Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
File:                     lYj7Sw-weytS4w2SGYmPKM-8mi0.mft (raw, json)
Hash identifier:          zN1BpvhidS6uTZSJ8I6WurhWGwzmNalOCxZ9Nw0Y/P8=
Subject key identifier:   2F:4B:D6:D8:A8:2A:C1:93:69:22:EA:A3:2B:88:BD:45:B6:FC:D1:61
Authority key identifier: 95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D
Certificate issuer:       /CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d
Certificate serial:       01962F3D760FD3DB7341BF6540ECF72AB35A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
Manifest number:          1267
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: cpaYv-AQ-t9zhgKKXsvKBzFcSaQ.roa (hash: QH8X2hDISDdQVFPt9W1N705nATkeCHCrQhlKJMRWx8A=)
                          2: lYj7Sw-weytS4w2SGYmPKM-8mi0.crl (hash: +WxCReEE45HpFy16tvQWQluYBaogFzp53HGWgUL5OOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:0f:d3:db:73:41:bf:65:40:ec:f7:2a:b3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=2f4bd6d8a82ac1936922eaa32b88bd45b6fcd161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:ea:71:5a:00:2c:4c:f0:71:65:bf:3c:aa:
                    8e:69:70:f5:03:3b:e5:db:5b:d7:78:58:b3:63:a5:
                    89:18:3a:20:10:0d:c7:0d:15:dd:2e:bc:5a:91:b7:
                    11:4d:3a:07:82:d9:78:2f:c2:8a:cc:47:fa:c1:c9:
                    7a:ef:22:30:08:94:eb:ce:f7:c4:b3:4e:66:b4:92:
                    eb:8f:d6:d1:d5:d2:40:22:b3:45:d6:41:3d:fc:91:
                    e4:70:25:a0:5b:6a:b6:60:99:97:e5:58:85:e7:71:
                    a5:c2:34:91:50:a6:6f:05:f1:49:2d:b1:b4:70:08:
                    fe:d3:10:4c:1d:27:17:b7:fe:72:c0:02:02:5d:ac:
                    ae:b3:db:7c:82:28:3e:c9:4f:74:46:0d:5d:ff:46:
                    75:03:35:35:31:01:ef:b7:85:ef:90:98:26:fe:6b:
                    07:41:94:5b:02:58:f0:18:46:31:d7:d6:7b:5b:6b:
                    fd:a0:00:6b:fb:0e:c3:af:a8:a9:67:81:62:be:fc:
                    c5:cf:6d:1d:db:79:f1:f1:e0:2b:02:ea:0b:b0:ab:
                    45:ec:d2:c0:6d:0b:d0:5d:32:67:ed:85:89:ee:71:
                    0a:69:14:89:a2:f2:b5:4a:22:b5:dc:72:38:c6:95:
                    7e:fb:75:04:21:df:6d:d3:ea:49:4d:24:99:36:fd:
                    e5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4B:D6:D8:A8:2A:C1:93:69:22:EA:A3:2B:88:BD:45:B6:FC:D1:61
            X509v3 Authority Key Identifier:
                keyid:95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:46:da:74:ec:bd:0e:22:a0:32:c6:63:f7:49:60:cc:99:
         1b:7a:0d:84:0b:5e:ec:db:42:13:c7:2a:09:7f:4e:91:c3:46:
         06:07:fb:72:a4:d6:35:1c:b8:05:ad:0b:2e:d3:2a:5a:9d:72:
         df:1f:01:58:2e:d1:19:00:65:2f:d6:e2:30:28:7e:0f:fd:ff:
         8e:98:71:0c:0a:55:bc:e1:2e:ca:a0:3b:5c:12:19:4a:9e:32:
         6e:ff:00:c0:c7:f1:e8:ac:49:19:81:fe:d8:22:31:b5:35:6e:
         66:e4:ee:8a:54:a1:a8:56:fb:33:6c:01:d4:15:0b:81:d0:b3:
         9e:ea:d6:da:96:f5:79:62:e3:32:46:6f:2f:27:02:b4:07:d8:
         8f:86:18:81:d8:03:7d:5f:e4:05:d6:4b:b3:56:06:3c:a3:3b:
         c5:15:f1:d8:58:57:19:13:88:eb:5d:30:67:5d:a3:73:4a:2a:
         c6:2a:2f:f2:72:41:22:3e:60:a9:82:1b:b7:ef:7a:75:e0:84:
         d1:c3:d7:39:7f:d8:b6:0e:1a:3e:7c:54:60:e3:8f:70:d2:b0:
         b6:61:ba:93:d9:47:6b:73:0e:9d:aa:cd:8f:ff:8d:43:9f:ee:
         eb:59:31:88:ca:81:c0:b8:7f:ea:36:09:58:24:50:d0:97:b0:
         db:06:20:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXYP09tzQb9lQOz3KrNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODhmYjRiMGZiMDdiMmI1MmUzMGQ5MjE5ODk4ZjI4Y2Zi
YzlhMmQwHhcNMjUwNDEzMTMwMTE5WhcNMjUwNDE0MTMwMTE5WjAzMTEwLwYDVQQD
EygyZjRiZDZkOGE4MmFjMTkzNjkyMmVhYTMyYjg4YmQ0NWI2ZmNkMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPbqcVoALEzwcWW/PKqOaXD1Azvl
21vXeFizY6WJGDogEA3HDRXdLrxakbcRTToHgtl4L8KKzEf6wcl67yIwCJTrzvfE
s05mtJLrj9bR1dJAIrNF1kE9/JHkcCWgW2q2YJmX5ViF53GlwjSRUKZvBfFJLbG0
cAj+0xBMHScXt/5ywAICXayus9t8gig+yU90Rg1d/0Z1AzU1MQHvt4XvkJgm/msH
QZRbAljwGEYx19Z7W2v9oABr+w7Dr6ipZ4FivvzFz20d23nx8eArAuoLsKtF7NLA
bQvQXTJn7YWJ7nEKaRSJovK1SiK13HI4xpV++3UEId9t0+pJTSSZNv3lywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9L1tioKsGTaSLqoyuIvUW2/NFhMB8GA1UdIwQY
MBaAFJWI+0sPsHsrUuMNkhmJjyjPvJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mYjg1ZDMtNjY2MC00MzBlLTlhYzct
ODZkMmMzMTFkYjE3LzEvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mYjg1ZDMtNjY2MC00MzBlLTlhYzctODZkMmMzMTFkYjE3
LzEvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJBG2nTs
vQ4ioDLGY/dJYMyZG3oNhAte7NtCE8cqCX9OkcNGBgf7cqTWNRy4Ba0LLtMqWp1y
3x8BWC7RGQBlL9biMCh+D/3/jphxDApVvOEuyqA7XBIZSp4ybv8AwMfx6KxJGYH+
2CIxtTVuZuTuilShqFb7M2wB1BULgdCznurW2pb1eWLjMkZvLycCtAfYj4YYgdgD
fV/kBdZLs1YGPKM7xRXx2FhXGROI610wZ12jc0oqxiov8nJBIj5gqYIbt+96deCE
0cPXOX/Ytg4aPnxUYOOPcNKwtmG6k9lHa3MOnarNj/+NQ5/u61kxiMqBwLh/6jYJ
WCRQ0Jew2wYgWA==
-----END CERTIFICATE-----