Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File:                     yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier:          yxcAmABMF9dTysuhepZYGsqV4njJx317vqTLRHO9OfM=
Subject key identifier:   12:CC:5B:06:0A:82:D5:33:63:11:2E:8D:41:C2:BF:A6:13:00:85:4F
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer:       /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial:       01962F745691F86EFDBBEF8C4311635B3A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=)
                          2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: njtjBEEWEuXvND1tLhOrZ/HlEfngKNeXQkxgKvsx4lE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:91:f8:6e:fd:bb:ef:8c:43:11:63:5b:3a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=12cc5b060a82d53363112e8d41c2bfa61300854f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:14:a5:ec:fa:61:01:f0:f6:77:79:d3:84:
                    07:4d:ad:05:a3:60:6c:7e:27:a9:a9:12:ff:0d:08:
                    a4:c2:21:09:16:65:d8:97:b4:19:e2:46:9b:f6:45:
                    4b:11:45:90:cd:99:26:67:b4:fb:17:96:1a:88:a3:
                    f4:e1:26:b3:87:a6:d0:53:66:61:a5:ca:dd:70:45:
                    91:62:5e:78:68:05:85:5d:e6:ff:6c:40:75:21:92:
                    09:73:ff:c6:a6:77:4c:e5:de:ce:c0:69:68:a4:d0:
                    5c:93:df:18:72:b7:6d:cb:d8:9c:18:d8:ba:b6:2d:
                    3f:90:00:85:e6:ca:d7:0a:4d:88:d5:5e:88:35:6b:
                    af:ee:03:2a:e8:34:82:08:8e:25:04:73:59:06:fe:
                    8f:d8:d5:3b:c4:27:12:e4:6b:e8:aa:6e:2d:a4:82:
                    4a:f3:f3:4d:82:ec:02:cd:8d:79:71:ef:9f:64:03:
                    47:fa:4c:49:ad:27:ca:fc:7f:64:85:db:e4:ea:b5:
                    ac:a2:92:6f:0d:f1:a6:e1:cd:ca:20:cc:ae:a1:e6:
                    52:42:5d:13:74:23:ef:39:69:d9:8a:d0:f8:9e:d8:
                    6b:98:2a:9b:81:a0:63:0b:ad:37:53:97:1d:05:05:
                    71:c5:55:a3:45:28:ba:8d:66:89:f0:13:d1:de:0b:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:5B:06:0A:82:D5:33:63:11:2E:8D:41:C2:BF:A6:13:00:85:4F
            X509v3 Authority Key Identifier:
                keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:2b:85:bf:ab:4e:e9:52:76:b2:7a:e2:0c:f9:08:98:38:
         d4:d0:18:92:32:09:21:a9:85:eb:7a:04:7b:26:34:4f:6c:87:
         3b:f1:af:d7:3d:63:19:03:e9:e6:b1:74:cf:ed:9a:82:63:ee:
         3e:a4:c8:1f:87:37:6b:33:79:4a:32:a8:47:e3:32:c9:c3:56:
         21:51:07:5b:d5:40:ad:86:a7:7d:12:6e:06:1f:fe:f0:b4:87:
         df:47:a8:2a:0c:e2:9f:8e:65:cd:bf:8a:64:e3:e3:b1:a2:78:
         c9:7a:fb:01:83:97:f5:2b:ba:bb:ea:fb:51:51:8c:43:1c:13:
         a5:b7:76:06:35:d9:8f:32:9a:3a:4d:ee:97:c2:31:e2:aa:29:
         c6:56:bb:01:65:0a:78:f4:1f:c1:4c:88:ec:9c:ea:0f:88:b4:
         35:fe:1d:c1:ce:b1:bd:ff:3d:06:4e:24:9d:0f:fc:92:b9:8b:
         af:36:70:92:01:46:a7:74:e6:60:54:44:73:a5:de:2a:fc:1d:
         c0:0a:6c:eb:a1:3a:f4:dd:2a:c5:e2:f9:a8:c6:be:73:39:f9:
         76:a5:18:4d:96:e2:6e:d0:33:d6:96:6b:62:89:4d:a3:0c:43:
         bc:22:40:6e:6a:62:a6:48:6a:d9:9b:57:bf:66:00:da:c1:9c:
         d8:3e:39:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFaR+G79u++MQxFjWzqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmNjN2NlNDJlNzljMzUxYWM3ZDI4ZjY0NWRlN2Y1OTM4
YWNjOWMwHhcNMjUwNDEzMTQwMTE1WhcNMjUwNDE0MTQwMTE1WjAzMTEwLwYDVQQD
EygxMmNjNWIwNjBhODJkNTMzNjMxMTJlOGQ0MWMyYmZhNjEzMDA4NTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNoUpez6YQHw9nd504QHTa0Fo2Bs
fiepqRL/DQikwiEJFmXYl7QZ4kab9kVLEUWQzZkmZ7T7F5YaiKP04Sazh6bQU2Zh
pcrdcEWRYl54aAWFXeb/bEB1IZIJc//GpndM5d7OwGlopNBck98Ycrdty9icGNi6
ti0/kACF5srXCk2I1V6INWuv7gMq6DSCCI4lBHNZBv6P2NU7xCcS5Gvoqm4tpIJK
8/NNguwCzY15ce+fZANH+kxJrSfK/H9khdvk6rWsopJvDfGm4c3KIMyuoeZSQl0T
dCPvOWnZitD4nthrmCqbgaBjC603U5cdBQVxxVWjRSi6jWaJ8BPR3gvUSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLMWwYKgtUzYxEujUHCv6YTAIVPMB8GA1UdIwQY
MBaAFMssx85C55w1GsfSj2Rd5/WTisycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTct
NzgxZDhmYjFkMmZiLzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTctNzgxZDhmYjFkMmZi
LzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp4rhb+r
TulSdrJ64gz5CJg41NAYkjIJIamF63oEeyY0T2yHO/Gv1z1jGQPp5rF0z+2agmPu
PqTIH4c3azN5SjKoR+MyycNWIVEHW9VArYanfRJuBh/+8LSH30eoKgzin45lzb+K
ZOPjsaJ4yXr7AYOX9Su6u+r7UVGMQxwTpbd2BjXZjzKaOk3ul8Ix4qopxla7AWUK
ePQfwUyI7JzqD4i0Nf4dwc6xvf89Bk4knQ/8krmLrzZwkgFGp3TmYFREc6XeKvwd
wAps66E69N0qxeL5qMa+czn5dqUYTZbibtAz1pZrYolNowxDvCJAbmpipkhq2ZtX
v2YA2sGc2D453A==
-----END CERTIFICATE-----