Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File:                     y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier:          LnUOl0jkD+O0oGUM5AuFW/k0+7knxyOkxi1EMQa39Rw=
Subject key identifier:   A5:61:59:07:00:CD:B7:A0:04:22:90:E5:9A:84:AD:97:C8:EB:32:86
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer:       /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial:       01962FAB4C6217F294035E5010D7160941C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa (hash: M6xcVpwF4WkFbvgKn4KRPQKsmRd0Zva6dQ1TxO+Djpg=)
                          2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: 7FjL6EejUpWbdUoVXinD4hVnG5bMD4PruzfAzp6lDxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4c:62:17:f2:94:03:5e:50:10:d7:16:09:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=a561590700cdb7a0042290e59a84ad97c8eb3286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:04:6a:a7:16:7c:c0:a5:f1:8a:ab:f2:7d:
                    a8:31:6e:98:2b:c6:c2:70:48:35:e8:cf:fe:1c:23:
                    d7:94:38:f0:19:91:18:5d:d6:e8:16:41:f8:9e:a8:
                    46:79:a0:21:1c:9a:04:2f:e2:17:b7:37:b1:51:9f:
                    de:e4:ac:66:ae:c0:9e:1b:00:6d:29:a0:49:df:64:
                    9b:3d:a2:18:dc:9b:ad:44:a5:52:99:a6:8e:18:79:
                    75:93:9f:f4:66:ce:2c:4a:ef:76:3c:fb:9b:86:71:
                    16:a0:29:4c:24:9e:ae:13:a5:50:46:34:d4:fc:af:
                    2c:19:94:92:fa:30:c8:13:83:91:7e:db:2a:f8:f4:
                    ab:88:ea:d4:91:b5:b0:28:94:64:98:35:ad:5f:a8:
                    77:eb:f0:9e:4c:a0:14:27:77:42:75:b2:19:31:f4:
                    7a:97:d6:83:72:81:d2:e7:89:e6:a7:d4:06:cb:b3:
                    24:4a:73:62:52:96:13:f3:ce:e2:8a:6c:7c:32:dd:
                    b4:e4:a5:fb:29:fd:de:2a:6e:8b:32:01:7b:77:91:
                    ef:45:7a:5d:27:f8:e5:f1:c4:e3:a3:12:1d:5d:7b:
                    c0:91:16:10:3f:30:cc:d9:f1:81:98:cb:a7:3d:5b:
                    8d:e5:8a:70:d6:4b:da:63:62:f1:83:3f:f7:78:28:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:61:59:07:00:CD:B7:A0:04:22:90:E5:9A:84:AD:97:C8:EB:32:86
            X509v3 Authority Key Identifier:
                keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:91:0b:07:64:5d:94:67:a0:3a:4b:cb:f8:a4:b4:19:3b:
         6d:8d:6c:24:5f:2a:9a:38:ed:88:64:fe:5c:ac:4e:cc:60:db:
         2f:fa:0c:b4:7c:53:2e:86:ab:c1:f7:66:ad:87:d3:0b:95:63:
         e8:33:44:06:17:71:ca:52:2c:24:2c:a5:8d:8a:17:98:3b:90:
         59:5e:3d:c6:28:2d:d4:4a:ac:54:5a:dc:31:63:69:11:c7:8a:
         f0:24:38:c9:93:1a:6b:5b:90:ce:2d:54:1f:56:b0:e5:16:50:
         1c:e2:81:36:90:e4:26:46:02:be:31:23:da:00:3a:f1:83:e3:
         58:28:c8:a7:ef:2a:b7:6d:3a:e1:5d:04:05:8e:09:cc:8f:47:
         da:af:73:bf:57:f9:93:65:dd:92:92:82:30:90:2e:23:7e:e1:
         fe:0e:44:29:fe:4a:ff:14:07:af:3b:81:77:b7:bd:8b:eb:18:
         ac:bb:d8:05:32:ac:33:8b:31:59:99:ac:bd:66:d2:56:60:1b:
         f2:40:05:8b:8d:dd:ec:1f:8f:14:9f:6e:d0:ec:c6:dd:ce:6d:
         90:a6:2a:41:51:13:39:8a:15:5e:30:33:de:f0:da:6b:4b:87:
         a1:b1:43:c7:ff:1c:76:4a:d9:97:3a:40:7f:6e:f1:35:21:c4:
         a0:ca:67:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0xiF/KUA15QENcWCUHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx
NDE1ZGYwHhcNMjUwNDEzMTUwMTE3WhcNMjUwNDE0MTUwMTE3WjAzMTEwLwYDVQQD
EyhhNTYxNTkwNzAwY2RiN2EwMDQyMjkwZTU5YTg0YWQ5N2M4ZWIzMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLAEaqcWfMCl8Yqr8n2oMW6YK8bC
cEg16M/+HCPXlDjwGZEYXdboFkH4nqhGeaAhHJoEL+IXtzexUZ/e5KxmrsCeGwBt
KaBJ32SbPaIY3JutRKVSmaaOGHl1k5/0Zs4sSu92PPubhnEWoClMJJ6uE6VQRjTU
/K8sGZSS+jDIE4ORftsq+PSriOrUkbWwKJRkmDWtX6h36/CeTKAUJ3dCdbIZMfR6
l9aDcoHS54nmp9QGy7MkSnNiUpYT887iimx8Mt205KX7Kf3eKm6LMgF7d5HvRXpd
J/jl8cTjoxIdXXvAkRYQPzDM2fGBmMunPVuN5Ypw1kvaY2Lxgz/3eChYjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVhWQcAzbegBCKQ5ZqErZfI6zKGMB8GA1UdIwQY
MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt
YzZmNmQ0NDQ5MTVmLzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm
LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk+RCwdk
XZRnoDpLy/iktBk7bY1sJF8qmjjtiGT+XKxOzGDbL/oMtHxTLoarwfdmrYfTC5Vj
6DNEBhdxylIsJCyljYoXmDuQWV49xigt1EqsVFrcMWNpEceK8CQ4yZMaa1uQzi1U
H1aw5RZQHOKBNpDkJkYCvjEj2gA68YPjWCjIp+8qt2064V0EBY4JzI9H2q9zv1f5
k2XdkpKCMJAuI37h/g5EKf5K/xQHrzuBd7e9i+sYrLvYBTKsM4sxWZmsvWbSVmAb
8kAFi43d7B+PFJ9u0OzG3c5tkKYqQVETOYoVXjAz3vDaa0uHobFDx/8cdkrZlzpA
f27xNSHEoMpnlw==
-----END CERTIFICATE-----