Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File:                     yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier:          5y3p1LlqFY98bVpqnvm3z1q6D4IAU/l98gJrZr/T23E=
Subject key identifier:   26:72:42:FE:C7:F0:70:8F:01:F8:F7:19:76:D3:D8:59:1D:9B:75:AB
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer:       /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial:       01962F7511A4E486315153FCFE4153FFDDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number:          013B
Signing time:             Sun 13 Apr 2025 14:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:03 +0000
Files and hashes:         1: Zja22H7huKyd4DPgiFnlD1La7Es.roa (hash: AXLErsCzJc/qr3Tna9lN0B3Ap4Vz9K2Svk3Dy2hJER8=)
                          2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: 8HQyt3eyoAAD9Alp3xpkzRtFuJhIxoCypT4NepamdEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:11:a4:e4:86:31:51:53:fc:fe:41:53:ff:dd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
        Validity
            Not Before: Apr 13 14:02:03 2025 GMT
            Not After : Apr 14 14:02:03 2025 GMT
        Subject: CN=267242fec7f0708f01f8f71976d3d8591d9b75ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:bf:41:6d:4b:da:17:03:24:5c:27:00:87:
                    20:a9:fd:21:86:63:9e:ba:37:ad:3a:f1:04:af:e7:
                    13:84:c0:54:96:98:91:41:59:21:31:df:4e:13:c1:
                    98:00:47:e2:6d:26:17:9b:87:50:06:fa:1f:50:3f:
                    dd:6b:17:e7:87:d0:cc:a3:03:d0:2d:50:f8:5a:ca:
                    0a:9d:09:97:d2:46:6f:36:c0:e9:c6:fc:b7:b0:aa:
                    3d:e2:00:00:69:73:f5:6a:4e:59:9f:f1:d6:d4:94:
                    ee:fe:bd:0d:24:1f:0e:9a:2a:c8:3c:2c:e0:df:01:
                    5a:b1:b9:d5:2e:f3:36:5a:5b:95:74:2e:40:80:37:
                    4d:eb:53:ba:6a:ac:26:b4:a9:e9:6c:97:51:44:ba:
                    e6:00:71:13:c6:9a:1d:a2:95:f5:86:8f:b9:24:98:
                    d7:01:14:af:4c:f9:ac:22:ca:ef:9c:2e:04:3c:99:
                    37:3e:75:1e:47:ef:68:8d:b2:cf:1e:ba:e2:4a:27:
                    43:a8:00:b1:ad:95:53:74:f1:38:0d:bf:33:b1:00:
                    2e:67:0d:75:e4:45:87:a8:d6:ed:88:de:2c:19:65:
                    78:dc:89:4f:2b:12:af:0d:e6:1f:4e:6c:72:24:17:
                    1f:29:72:f0:af:2b:8f:91:78:e2:70:79:48:c0:da:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:42:FE:C7:F0:70:8F:01:F8:F7:19:76:D3:D8:59:1D:9B:75:AB
            X509v3 Authority Key Identifier:
                keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:63:b9:45:bb:41:04:aa:5e:08:8f:fc:cb:3d:3f:e4:b0:6d:
         00:c0:9a:a7:75:9c:15:71:35:df:34:e1:32:0f:d6:7d:0f:6a:
         d0:d4:27:d3:9e:7e:a3:b5:20:2f:b3:88:6c:8f:ad:aa:bc:11:
         bb:bf:bd:34:38:2a:34:92:97:b4:88:a2:6c:c3:64:f7:d8:8f:
         aa:08:13:89:41:6f:cb:30:96:36:d1:e8:10:d7:23:54:2c:e8:
         02:8c:3c:60:a6:9f:98:cf:f1:22:a4:20:c0:2c:1a:17:6f:71:
         13:be:1a:9e:b2:cf:d1:0f:69:65:b9:ca:96:e5:18:3c:b6:d2:
         f4:21:9d:b1:20:1f:7e:e3:4f:63:a3:7e:69:f4:2b:c5:7d:53:
         c3:d5:74:ea:a3:75:9a:54:0d:18:37:bb:0d:1f:d6:66:06:cf:
         fd:c9:ad:b8:89:7a:c3:8c:54:e2:b7:e4:71:34:16:13:a2:81:
         a0:e7:b5:40:8f:9b:4e:8f:74:53:20:07:2f:78:1a:24:ff:70:
         0e:37:b0:16:4d:13:8d:2f:5a:76:8a:b6:ca:4e:d7:c8:55:b0:
         6f:ae:58:01:56:dc:b8:b6:68:0f:e5:ca:b0:9a:7b:20:29:91:
         d7:3e:25:36:39:2e:0e:92:7f:5f:f2:fd:dd:8e:2c:66:5b:a3:
         ea:cb:e0:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdRGk5IYxUVP8/kFT/93bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWVmZDA4NDRlYjEzOWFiMjFmODBkNDA3MmNlMGI4ZWRj
YzA2YjUwHhcNMjUwNDEzMTQwMjAzWhcNMjUwNDE0MTQwMjAzWjAzMTEwLwYDVQQD
EygyNjcyNDJmZWM3ZjA3MDhmMDFmOGY3MTk3NmQzZDg1OTFkOWI3NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni2/QW1L2hcDJFwnAIcgqf0hhmOe
ujetOvEEr+cThMBUlpiRQVkhMd9OE8GYAEfibSYXm4dQBvofUD/daxfnh9DMowPQ
LVD4WsoKnQmX0kZvNsDpxvy3sKo94gAAaXP1ak5Zn/HW1JTu/r0NJB8OmirIPCzg
3wFasbnVLvM2WluVdC5AgDdN61O6aqwmtKnpbJdRRLrmAHETxpodopX1ho+5JJjX
ARSvTPmsIsrvnC4EPJk3PnUeR+9ojbLPHrriSidDqACxrZVTdPE4Db8zsQAuZw11
5EWHqNbtiN4sGWV43IlPKxKvDeYfTmxyJBcfKXLwryuPkXjicHlIwNrsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZyQv7H8HCPAfj3GXbT2Fkdm3WrMB8GA1UdIwQY
MBaAFMru/QhE6xOash+A1Acs4LjtzAa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZjU2OWYtY2MzYy00MjllLWJkMWQt
YjRiOTdmMTFjM2RkLzEveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83ZjU2OWYtY2MzYy00MjllLWJkMWQtYjRiOTdmMTFjM2Rk
LzEveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomO5RbtB
BKpeCI/8yz0/5LBtAMCap3WcFXE13zThMg/WfQ9q0NQn055+o7UgL7OIbI+tqrwR
u7+9NDgqNJKXtIiibMNk99iPqggTiUFvyzCWNtHoENcjVCzoAow8YKafmM/xIqQg
wCwaF29xE74anrLP0Q9pZbnKluUYPLbS9CGdsSAffuNPY6N+afQrxX1Tw9V06qN1
mlQNGDe7DR/WZgbP/cmtuIl6w4xU4rfkcTQWE6KBoOe1QI+bTo90UyAHL3gaJP9w
DjewFk0TjS9adoq2yk7XyFWwb65YAVbcuLZoD+XKsJp7ICmR1z4lNjkuDpJ/X/L9
3Y4sZluj6svgVQ==
-----END CERTIFICATE-----