Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File:                     Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier:          eFlKPFtw4e4GsY42GZXrhzjce307TUoxYqf2BFBCcno=
Subject key identifier:   60:B1:8D:20:03:35:DD:36:D8:1D:F2:3A:FE:13:4D:10:23:61:32:79
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer:       /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial:       01962ECF98F8047436557D4F704F3C2F4306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number:          06EC
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
                          2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: EQyllHxkA1vjdpshZ39gqBGuCSixjYhm8nyP3Xw7cmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:f8:04:74:36:55:7d:4f:70:4f:3c:2f:43:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=60b18d200335dd36d81df23afe134d1023613279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:1d:cf:df:9f:56:d5:a4:8c:45:eb:5a:87:
                    10:97:b8:5d:09:fc:64:87:35:33:d0:b3:c9:fc:9b:
                    3d:cf:77:ef:ce:40:cf:d9:f9:8e:14:8b:cc:81:0e:
                    18:8c:4c:13:7d:91:4b:80:3f:f9:21:1e:2a:7f:97:
                    e8:06:23:93:da:c0:85:6c:e9:37:24:81:f0:02:7d:
                    24:47:69:a6:0b:95:0d:09:80:e4:d9:2c:4a:b1:97:
                    b6:8c:fe:b3:1c:f2:c4:e3:de:04:14:99:7c:a0:61:
                    0f:bd:c3:f0:c6:15:ff:2b:fd:10:f5:f5:50:c0:fb:
                    29:58:e5:a4:ff:bd:93:e2:32:e5:3c:31:02:35:68:
                    fe:fa:83:00:7f:92:08:3d:26:f1:ca:6b:c7:2c:ac:
                    d4:a9:72:62:72:7a:e6:39:d6:3d:6e:86:78:9c:e4:
                    45:47:8f:fe:44:86:46:c9:e6:e1:08:31:98:cc:ef:
                    88:c0:e4:fa:14:a9:e0:f9:20:b9:ed:c5:65:3f:38:
                    40:59:95:06:2d:2a:6b:65:4f:ea:56:38:6b:65:47:
                    0d:24:54:1f:5f:53:5e:ce:2d:75:4e:e2:65:26:7a:
                    86:46:2a:ee:3c:03:0e:12:4d:2f:d3:86:47:10:20:
                    b8:cb:22:fb:46:a2:21:7c:da:b4:5b:8a:39:c7:85:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B1:8D:20:03:35:DD:36:D8:1D:F2:3A:FE:13:4D:10:23:61:32:79
            X509v3 Authority Key Identifier:
                keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:94:b5:28:da:5d:c6:e6:be:21:c0:07:90:55:a2:9a:5a:
         96:c4:2d:62:41:35:ec:44:51:d0:3c:fe:14:9e:86:ce:67:56:
         12:bc:08:c4:50:34:1e:ba:cf:93:d7:8d:3d:08:d2:38:21:75:
         8d:8d:eb:5a:34:30:45:03:d5:8b:07:0c:1f:24:f3:7b:ed:45:
         67:62:ab:d6:2c:91:0f:dd:a8:56:26:33:25:46:6a:47:e3:31:
         c7:74:ec:17:62:60:2b:57:fa:94:aa:0d:11:f6:f4:22:31:07:
         87:7f:60:6f:44:1b:49:da:f9:2c:9b:5b:d7:e8:7f:fc:5e:7e:
         dd:3f:ad:bb:f6:49:53:28:91:1d:a0:39:6c:74:4f:62:86:91:
         d4:c5:e0:4e:c8:ce:6e:53:c7:96:7a:2a:7f:57:8d:c0:14:52:
         22:1e:4a:71:77:7a:32:1b:14:ef:40:1a:85:bc:de:8a:b5:fd:
         37:99:7d:de:98:94:3e:9a:25:56:b4:39:99:f5:ee:97:42:fe:
         b8:8b:31:91:b6:2a:6c:44:cb:ac:6c:32:e7:7e:20:3f:5e:91:
         f0:af:b5:26:5a:48:8b:7d:b9:02:cd:0e:48:41:71:80:42:5f:
         81:b1:16:0c:73:9e:3b:26:36:fb:ac:90:30:c8:fd:c8:c5:a3:
         a7:cd:7d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5j4BHQ2VX1PcE88L0MGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNTM4MjljMDYxYThhZjI2ZGU5NDZmYzllODE4ODVjNzRj
MTc0YzcwHhcNMjUwNDEzMTEwMTE5WhcNMjUwNDE0MTEwMTE5WjAzMTEwLwYDVQQD
Eyg2MGIxOGQyMDAzMzVkZDM2ZDgxZGYyM2FmZTEzNGQxMDIzNjEzMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM4dz9+fVtWkjEXrWocQl7hdCfxk
hzUz0LPJ/Js9z3fvzkDP2fmOFIvMgQ4YjEwTfZFLgD/5IR4qf5foBiOT2sCFbOk3
JIHwAn0kR2mmC5UNCYDk2SxKsZe2jP6zHPLE494EFJl8oGEPvcPwxhX/K/0Q9fVQ
wPspWOWk/72T4jLlPDECNWj++oMAf5IIPSbxymvHLKzUqXJicnrmOdY9boZ4nORF
R4/+RIZGyebhCDGYzO+IwOT6FKng+SC57cVlPzhAWZUGLSprZU/qVjhrZUcNJFQf
X1Nezi11TuJlJnqGRiruPAMOEk0v04ZHECC4yyL7RqIhfNq0W4o5x4V3hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCxjSADNd022B3yOv4TTRAjYTJ5MB8GA1UdIwQY
MBaAFGNTgpwGGorybelG/J6BiFx0wXTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEt
ODE2MjAzZDIxZDEyLzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEtODE2MjAzZDIxZDEy
LzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOqUtSja
XcbmviHAB5BVoppalsQtYkE17ERR0Dz+FJ6GzmdWErwIxFA0HrrPk9eNPQjSOCF1
jY3rWjQwRQPViwcMHyTze+1FZ2Kr1iyRD92oViYzJUZqR+Mxx3TsF2JgK1f6lKoN
Efb0IjEHh39gb0QbSdr5LJtb1+h//F5+3T+tu/ZJUyiRHaA5bHRPYoaR1MXgTsjO
blPHlnoqf1eNwBRSIh5KcXd6MhsU70AahbzeirX9N5l93piUPpolVrQ5mfXul0L+
uIsxkbYqbETLrGwy534gP16R8K+1JlpIi325As0OSEFxgEJfgbEWDHOeOyY2+6yQ
MMj9yMWjp819MQ==
-----END CERTIFICATE-----