Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File:                     YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier:          XwHdg9H6RADwbW78IILyUeVHScN7+SfukpJyNbO7YcQ=
Subject key identifier:   F1:BC:7D:F4:B8:2E:76:92:CE:7D:67:59:DD:A2:DE:C7:02:5C:E3:B2
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer:       /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial:       01962ECFB40D5E1718FAE474F1B4B6EFF63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number:          1442
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: REqtYQmRREKLJc9dQnOchbRCd38.roa (hash: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=)
                          2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: kYoexEcsKrx0NGZ67e64gbV8otaB0mvnxeFJiwjy33w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:0d:5e:17:18:fa:e4:74:f1:b4:b6:ef:f6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=f1bc7df4b82e7692ce7d6759dda2dec7025ce3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:3b:4a:c3:24:74:81:45:c0:26:34:4a:aa:
                    7d:45:aa:51:bd:42:b7:cf:3d:af:58:ad:75:3e:c2:
                    be:96:ce:64:4b:e1:ae:3c:0c:37:6a:65:a8:f0:0b:
                    74:d0:9d:b4:ba:63:a0:98:90:de:57:90:98:52:fb:
                    50:f2:68:3c:bf:98:14:c4:22:b6:4b:7a:73:50:97:
                    f4:49:4b:39:2b:da:d3:69:91:b7:29:0a:73:21:6c:
                    82:c2:a8:88:8a:0c:73:6c:6e:2b:34:3e:ef:52:31:
                    56:4d:e9:ec:87:87:dc:30:e2:3d:92:58:25:0e:10:
                    79:de:bf:f4:92:91:51:0f:1e:1f:26:9c:f9:66:01:
                    7a:e9:f8:ab:3e:b7:8a:f3:ae:35:76:33:9f:e7:94:
                    16:f2:6c:00:46:85:7b:80:3f:75:04:6a:33:ef:67:
                    be:4c:f3:41:21:4b:62:57:58:aa:6b:a8:43:60:0b:
                    82:6a:99:a3:71:ca:47:ff:16:6e:72:3d:77:3b:7f:
                    0a:ef:79:b1:63:62:d2:fe:1a:72:d8:d0:f3:70:c8:
                    a8:85:7f:35:3e:37:c8:fc:82:b0:77:64:5b:02:3b:
                    77:08:2c:da:77:5a:ef:d0:63:96:7d:da:36:74:d3:
                    f4:93:b6:9b:23:46:73:4e:5c:2e:95:16:00:4b:65:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BC:7D:F4:B8:2E:76:92:CE:7D:67:59:DD:A2:DE:C7:02:5C:E3:B2
            X509v3 Authority Key Identifier:
                keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:29:fc:0a:23:65:aa:a6:da:46:73:85:32:ff:60:66:75:17:
         81:31:fd:78:58:f8:b8:ec:66:60:64:d9:c1:de:fd:f4:21:3f:
         ed:cf:fe:5d:33:99:45:1a:84:b8:b6:1d:4c:df:33:14:e5:1f:
         0a:cf:c9:af:db:8a:57:0c:ce:3e:ff:2f:61:54:f7:d7:77:e6:
         14:dd:97:4a:94:95:1e:47:75:7a:89:b9:69:46:61:a4:c9:e3:
         28:2b:a3:4e:9d:5d:60:60:69:06:43:3f:5e:e9:f6:4f:78:47:
         30:53:7f:7b:17:cd:9e:73:ba:81:c1:2f:f2:fc:c3:7b:0b:bc:
         13:62:67:b6:71:c5:46:b6:d8:bb:73:7c:0a:e8:8a:11:ae:f5:
         8e:2e:97:3a:b4:92:1d:72:5d:10:dd:e8:54:07:41:38:d0:ac:
         96:86:60:c8:e5:5e:c6:55:0b:c7:32:8f:b2:65:73:39:29:d0:
         d9:05:c8:1c:23:9e:35:cd:55:63:3e:c9:01:78:83:50:7b:48:
         9e:2a:9c:66:e7:85:0c:b7:b4:ca:3f:42:e2:17:37:7c:54:2a:
         ac:97:92:2e:64:a9:8b:6e:a6:4a:3f:64:be:e0:2a:fa:66:14:
         1b:db:db:8d:17:51:a6:49:b7:4e:cf:ff:1f:a6:d6:7e:70:3d:
         ba:99:db:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7QNXhcY+uR08bS27/Y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm
MjIyOGYwHhcNMjUwNDEzMTEwMTI1WhcNMjUwNDE0MTEwMTI1WjAzMTEwLwYDVQQD
EyhmMWJjN2RmNGI4MmU3NjkyY2U3ZDY3NTlkZGEyZGVjNzAyNWNlM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d87SsMkdIFFwCY0Sqp9RapRvUK3
zz2vWK11PsK+ls5kS+GuPAw3amWo8At00J20umOgmJDeV5CYUvtQ8mg8v5gUxCK2
S3pzUJf0SUs5K9rTaZG3KQpzIWyCwqiIigxzbG4rND7vUjFWTensh4fcMOI9klgl
DhB53r/0kpFRDx4fJpz5ZgF66firPreK8641djOf55QW8mwARoV7gD91BGoz72e+
TPNBIUtiV1iqa6hDYAuCapmjccpH/xZucj13O38K73mxY2LS/hpy2NDzcMiohX81
PjfI/IKwd2RbAjt3CCzad1rv0GOWfdo2dNP0k7abI0ZzTlwulRYAS2XsewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG8ffS4LnaSzn1nWd2i3scCXOOyMB8GA1UdIwQY
MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt
MmM3ZWY5ZmYwM2Y1LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYtMmM3ZWY5ZmYwM2Y1
LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCn8CiNl
qqbaRnOFMv9gZnUXgTH9eFj4uOxmYGTZwd799CE/7c/+XTOZRRqEuLYdTN8zFOUf
Cs/Jr9uKVwzOPv8vYVT313fmFN2XSpSVHkd1eom5aUZhpMnjKCujTp1dYGBpBkM/
Xun2T3hHMFN/exfNnnO6gcEv8vzDewu8E2JntnHFRrbYu3N8CuiKEa71ji6XOrSS
HXJdEN3oVAdBONCsloZgyOVexlULxzKPsmVzOSnQ2QXIHCOeNc1VYz7JAXiDUHtI
niqcZueFDLe0yj9C4hc3fFQqrJeSLmSpi26mSj9kvuAq+mYUG9vbjRdRpkm3Ts//
H6bWfnA9upnbrw==
-----END CERTIFICATE-----