Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
File:                     Y01u7EA-_4a0D5xZgJHdQwKppyE.mft (raw, json)
Hash identifier:          XSa9JGnQvltRRPw0yc5j+iZNG6UhN3GJoUA/M0/U/y0=
Subject key identifier:   B7:6E:84:77:20:28:34:31:7A:F9:B3:9E:94:94:94:EA:F6:1D:31:6C
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Certificate issuer:       /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial:       01962E993CDB0DE8814E26525D405C4D6BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
Manifest number:          0809
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: UZAf8A9-pMDfvYbHB760wm3mim8.roa (hash: j34ASxN7++MCsv3IXa3rAjo5KvWthukAGWu5QUJzwPY=)
                          2: Y01u7EA-_4a0D5xZgJHdQwKppyE.crl (hash: SAOt2dP+uoOBEDgL+1h2G8hj0nD2PSObxjiKce2fDL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:db:0d:e8:81:4e:26:52:5d:40:5c:4d:6b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=b76e8477202834317af9b39e949494eaf61d316c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:e9:a6:23:59:8d:fa:9d:4d:3d:1d:1a:ee:
                    f9:a9:11:b2:0c:df:42:e8:d2:b7:9a:b6:4c:38:b3:
                    d7:e8:ea:45:05:23:ca:7d:b1:33:d7:2a:91:c2:4b:
                    ef:e1:e2:9c:9f:ab:98:a1:f0:4e:4f:df:ad:ed:bb:
                    4b:b5:82:c9:1c:19:de:4a:e0:e9:6e:78:34:0e:5b:
                    b3:87:21:ac:ed:fd:85:de:60:28:b8:7a:75:b3:84:
                    a5:db:53:63:2d:87:84:98:a7:ad:9e:59:ae:06:b0:
                    3f:53:cb:65:1d:30:46:14:09:8a:9c:1c:4f:11:bb:
                    0f:45:ab:be:95:a5:87:71:91:ca:24:46:44:03:40:
                    33:76:23:ee:4f:6c:9c:16:4b:1b:6d:3f:1a:ad:b5:
                    1f:76:45:eb:98:5c:02:2f:fa:a1:62:e6:45:22:44:
                    2d:3f:ea:86:1d:64:0f:cc:ea:c5:3d:06:43:6a:2f:
                    ae:97:1b:22:7f:84:e2:12:ee:73:a6:e3:62:0b:1c:
                    38:24:3b:d9:2b:f5:d4:d0:d5:44:8f:a2:29:ae:20:
                    98:fe:9b:a3:73:6e:3e:cb:0a:16:5d:2d:0e:78:5d:
                    23:9e:9b:13:1d:67:6f:a1:0d:27:f4:7c:3b:6e:c5:
                    fc:a3:50:25:74:14:7c:7d:b8:d3:72:94:50:3d:57:
                    60:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6E:84:77:20:28:34:31:7A:F9:B3:9E:94:94:94:EA:F6:1D:31:6C
            X509v3 Authority Key Identifier:
                keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:44:d2:84:98:1d:bf:40:d3:8a:a2:cc:00:6a:0c:30:0a:
         06:a2:55:ab:d2:1c:19:12:7a:74:34:71:e7:b6:1e:ac:ce:bc:
         69:5d:49:9a:51:83:57:6b:4c:6d:3d:1b:d0:6b:e3:73:2d:8a:
         74:a2:a8:39:45:e7:c9:7f:92:02:84:05:d5:82:64:74:04:26:
         9a:ea:d8:62:7d:75:79:20:47:ff:02:13:3f:01:16:4a:f9:b9:
         b3:da:4b:7e:ee:e3:bc:b6:29:9d:0f:07:9c:25:de:f4:f2:5d:
         2a:9c:84:01:9a:41:55:ed:f5:2f:cf:d1:b7:a9:67:d0:53:f8:
         bf:b9:02:ec:27:b9:7e:26:61:04:b7:77:85:12:26:6c:e6:c5:
         1b:ff:78:3a:23:2d:61:20:97:b5:78:52:9c:30:87:a3:5e:44:
         7a:f8:fd:7f:25:e9:40:43:bc:e8:50:49:8e:50:98:76:5a:5e:
         4f:fe:f3:e3:1f:aa:71:ad:64:62:65:af:40:cf:5f:b2:05:13:
         92:f7:a6:9c:6d:3b:c8:2a:27:76:6a:72:c3:f1:23:d1:91:e7:
         99:70:ac:8d:da:dd:6f:2c:2d:b8:fc:ee:5f:67:92:04:b3:f5:
         65:4f:15:50:32:ea:f6:ca:f0:5c:e1:11:cc:65:07:4c:fa:4f:
         54:dc:8a:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTzbDeiBTiZSXUBcTWvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNGQ2ZWVjNDAzZWZmODZiNDBmOWM1OTgwOTFkZDQzMDJh
OWE3MjEwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
EyhiNzZlODQ3NzIwMjgzNDMxN2FmOWIzOWU5NDk0OTRlYWY2MWQzMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+bppiNZjfqdTT0dGu75qRGyDN9C
6NK3mrZMOLPX6OpFBSPKfbEz1yqRwkvv4eKcn6uYofBOT9+t7btLtYLJHBneSuDp
bng0DluzhyGs7f2F3mAouHp1s4Sl21NjLYeEmKetnlmuBrA/U8tlHTBGFAmKnBxP
EbsPRau+laWHcZHKJEZEA0AzdiPuT2ycFksbbT8arbUfdkXrmFwCL/qhYuZFIkQt
P+qGHWQPzOrFPQZDai+ulxsif4TiEu5zpuNiCxw4JDvZK/XU0NVEj6IpriCY/puj
c24+ywoWXS0OeF0jnpsTHWdvoQ0n9Hw7bsX8o1AldBR8fbjTcpRQPVdgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLduhHcgKDQxevmznpSUlOr2HTFsMB8GA1UdIwQY
MBaAFGNNbuxAPv+GtA+cWYCR3UMCqachMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTAxdTdFQS1fNGEwRDV4WmdKSGRRd0twcHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83N2M1MzItNTljOS00MTJhLWFlYTgt
MDJiZDNkY2FlNGFkLzEvWTAxdTdFQS1fNGEwRDV4WmdKSGRRd0twcHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83N2M1MzItNTljOS00MTJhLWFlYTgtMDJiZDNkY2FlNGFk
LzEvWTAxdTdFQS1fNGEwRDV4WmdKSGRRd0twcHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/xE0oSY
Hb9A04qizABqDDAKBqJVq9IcGRJ6dDRx57YerM68aV1JmlGDV2tMbT0b0Gvjcy2K
dKKoOUXnyX+SAoQF1YJkdAQmmurYYn11eSBH/wITPwEWSvm5s9pLfu7jvLYpnQ8H
nCXe9PJdKpyEAZpBVe31L8/Rt6ln0FP4v7kC7Ce5fiZhBLd3hRImbObFG/94OiMt
YSCXtXhSnDCHo15Eevj9fyXpQEO86FBJjlCYdlpeT/7z4x+qca1kYmWvQM9fsgUT
kvemnG07yCondmpyw/Ej0ZHnmXCsjdrdbywtuPzuX2eSBLP1ZU8VUDLq9srwXOER
zGUHTPpPVNyK6w==
-----END CERTIFICATE-----