Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
File:                     Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json)
Hash identifier:          zpaJYwiA4ax4XGU311gvYnn3mK20RcyUVPvO1y9x3rw=
Subject key identifier:   CF:2D:FB:F6:8B:6E:EF:2A:0B:EC:2D:C2:F2:F5:87:48:09:55:1F:F3
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Certificate issuer:       /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial:       01962ECF55D3A8D2C06E126091D3C33046CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
Manifest number:          1049
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=)
                          2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: XGlnuALwK7GmLjgRqCTQpoiOv9zkv4UwZsqcv/zEGsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:55:d3:a8:d2:c0:6e:12:60:91:d3:c3:30:46:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=cf2dfbf68b6eef2a0bec2dc2f2f5874809551ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:ad:20:17:08:88:a7:3a:7e:61:53:41:8a:
                    69:4e:80:22:22:65:31:d8:dc:37:50:22:b2:2a:db:
                    06:12:ba:c2:79:7a:74:3a:01:9c:fa:4d:e9:f5:17:
                    af:fa:a9:1b:28:27:fc:1a:c8:15:e7:4b:3b:2f:87:
                    55:7d:2c:b3:84:15:32:00:f3:13:e2:3f:fa:2c:35:
                    f5:5a:62:6b:d2:78:44:0b:c2:a1:9a:29:bc:87:c5:
                    2e:35:fb:e8:7e:f7:9e:e6:1a:61:b6:49:72:58:32:
                    05:e6:07:d3:a4:ac:ae:a2:06:bb:bc:10:a2:9c:85:
                    f6:65:3a:8b:43:c3:1b:a7:59:35:d5:d0:45:8b:6e:
                    bf:2e:dc:c4:c5:8f:47:a8:1a:87:5a:d4:7e:78:66:
                    2e:fd:82:48:96:4f:88:d9:c7:b7:49:99:a6:ba:f0:
                    2d:b7:b7:f3:4d:a8:91:aa:12:2b:74:09:f6:df:7a:
                    e7:d6:2a:9c:9e:7f:58:b5:0b:51:54:85:f0:48:7b:
                    be:c7:da:dc:dc:5d:50:c1:47:2d:e4:db:03:5d:8f:
                    0d:88:41:bb:e9:97:da:be:dc:f2:cd:8d:b7:7e:7a:
                    fd:86:3d:f9:96:f2:85:42:4c:b3:71:10:fe:6f:b2:
                    68:e8:54:f1:8d:a6:7f:14:6a:6a:88:43:9c:19:59:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:FB:F6:8B:6E:EF:2A:0B:EC:2D:C2:F2:F5:87:48:09:55:1F:F3
            X509v3 Authority Key Identifier:
                keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:06:a2:3a:3f:ad:7f:1d:d1:16:db:e5:38:a5:ea:e5:6f:77:
         75:78:a5:1f:d9:98:7c:2c:22:02:0a:31:2a:4c:27:3d:b1:49:
         1d:b1:cb:42:10:71:ed:c5:3f:cb:3b:a9:42:24:e9:e1:9a:e4:
         13:40:fa:6c:31:09:9c:a1:81:46:0b:e6:60:17:6c:cc:52:12:
         52:3b:60:d1:c1:ff:74:4a:cd:69:90:b0:83:9a:35:ec:c2:73:
         2d:ce:e3:af:6b:f5:43:5c:61:60:5f:42:a7:96:81:5a:99:d9:
         e7:b9:b1:d9:10:e1:7f:73:52:54:6d:80:d2:ec:1a:fd:1d:35:
         8d:a3:53:38:ea:80:dd:a7:23:77:14:31:e1:1b:3f:0e:81:0a:
         42:c4:14:dd:f9:6e:e6:9d:49:aa:09:77:90:53:1f:e5:b5:9e:
         c2:2c:9f:2c:cd:86:cc:f1:51:36:99:30:ba:e0:d7:d6:49:3a:
         18:d3:f7:51:88:6d:8e:fc:98:af:ec:c1:2d:29:84:6f:10:c1:
         0c:0a:d6:ae:f4:91:0e:dc:96:18:77:eb:3a:30:1f:be:9a:90:
         a2:6f:21:7a:f8:6e:7f:a3:73:86:e3:95:8f:95:27:c0:11:b3:
         e3:b1:26:51:90:87:82:6c:83:85:bd:3a:b1:1b:9e:88:61:24:
         b1:ff:ed:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1XTqNLAbhJgkdPDMEbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTkzZjA4YTQ1ZDJiN2M3NGJmNWRlMDFiMjUyMjAxNjAy
YWVlZTgwHhcNMjUwNDEzMTEwMTAxWhcNMjUwNDE0MTEwMTAxWjAzMTEwLwYDVQQD
EyhjZjJkZmJmNjhiNmVlZjJhMGJlYzJkYzJmMmY1ODc0ODA5NTUxZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8utIBcIiKc6fmFTQYppToAiImUx
2Nw3UCKyKtsGErrCeXp0OgGc+k3p9Rev+qkbKCf8GsgV50s7L4dVfSyzhBUyAPMT
4j/6LDX1WmJr0nhEC8Khmim8h8UuNfvofvee5hphtklyWDIF5gfTpKyuoga7vBCi
nIX2ZTqLQ8Mbp1k11dBFi26/LtzExY9HqBqHWtR+eGYu/YJIlk+I2ce3SZmmuvAt
t7fzTaiRqhIrdAn233rn1iqcnn9YtQtRVIXwSHu+x9rc3F1QwUct5NsDXY8NiEG7
6ZfavtzyzY23fnr9hj35lvKFQkyzcRD+b7Jo6FTxjaZ/FGpqiEOcGVkF3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8t+/aLbu8qC+wtwvL1h0gJVR/zMB8GA1UdIwQY
MBaAFGLpPwikXSt8dL9d4BslIgFgKu7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMt
N2VhNjVjMTJlOGVjLzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMtN2VhNjVjMTJlOGVj
LzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAaiOj+t
fx3RFtvlOKXq5W93dXilH9mYfCwiAgoxKkwnPbFJHbHLQhBx7cU/yzupQiTp4Zrk
E0D6bDEJnKGBRgvmYBdszFISUjtg0cH/dErNaZCwg5o17MJzLc7jr2v1Q1xhYF9C
p5aBWpnZ57mx2RDhf3NSVG2A0uwa/R01jaNTOOqA3acjdxQx4Rs/DoEKQsQU3flu
5p1Jqgl3kFMf5bWewiyfLM2GzPFRNpkwuuDX1kk6GNP3UYhtjvyYr+zBLSmEbxDB
DArWrvSRDtyWGHfrOjAfvpqQom8hevhuf6NzhuOVj5UnwBGz47EmUZCHgmyDhb06
sRueiGEksf/tbA==
-----END CERTIFICATE-----