Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File:                     y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier:          TBc+WESZKy7d8warwbOFUk7NjOanU6K0pzidG+NxOc8=
Subject key identifier:   CE:FB:03:B0:31:91:55:13:8D:E4:66:05:1B:42:B1:8F:02:03:17:A0
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer:       /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial:       01962F06B68210671DE343EB4327C43E2CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number:          0480
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
                          2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: NM7A0LmT8zFuxwhGNP2S9bqR+4Bq1RyJzQA3RKRLxR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b6:82:10:67:1d:e3:43:eb:43:27:c4:3e:2c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=cefb03b0319155138de466051b42b18f020317a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:73:e9:eb:56:85:b8:bf:ab:9d:62:05:be:
                    74:ea:74:2e:a5:5d:77:f5:76:b8:8d:7a:3d:54:e8:
                    fb:64:63:ca:52:b3:b1:81:8a:f1:c4:0a:09:fb:da:
                    12:8f:86:b2:3a:86:b7:64:ae:6d:0f:a3:e8:d4:f2:
                    99:8e:7a:c1:38:b1:df:61:f7:02:e7:eb:fd:56:7b:
                    41:81:b0:05:ec:07:28:53:9f:4c:d7:5a:e4:21:91:
                    ef:10:c9:45:e8:8f:7f:d5:ec:32:39:9d:b3:76:67:
                    03:60:b3:60:80:31:61:83:00:6b:4e:89:12:7b:33:
                    5c:19:05:1e:69:24:a1:f1:66:ed:a8:67:ea:e7:24:
                    54:a1:08:f2:b6:7e:29:74:00:9e:22:af:b6:c4:32:
                    4c:ff:3c:8d:84:dd:06:7b:d9:26:87:6d:ad:dd:3c:
                    82:b6:65:12:42:49:e2:c9:13:19:31:5d:c0:ae:32:
                    f2:c9:da:83:2f:97:b3:60:56:12:2d:f5:c1:87:51:
                    5b:4b:98:65:ad:32:7c:0d:91:7e:62:56:39:69:29:
                    1b:f6:0f:a7:59:06:5b:00:4f:ae:d1:34:f5:38:7f:
                    e4:38:87:66:fa:3e:df:f7:93:d1:2d:8a:0a:d6:15:
                    c9:77:18:7c:55:af:bb:59:33:28:da:1d:58:5e:d4:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FB:03:B0:31:91:55:13:8D:E4:66:05:1B:42:B1:8F:02:03:17:A0
            X509v3 Authority Key Identifier:
                keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:bf:70:f8:7b:f9:e6:e5:cd:49:6a:42:99:9f:12:ee:1a:
         4e:6a:f3:a8:59:db:e4:ae:3f:30:e5:38:fd:ca:51:95:4d:b7:
         e5:08:02:4c:e9:04:27:45:4b:af:71:e9:1a:89:e3:2a:60:1a:
         2e:4b:90:f7:06:b5:38:4d:1e:d2:47:5d:ff:91:70:dc:69:8c:
         a1:19:b7:c4:b5:88:1e:2d:3a:85:fc:89:e7:2b:4d:d7:e4:0b:
         03:ab:e2:ce:94:cd:6d:92:44:0d:6f:ec:89:41:a3:c2:54:a1:
         f2:6b:db:16:c5:1c:5c:b4:c6:e1:7b:64:2d:52:09:85:be:af:
         ec:73:05:6b:43:f4:ed:24:0d:e8:19:5e:64:21:5e:bb:27:de:
         7f:0f:7e:08:3f:14:09:78:63:43:99:e6:c7:b1:cf:d3:e8:6d:
         0d:f5:c1:9d:ec:aa:fb:21:a5:14:ed:f9:61:7c:77:ba:c3:3b:
         3d:0e:bb:87:ea:27:a8:b6:8e:77:9e:89:66:b5:67:94:6a:12:
         2b:1c:4b:e9:f5:fe:93:68:04:9d:ec:e4:25:22:e6:c3:a8:92:
         dd:90:4c:07:e8:9f:cb:17:71:44:5b:49:45:e1:3a:da:22:90:
         9d:ed:a5:fe:df:b2:53:75:52:9f:1a:fd:1c:4f:4b:47:9a:cd:
         ff:7d:e5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBraCEGcd40PrQyfEPizWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZWI1ZmI3MzNhYmIzZTA3ZDc1ZmE4MGQ3YmU5Y2IxODEz
Y2QzZTAwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
EyhjZWZiMDNiMDMxOTE1NTEzOGRlNDY2MDUxYjQyYjE4ZjAyMDMxN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rhz6etWhbi/q51iBb506nQupV13
9Xa4jXo9VOj7ZGPKUrOxgYrxxAoJ+9oSj4ayOoa3ZK5tD6Po1PKZjnrBOLHfYfcC
5+v9VntBgbAF7AcoU59M11rkIZHvEMlF6I9/1ewyOZ2zdmcDYLNggDFhgwBrTokS
ezNcGQUeaSSh8WbtqGfq5yRUoQjytn4pdACeIq+2xDJM/zyNhN0Ge9kmh22t3TyC
tmUSQkniyRMZMV3ArjLyydqDL5ezYFYSLfXBh1FbS5hlrTJ8DZF+YlY5aSkb9g+n
WQZbAE+u0TT1OH/kOIdm+j7f95PRLYoK1hXJdxh8Va+7WTMo2h1YXtR9iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM77A7AxkVUTjeRmBRtCsY8CAxegMB8GA1UdIwQY
MBaAFMvrX7czq7PgfXX6gNe+nLGBPNPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQt
MmNjZmIzYjQxMjYwLzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQtMmNjZmIzYjQxMjYw
LzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyy/cPh7
+eblzUlqQpmfEu4aTmrzqFnb5K4/MOU4/cpRlU235QgCTOkEJ0VLr3HpGonjKmAa
LkuQ9wa1OE0e0kdd/5Fw3GmMoRm3xLWIHi06hfyJ5ytN1+QLA6vizpTNbZJEDW/s
iUGjwlSh8mvbFsUcXLTG4XtkLVIJhb6v7HMFa0P07SQN6BleZCFeuyfefw9+CD8U
CXhjQ5nmx7HP0+htDfXBneyq+yGlFO35YXx3usM7PQ67h+onqLaOd56JZrVnlGoS
KxxL6fX+k2gEnezkJSLmw6iS3ZBMB+ifyxdxRFtJReE62iKQne2l/t+yU3VSnxr9
HE9LR5rN/33l1A==
-----END CERTIFICATE-----