Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File:                     yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier:          DA7MgxLiOPQioKe31gw/4vkaXmtc2oArSn8S+Bb6xA8=
Subject key identifier:   D8:D6:04:5E:00:44:A8:3D:95:55:D0:8F:AB:2A:B5:91:C6:4F:2E:DC
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer:       /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial:       01962E2B4BC20B030E3A0DC8906251840687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number:          0DFB
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
                          2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: XAeJl9Ks1eheEmjFX9PeYclk4bsFdP9NrflvVW0voaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4b:c2:0b:03:0e:3a:0d:c8:90:62:51:84:06:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=d8d6045e0044a83d9555d08fab2ab591c64f2edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:87:1f:97:f4:2a:0e:3a:22:d2:e8:4b:0b:
                    f5:06:83:72:8e:c9:62:ad:53:b6:c6:96:3f:b8:13:
                    c1:df:ba:7c:3f:6f:36:fa:2b:5a:ed:81:55:37:2a:
                    95:f0:ea:c6:05:4e:34:ab:10:6a:1a:56:d1:58:90:
                    ee:8c:a0:d5:ae:46:54:e1:ec:02:5b:56:4b:29:20:
                    d7:1e:62:6f:4e:af:67:31:63:c4:8f:11:0b:2b:b9:
                    ac:2c:1d:c2:96:68:f6:8f:bb:bf:2d:58:e2:dc:41:
                    44:e9:74:d7:40:38:a7:19:0f:61:59:72:13:b5:68:
                    d2:88:f1:56:4e:9c:55:10:7a:75:fa:10:d5:06:be:
                    b4:4a:e0:ed:ef:9b:d7:94:01:bb:a0:f7:8b:f8:6c:
                    8a:54:87:99:af:be:3b:4f:fd:41:6c:d9:6d:99:4d:
                    a8:6c:fa:75:d8:3a:8b:30:dc:15:0a:34:02:46:e7:
                    c4:59:12:f7:b0:f4:2f:67:27:9a:b3:ee:e4:3d:b0:
                    50:bd:aa:96:8b:80:70:a7:22:93:55:71:29:d3:81:
                    41:b5:5f:ae:84:ca:ba:f6:13:c8:8e:b3:3b:62:72:
                    7d:b7:ba:78:cf:d6:9a:b1:21:fd:b6:51:08:86:b0:
                    13:0c:fa:f9:42:a1:bf:0e:c2:80:bb:23:df:4c:22:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:04:5E:00:44:A8:3D:95:55:D0:8F:AB:2A:B5:91:C6:4F:2E:DC
            X509v3 Authority Key Identifier:
                keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:26:4c:ef:b9:a3:ee:ff:e7:28:2c:35:f6:f8:dc:a9:0f:
         38:f5:d5:c2:80:47:4e:0c:07:77:d5:22:a8:2f:db:38:f8:23:
         e0:79:07:49:a4:76:f6:5d:3f:eb:35:43:00:b7:86:75:8e:c1:
         87:83:31:a0:23:bd:48:4c:40:63:7b:e0:83:7b:c7:55:ed:c3:
         2e:9a:06:f8:0c:24:51:a6:42:33:bc:dd:ec:3f:d4:78:db:77:
         3a:a9:ec:1b:ca:d3:4b:e6:e5:2d:5d:36:d5:af:70:03:eb:35:
         ed:3f:c7:7e:d1:1b:19:01:9e:43:2d:2d:8f:0d:23:63:ab:6a:
         91:b3:bd:3d:02:86:c3:12:5e:4a:0f:6e:d7:c9:11:47:bb:da:
         ba:08:b3:28:45:17:9b:c5:bc:2f:a4:93:bc:e5:92:5f:17:47:
         fb:0f:14:40:cd:0a:cf:4d:50:31:72:dd:95:c1:eb:74:ee:26:
         ee:c4:ff:b3:71:2c:13:a5:da:9b:79:0a:c5:4c:fa:bd:43:cf:
         06:b7:9f:e4:45:fd:21:d1:0e:58:b7:7f:ee:33:ef:79:46:a9:
         8e:ed:fd:ad:69:ea:e7:4d:51:3e:0e:f4:63:e8:81:98:86:7d:
         55:bf:5e:26:73:0f:23:23:36:95:5f:27:8a:a8:19:d0:c4:4e:
         10:38:5d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0vCCwMOOg3IkGJRhAaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTAyNDNmOTg2MzZmYWEwZmI2YzVhZTZiYWQ5YjBhYmFk
MjM0MzgwHhcNMjUwNDEzMDgwMTUxWhcNMjUwNDE0MDgwMTUxWjAzMTEwLwYDVQQD
EyhkOGQ2MDQ1ZTAwNDRhODNkOTU1NWQwOGZhYjJhYjU5MWM2NGYyZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty+HH5f0Kg46ItLoSwv1BoNyjsli
rVO2xpY/uBPB37p8P282+ita7YFVNyqV8OrGBU40qxBqGlbRWJDujKDVrkZU4ewC
W1ZLKSDXHmJvTq9nMWPEjxELK7msLB3Clmj2j7u/LVji3EFE6XTXQDinGQ9hWXIT
tWjSiPFWTpxVEHp1+hDVBr60SuDt75vXlAG7oPeL+GyKVIeZr747T/1BbNltmU2o
bPp12DqLMNwVCjQCRufEWRL3sPQvZyeas+7kPbBQvaqWi4BwpyKTVXEp04FBtV+u
hMq69hPIjrM7YnJ9t7p4z9aasSH9tlEIhrATDPr5QqG/DsKAuyPfTCJQ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjWBF4ARKg9lVXQj6sqtZHGTy7cMB8GA1UdIwQY
MBaAFMsQJD+YY2+qD7bFrmutmwq60jQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAt
NDhmMTUxYjUyMzFmLzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAtNDhmMTUxYjUyMzFm
LzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgImTO+5
o+7/5ygsNfb43KkPOPXVwoBHTgwHd9UiqC/bOPgj4HkHSaR29l0/6zVDALeGdY7B
h4MxoCO9SExAY3vgg3vHVe3DLpoG+AwkUaZCM7zd7D/UeNt3OqnsG8rTS+blLV02
1a9wA+s17T/HftEbGQGeQy0tjw0jY6tqkbO9PQKGwxJeSg9u18kRR7vaugizKEUX
m8W8L6STvOWSXxdH+w8UQM0Kz01QMXLdlcHrdO4m7sT/s3EsE6Xam3kKxUz6vUPP
Bref5EX9IdEOWLd/7jPveUapju39rWnq501RPg70Y+iBmIZ9Vb9eJnMPIyM2lV8n
iqgZ0MROEDhdWg==
-----END CERTIFICATE-----