Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File:                     UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier:          ScJO5WXD3l86la5CbpmEm5FCuIcUBGB956+1DEQdqDQ=
Subject key identifier:   72:A7:46:3D:9A:38:87:44:3D:6E:60:03:0F:E6:D5:67:9F:A7:7C:1E
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer:       /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial:       01962E2AC119BDD4CD49CC702C671A94909E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: BfyClB3XmviPfJ6xZ2InO7FtLcs.roa (hash: 3EeV7dZbc++zjvyl5M1yeUuYRy/Llocvb96yJLQ1iig=)
                          2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: GsJ7vcziEQjXSMkXt7kR8Ur98vK/tMIW65rfpQtTGqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c1:19:bd:d4:cd:49:cc:70:2c:67:1a:94:90:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=72a7463d9a3887443d6e60030fe6d5679fa77c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:c7:e1:39:73:3c:60:f1:70:28:b0:b3:ae:
                    0b:a9:a7:0b:0a:fd:ba:ce:a9:c2:02:c4:70:84:c6:
                    f7:be:75:23:6a:09:b6:02:a8:b4:8c:ea:cb:e4:88:
                    34:3f:a4:cf:7a:90:08:f5:fa:e5:24:63:62:fd:94:
                    6b:a0:4c:7a:39:2f:f5:19:a9:73:e6:72:82:91:b2:
                    ad:81:fd:af:bb:af:47:89:30:6a:6c:18:92:8a:ce:
                    b6:5d:29:aa:d1:37:2c:b7:ad:b1:78:66:89:fa:70:
                    e1:16:86:91:ed:af:9b:8c:a6:71:75:8d:0b:a7:33:
                    7a:67:62:81:70:d2:f1:e8:3b:18:44:a4:51:e4:e9:
                    b2:61:e1:2a:ca:c5:d6:ae:15:9b:df:2f:4c:c6:85:
                    6c:68:eb:c0:b6:f1:8d:4f:2f:8c:e1:91:f5:46:9c:
                    a8:e2:7f:5a:d9:17:c4:9e:14:99:fe:ce:35:5a:67:
                    cc:66:7a:c7:82:b8:41:3d:7b:2e:0a:d3:bb:90:72:
                    97:5f:b5:0b:95:5c:90:a4:93:40:bc:c7:60:08:fd:
                    af:c5:bc:5f:40:bd:ce:be:19:2a:45:18:e6:c2:7e:
                    73:22:bc:a7:53:d1:06:a8:4a:8d:0f:a5:17:68:32:
                    49:dd:26:44:9a:bf:a1:2a:13:94:7e:60:3a:38:9a:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A7:46:3D:9A:38:87:44:3D:6E:60:03:0F:E6:D5:67:9F:A7:7C:1E
            X509v3 Authority Key Identifier:
                keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1f:b8:c8:7f:6d:97:a0:06:ba:86:7c:5c:77:28:9e:bd:76:
         51:ad:a9:e0:23:a8:9a:82:41:7e:ed:a4:5c:36:71:d5:45:b9:
         17:58:eb:93:21:98:a7:99:54:36:7f:91:17:42:e4:b2:4b:31:
         86:7c:59:1e:2f:86:17:c8:88:86:d2:21:8a:93:45:73:27:52:
         07:5f:fa:dd:95:28:40:c8:8b:a1:f1:f4:c2:d4:87:75:b5:c9:
         f4:2d:ae:1e:50:eb:6e:df:98:8f:7f:bc:49:0c:b1:64:89:63:
         f6:e6:c0:85:5c:a9:d1:97:65:9f:60:4a:0d:69:78:58:c4:64:
         81:90:90:f2:dc:be:5c:bb:e2:5c:c3:ad:7f:a8:1b:ef:c1:9b:
         19:cf:8a:7c:72:27:0b:32:1e:ab:0f:44:80:73:b6:22:76:74:
         62:15:20:12:83:5f:5a:1a:48:2b:78:28:74:77:90:15:7b:d5:
         d5:33:fb:27:01:2f:51:55:b3:7d:43:6e:54:f7:bf:94:25:45:
         2f:1e:ea:5c:8a:83:bf:24:cf:57:6e:8f:a1:be:63:12:9c:65:
         2f:46:b8:8d:46:9e:e8:12:4c:51:09:7d:79:6d:14:a5:bb:09:
         4b:81:8f:8d:51:22:bf:e5:ea:6f:82:a3:33:02:29:2a:91:fe:
         e4:60:d6:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsEZvdTNScxwLGcalJCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODlkYjJlNWY1NzRkZGEwZTNjMTdlMzk1ZDVmMDViNjYy
NTRlYzUwHhcNMjUwNDEzMDgwMTE1WhcNMjUwNDE0MDgwMTE1WjAzMTEwLwYDVQQD
Eyg3MmE3NDYzZDlhMzg4NzQ0M2Q2ZTYwMDMwZmU2ZDU2NzlmYTc3YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+jH4TlzPGDxcCiws64LqacLCv26
zqnCAsRwhMb3vnUjagm2Aqi0jOrL5Ig0P6TPepAI9frlJGNi/ZRroEx6OS/1Galz
5nKCkbKtgf2vu69HiTBqbBiSis62XSmq0Tcst62xeGaJ+nDhFoaR7a+bjKZxdY0L
pzN6Z2KBcNLx6DsYRKRR5OmyYeEqysXWrhWb3y9MxoVsaOvAtvGNTy+M4ZH1Rpyo
4n9a2RfEnhSZ/s41WmfMZnrHgrhBPXsuCtO7kHKXX7ULlVyQpJNAvMdgCP2vxbxf
QL3OvhkqRRjmwn5zIrynU9EGqEqND6UXaDJJ3SZEmr+hKhOUfmA6OJpIhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKnRj2aOIdEPW5gAw/m1Wefp3weMB8GA1UdIwQY
MBaAFFGJ2y5fV03aDjwX45XV8FtmJU7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMt
ZTIxYzZkMGY4ZjA0LzEvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMtZTIxYzZkMGY4ZjA0
LzEvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqx+4yH9t
l6AGuoZ8XHconr12Ua2p4COomoJBfu2kXDZx1UW5F1jrkyGYp5lUNn+RF0Lksksx
hnxZHi+GF8iIhtIhipNFcydSB1/63ZUoQMiLofH0wtSHdbXJ9C2uHlDrbt+Yj3+8
SQyxZIlj9ubAhVyp0Zdln2BKDWl4WMRkgZCQ8ty+XLviXMOtf6gb78GbGc+KfHIn
CzIeqw9EgHO2InZ0YhUgEoNfWhpIK3godHeQFXvV1TP7JwEvUVWzfUNuVPe/lCVF
Lx7qXIqDvyTPV26Pob5jEpxlL0a4jUae6BJMUQl9eW0UpbsJS4GPjVEiv+Xqb4Kj
MwIpKpH+5GDWRw==
-----END CERTIFICATE-----