6I9yblfh1OUmM8yWnE31RA3K3kN+5UiyS+bqF7Wx16bsUP9y5mjVQG4
u/r8LJhV2H0yG/H3isQZrUJ284bU7ZZUiWk9MgHCDbzPiUR6PuBPjhkLc21NRt3i
b+4A9PQ4RgBKAvST0j0CcNNx3baS4UHbPDh24YkEQbPq4uihBtaOUkgcVXTp/xWt
9vNUBGqbe8m4OF2P+a7aaZcfGpNwhplNbdI5F17jl3yPZG1TNMk+/Y6iKua6FNHE
+DtmWEJnXtaK0AgA5e5GEOkS6xsJ+8Y8GEO2C4KuiZV9DvCCg+0G+Zi+F48nYdW5
s1ELIpt4OkU4bw==
-----END CERTIFICATE-----