Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          d1Bzyi2H1qrq9WyQWFgIxluecL7IiY1jirkjXLKQ2CE=
Subject key identifier:   20:5C:81:4A:89:E4:99:E3:68:01:D8:4B:00:46:3F:02:30:02:BD:1F
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       01962DF3D642232EA1CF605127D33920052E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          0988
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: ARezak8V-5mw6deSCADiac-Xj_w.roa (hash: 9wzguKPWEYzNmwfk6z7NHzk2CG37G+xy/bZuEFspBZ4=)
                          2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: wfbJzzzKurhUan3UK33msqi9WfXKSJF6UlJ3rM6UVzw=)
                          3: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
                          4: JSU_Gc7eqTUqpDFkA2FIvbeqiUE.roa (hash: SjI9SwLiNWQSlSCpLAULn3MZkkJhenDEWQ7CDz2aZ/E=)
                          5: hrEzN0ov7R8-CBntuFI6TOZ5J3k.roa (hash: F4t//75g9YseMJLav5TNry1YdPvomuVlb22mZdbwTXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:42:23:2e:a1:cf:60:51:27:d3:39:20:05:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=205c814a89e499e36801d84b00463f023002bd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:35:ab:67:92:9c:89:53:1c:1a:a6:d1:95:
                    47:18:61:3d:c8:df:44:8f:06:37:44:8a:a8:c7:b2:
                    b7:c3:ee:b9:39:4e:d0:59:e3:93:84:78:f3:69:29:
                    19:38:3f:20:eb:f5:ed:f1:9c:f9:9d:00:b7:bf:aa:
                    5f:19:4e:b0:90:10:45:e3:c9:db:46:a8:22:75:4b:
                    e4:82:59:54:51:97:d1:71:77:8a:d1:f5:7e:7b:ec:
                    69:c3:04:bb:6c:54:e5:6e:57:0c:3b:9d:09:91:83:
                    b2:e4:74:87:2e:1e:95:9b:05:2d:16:46:da:39:05:
                    00:94:c7:b8:6b:11:7b:36:45:69:92:0f:17:19:1d:
                    27:22:8c:32:aa:23:0d:8c:e7:c7:05:6f:3e:44:82:
                    7d:cd:22:7c:92:ed:99:4f:62:4d:c4:7f:59:d0:34:
                    20:37:e2:73:8d:31:0d:4f:dc:44:38:cb:68:ce:5b:
                    a5:cd:56:48:88:be:4e:8d:4b:bf:2f:c8:91:22:0d:
                    7e:64:02:05:4f:5a:ed:ed:4a:8e:68:48:1e:08:27:
                    32:fd:c5:3b:c3:d2:0c:cb:99:7f:81:37:59:71:b2:
                    f6:c6:e9:10:32:e7:8b:e7:92:04:1d:d9:1f:3e:6c:
                    a0:13:de:65:d1:fc:cd:85:0a:95:5f:55:16:1c:9c:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5C:81:4A:89:E4:99:E3:68:01:D8:4B:00:46:3F:02:30:02:BD:1F
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:ae:00:af:d8:aa:a6:cd:b2:82:21:c7:84:79:43:a4:82:
         59:ae:b4:31:ac:b3:4c:04:43:a5:bb:93:93:ca:76:12:b3:1a:
         6e:06:87:69:95:87:dd:4f:e0:dd:d1:0f:1e:ae:5c:2d:c0:b5:
         1a:f6:b8:dd:17:a4:1f:94:6a:8b:3c:6e:b3:f3:df:34:3c:24:
         79:a9:f3:50:8e:ca:6a:b5:87:5b:e2:55:02:dc:20:29:d9:de:
         98:52:0c:4e:ab:12:ad:00:2f:b7:9b:a6:2d:d4:3c:96:85:cf:
         51:2a:a7:0f:c0:c6:bb:e2:af:bc:52:36:17:74:a0:3c:18:62:
         9a:66:33:b3:76:34:da:dc:8a:04:5a:3b:a3:e4:46:dd:18:02:
         9d:fe:d9:13:13:26:79:9e:fb:b3:55:5e:56:b6:c2:68:7f:58:
         3e:01:a1:a4:98:f8:b4:5c:bc:84:53:63:9f:90:b2:d5:0e:23:
         c6:a3:e5:16:c2:6c:e0:9c:4f:06:17:0f:58:c6:3f:b6:31:99:
         79:7f:62:cd:df:f5:2c:73:f7:fa:70:c8:d2:11:5c:c9:51:90:
         26:45:97:b2:2a:cd:7a:61:2a:c0:e5:a5:d6:77:26:0d:1b:91:
         0a:eb:43:0a:01:52:f7:7e:16:a7:23:16:9a:1b:96:6e:34:6b:
         cd:fb:9c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89ZCIy6hz2BRJ9M5IAUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjUwNDEzMDcwMTE2WhcNMjUwNDE0MDcwMTE2WjAzMTEwLwYDVQQD
EygyMDVjODE0YTg5ZTQ5OWUzNjgwMWQ4NGIwMDQ2M2YwMjMwMDJiZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPE1q2eSnIlTHBqm0ZVHGGE9yN9E
jwY3RIqox7K3w+65OU7QWeOThHjzaSkZOD8g6/Xt8Zz5nQC3v6pfGU6wkBBF48nb
RqgidUvkgllUUZfRcXeK0fV+e+xpwwS7bFTlblcMO50JkYOy5HSHLh6VmwUtFkba
OQUAlMe4axF7NkVpkg8XGR0nIowyqiMNjOfHBW8+RIJ9zSJ8ku2ZT2JNxH9Z0DQg
N+JzjTENT9xEOMtozlulzVZIiL5OjUu/L8iRIg1+ZAIFT1rt7UqOaEgeCCcy/cU7
w9IMy5l/gTdZcbL2xukQMueL55IEHdkfPmygE95l0fzNhQqVX1UWHJyz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBcgUqJ5JnjaAHYSwBGPwIwAr0fMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ+uAK/Y
qqbNsoIhx4R5Q6SCWa60MayzTARDpbuTk8p2ErMabgaHaZWH3U/g3dEPHq5cLcC1
Gva43RekH5Rqizxus/PfNDwkeanzUI7KarWHW+JVAtwgKdnemFIMTqsSrQAvt5um
LdQ8loXPUSqnD8DGu+KvvFI2F3SgPBhimmYzs3Y02tyKBFo7o+RG3RgCnf7ZExMm
eZ77s1VeVrbCaH9YPgGhpJj4tFy8hFNjn5Cy1Q4jxqPlFsJs4JxPBhcPWMY/tjGZ
eX9izd/1LHP3+nDI0hFcyVGQJkWXsirNemEqwOWl1ncmDRuRCutDCgFS934WpyMW
mhuWbjRrzfucRQ==
-----END CERTIFICATE-----