Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File:                     yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier:          Ng0L09ClcfEMjcKFCCuAlMoZkhSMDNg/KfqJl/3Ny2E=
Subject key identifier:   3E:6A:8F:E9:14:A5:A7:E4:17:8C:5E:16:49:62:67:32:E7:63:C2:91
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer:       /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial:       01962F07121464CF0A7FCC71283628C89297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number:          145F
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: kclBuRKTMfByXqrmrwIbc_lZEnM.roa (hash: MQr5fqlXn7Xd/Z8IgiENjDF+OVj4PMx+/5QB1sHm+8E=)
                          2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: gnov7YwNAnCCzx4pqe5Sz/aLRVfkePy92I4qMP/AOU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:12:14:64:cf:0a:7f:cc:71:28:36:28:c8:92:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=3e6a8fe914a5a7e4178c5e1649626732e763c291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:63:28:68:14:f1:fa:a2:10:00:b5:88:a9:
                    65:cd:72:83:3f:81:32:5c:70:57:90:71:8f:7c:00:
                    93:d3:39:c6:9d:dc:34:98:ae:d6:f5:b6:99:33:61:
                    82:3e:05:e6:dc:09:c9:a0:86:2f:65:52:6d:19:6e:
                    f4:2f:c3:fd:73:df:e6:2f:a9:62:37:7d:7e:67:84:
                    76:1c:18:3e:2f:9e:8f:55:95:22:f7:d3:4f:28:64:
                    d6:3f:ee:4c:b7:94:14:fe:ce:d9:ee:13:d1:4b:c1:
                    ca:a7:c9:62:7a:11:cd:9c:d7:d8:39:5e:8b:4b:b3:
                    53:9a:02:5c:68:e5:eb:e8:85:62:19:85:0c:36:96:
                    8a:9a:05:7d:12:48:19:51:86:2b:c1:40:8d:35:3d:
                    3b:6c:cf:eb:db:57:1c:ca:8b:bb:e5:cc:f9:e3:ce:
                    2e:3e:4b:a0:00:8e:94:87:e6:3b:33:b5:fa:cb:f6:
                    47:3f:a5:b9:1b:64:2e:fd:f7:88:ea:0c:ec:78:07:
                    6d:42:a1:ef:cb:f9:a3:5b:cb:ca:96:cf:bd:36:65:
                    b9:a1:78:5e:d1:e4:c2:35:06:27:85:e5:95:68:e1:
                    2d:42:36:0a:d2:1c:8b:6b:f2:9f:ff:55:25:5b:e6:
                    2d:b1:b0:09:75:11:9d:5b:23:4d:61:ba:a8:13:e2:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6A:8F:E9:14:A5:A7:E4:17:8C:5E:16:49:62:67:32:E7:63:C2:91
            X509v3 Authority Key Identifier:
                keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:75:be:be:03:18:51:3b:9f:b0:49:8e:24:1c:ec:3c:a6:e2:
         73:1e:1d:0c:b4:87:fc:0d:a0:e4:c9:5a:ee:36:03:f9:be:6a:
         a8:f5:7a:8d:ac:3e:ba:a4:85:e9:fc:6e:6a:8c:d3:dc:98:16:
         cf:ba:f1:41:8e:00:5d:d1:98:fd:3f:bc:ef:61:40:e2:55:da:
         55:45:7b:8e:97:2f:39:fa:ce:95:e6:71:0e:45:8f:ef:88:6a:
         d3:1c:10:d7:78:33:8b:4e:16:f9:aa:f0:1b:d8:20:9b:25:0f:
         57:99:a4:20:69:9d:92:4c:25:f2:00:d3:cf:8d:75:ed:e7:26:
         3b:5b:8e:8a:8e:2d:86:22:a5:b3:60:73:0c:01:43:00:ba:06:
         a5:6a:c2:60:a3:df:ed:c5:11:bb:8b:ff:05:5b:57:84:30:50:
         13:12:0b:ec:0f:e6:58:a6:c4:31:73:bc:a8:a5:9b:20:08:a8:
         73:d3:42:e6:5a:fd:c3:d3:b3:32:d6:bf:9a:00:6c:1d:20:2a:
         43:06:42:91:b1:5f:ce:a9:2d:7c:12:d1:93:57:a0:16:8d:65:
         25:de:d5:cd:99:47:3e:06:f4:2b:4f:77:77:bb:41:8a:31:0c:
         4d:50:64:3b:36:2b:37:1b:40:c0:1f:22:18:d9:73:d9:6d:51:
         65:bf:b6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxIUZM8Kf8xxKDYoyJKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZTUwY2ExNzEzNDgzN2E1MGQzMDYzZDQzZDQ0MzM4NWFi
ZTZmNDkwHhcNMjUwNDEzMTIwMTU0WhcNMjUwNDE0MTIwMTU0WjAzMTEwLwYDVQQD
EygzZTZhOGZlOTE0YTVhN2U0MTc4YzVlMTY0OTYyNjczMmU3NjNjMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDNjKGgU8fqiEAC1iKllzXKDP4Ey
XHBXkHGPfACT0znGndw0mK7W9baZM2GCPgXm3AnJoIYvZVJtGW70L8P9c9/mL6li
N31+Z4R2HBg+L56PVZUi99NPKGTWP+5Mt5QU/s7Z7hPRS8HKp8liehHNnNfYOV6L
S7NTmgJcaOXr6IViGYUMNpaKmgV9EkgZUYYrwUCNNT07bM/r21ccyou75cz5484u
PkugAI6Uh+Y7M7X6y/ZHP6W5G2Qu/feI6gzseAdtQqHvy/mjW8vKls+9NmW5oXhe
0eTCNQYnheWVaOEtQjYK0hyLa/Kf/1UlW+YtsbAJdRGdWyNNYbqoE+JvIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5qj+kUpafkF4xeFkliZzLnY8KRMB8GA1UdIwQY
MBaAFMjlDKFxNIN6UNMGPUPUQzhavm9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUt
NWVmZjczZTg5ZmJiLzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUtNWVmZjczZTg5ZmJi
LzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXW+vgMY
UTufsEmOJBzsPKbicx4dDLSH/A2g5Mla7jYD+b5qqPV6jaw+uqSF6fxuaozT3JgW
z7rxQY4AXdGY/T+872FA4lXaVUV7jpcvOfrOleZxDkWP74hq0xwQ13gzi04W+arw
G9ggmyUPV5mkIGmdkkwl8gDTz4117ecmO1uOio4thiKls2BzDAFDALoGpWrCYKPf
7cURu4v/BVtXhDBQExIL7A/mWKbEMXO8qKWbIAioc9NC5lr9w9OzMta/mgBsHSAq
QwZCkbFfzqktfBLRk1egFo1lJd7VzZlHPgb0K093d7tBijEMTVBkOzYrNxtAwB8i
GNlz2W1RZb+2aw==
-----END CERTIFICATE-----