Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          euE1UjV8rDiRNdNS2zA4likAPyBMrqJu/5LK2jViRPU=
Subject key identifier:   74:A7:5F:88:2E:EA:C6:2B:C2:A5:69:20:32:E1:6C:80:3D:F7:BD:54
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       01962E2ADDFE0F17DCDB69895192F9F4DE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0672
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: bz+CD2YZpZn+xVMDYDh1GP3QPY/IhHkkLyWAe8gI1Xg=)
                          2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
                          3: 4SOfXtsUKcFlXa9Q9yEW4D3DIqA.roa (hash: S0ISeClce5TxDsWjgivJh0Ti1wUrqurbMyCPE36tiVY=)
                          4: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
                          5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
                          6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
                          7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dd:fe:0f:17:dc:db:69:89:51:92:f9:f4:de:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=74a75f882eeac62bc2a5692032e16c803df7bd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:ad:df:56:e5:3f:0a:d4:c8:fd:d3:c2:3c:
                    d1:3d:a5:57:80:e4:1f:16:0e:64:78:ed:28:7d:51:
                    cc:3a:2c:81:d9:b5:a2:ae:59:05:67:4f:fe:1b:ef:
                    96:de:cb:8b:2d:06:04:11:d0:26:5a:81:a9:e3:ee:
                    ea:8d:50:df:49:d7:a9:d0:d4:f7:5b:bd:60:6f:35:
                    2b:22:f0:3e:67:eb:2e:f6:24:18:80:7b:33:5a:55:
                    45:b1:f3:66:9b:90:4c:57:84:1f:20:cd:aa:2a:10:
                    b7:d8:67:27:19:67:ed:e5:8d:8d:46:ea:ec:19:e6:
                    37:20:94:c9:c6:96:c4:13:58:a4:50:6d:50:cb:88:
                    c7:4b:dd:53:7c:1e:bc:0e:22:4d:8c:e4:0e:e9:60:
                    a7:5a:d7:e5:a9:89:8f:e2:61:7e:fd:ec:e2:ef:bc:
                    8c:72:8c:4f:77:41:ce:fb:b6:5c:b4:62:78:ba:1b:
                    69:f5:b0:7a:5c:2a:24:18:c6:42:04:7c:df:e9:b5:
                    de:28:98:77:72:ac:e8:2f:f1:b8:f3:5b:b7:0b:e2:
                    64:fc:0e:c2:28:5d:fc:89:f0:32:cc:41:2a:75:7a:
                    65:35:bb:6b:ab:0c:77:af:b8:92:b9:99:8e:75:39:
                    42:44:4d:f4:b0:d9:57:97:69:c1:ab:d4:48:61:b6:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A7:5F:88:2E:EA:C6:2B:C2:A5:69:20:32:E1:6C:80:3D:F7:BD:54
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:eb:d8:44:6c:50:23:2f:ed:5a:a6:d0:36:72:a3:b1:7b:50:
         4c:d6:57:04:e4:37:e5:ce:f2:7b:5d:56:b2:18:36:93:da:0c:
         53:fd:65:e3:e5:4e:46:70:09:43:64:89:bb:8c:8c:a7:3e:c4:
         59:8e:e2:24:f6:8b:9d:db:13:b4:34:c3:ad:b2:c2:6b:0d:7d:
         8b:f1:c6:49:02:4c:9c:e0:93:e3:b2:d9:1b:ee:9b:7c:e5:ec:
         61:d1:bb:a9:32:9a:f4:23:27:e8:2a:07:d5:f3:f2:34:cd:5c:
         30:9e:6d:83:4a:3e:c5:32:94:68:28:f5:05:44:d9:23:56:4c:
         7d:6a:0f:4f:a7:ac:31:52:83:1f:79:93:0a:bc:3c:da:54:6c:
         ee:ea:b7:5d:e6:f4:56:73:04:d1:f7:c2:17:84:cb:46:f4:e6:
         ea:c5:68:dd:0a:1e:3b:64:70:a2:be:4f:97:fb:00:13:92:ff:
         4c:10:63:11:43:1a:ea:97:93:65:56:10:8c:16:e4:32:1f:70:
         87:dc:e6:de:16:f7:5a:83:1a:1d:96:1f:07:2f:12:d8:f4:0e:
         3d:89:65:41:a1:e4:03:4c:75:bc:d2:d3:40:27:8b:7b:53:07:
         89:80:ea:bd:a6:e3:7e:04:c0:60:d8:9b:de:4a:c3:3e:f7:74:
         18:a9:9a:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKt3+Dxfc22mJUZL59N4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw
ZjE3ODQwHhcNMjUwNDEzMDgwMTIzWhcNMjUwNDE0MDgwMTIzWjAzMTEwLwYDVQQD
Eyg3NGE3NWY4ODJlZWFjNjJiYzJhNTY5MjAzMmUxNmM4MDNkZjdiZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncet31blPwrUyP3TwjzRPaVXgOQf
Fg5keO0ofVHMOiyB2bWirlkFZ0/+G++W3suLLQYEEdAmWoGp4+7qjVDfSdep0NT3
W71gbzUrIvA+Z+su9iQYgHszWlVFsfNmm5BMV4QfIM2qKhC32GcnGWft5Y2NRurs
GeY3IJTJxpbEE1ikUG1Qy4jHS91TfB68DiJNjOQO6WCnWtflqYmP4mF+/ezi77yM
coxPd0HO+7ZctGJ4uhtp9bB6XCokGMZCBHzf6bXeKJh3cqzoL/G481u3C+Jk/A7C
KF38ifAyzEEqdXplNbtrqwx3r7iSuZmOdTlCRE30sNlXl2nBq9RIYbaRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSnX4gu6sYrwqVpIDLhbIA9971UMB8GA1UdIwQY
MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt
MTA3OWQ1NWFlZTkxLzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx
LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOvYRGxQ
Iy/tWqbQNnKjsXtQTNZXBOQ35c7ye11Wshg2k9oMU/1l4+VORnAJQ2SJu4yMpz7E
WY7iJPaLndsTtDTDrbLCaw19i/HGSQJMnOCT47LZG+6bfOXsYdG7qTKa9CMn6CoH
1fPyNM1cMJ5tg0o+xTKUaCj1BUTZI1ZMfWoPT6esMVKDH3mTCrw82lRs7uq3Xeb0
VnME0ffCF4TLRvTm6sVo3QoeO2Rwor5Pl/sAE5L/TBBjEUMa6peTZVYQjBbkMh9w
h9zm3hb3WoMaHZYfBy8S2PQOPYllQaHkA0x1vNLTQCeLe1MHiYDqvabjfgTAYNib
3krDPvd0GKmazg==
-----END CERTIFICATE-----