Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
File:                     _ypds7oz42wW2_UmCy_idK5_siI.mft (raw, json)
Hash identifier:          Hg75GFskHM14eaxGuQqwLckpUehG/OefPCmAL8HfpLo=
Subject key identifier:   20:23:76:F7:6D:E7:72:3B:55:AC:C2:B2:A9:10:59:D5:EC:A5:48:94
Authority key identifier: FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
Certificate issuer:       /CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Certificate serial:       01962DF3F5F76EDE79904649BA784EFA241C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
Manifest number:          0BC9
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: _ypds7oz42wW2_UmCy_idK5_siI.crl (hash: IKpwPE8QhDMc2Rk0XMDmoIztAfq1v+b5bI20rrqwj78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:f7:6e:de:79:90:46:49:ba:78:4e:fa:24:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=202376f76de7723b55acc2b2a91059d5eca54894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:04:0c:45:66:2d:09:ee:eb:00:19:6f:54:
                    da:e1:82:09:2c:ee:b7:07:56:b9:d0:c0:07:31:63:
                    18:77:0b:07:6f:f2:aa:1c:d0:af:e5:91:43:96:68:
                    13:4d:9e:c3:1c:e8:65:03:52:31:9c:df:65:29:6b:
                    ce:83:09:1c:93:87:60:24:eb:69:18:6f:77:10:fe:
                    09:05:2d:df:e4:f9:42:08:6a:65:c4:d5:8a:63:f6:
                    44:21:ab:b6:7d:a7:8f:30:6b:b0:62:96:d4:c2:0c:
                    aa:cb:72:be:c7:16:f9:fb:6d:47:c5:92:18:ef:81:
                    35:13:15:f3:c6:8c:d7:42:0c:c3:0a:77:be:6a:0f:
                    46:2c:de:03:ba:d4:5a:5b:26:89:b7:9b:64:ae:46:
                    88:05:44:ba:16:1c:ea:59:8b:3e:36:e2:5e:cc:0b:
                    0f:e3:e1:3f:fd:34:73:cf:cf:89:5d:93:dd:db:58:
                    e5:ff:44:b1:62:5d:69:fd:65:cb:32:fe:ae:d7:15:
                    10:7a:e1:c7:b7:07:70:bf:1a:eb:c4:56:34:ed:0c:
                    bf:a5:46:30:4f:3f:82:29:a6:71:91:ab:81:1a:5c:
                    21:b0:5d:1b:e9:ea:93:f7:49:a6:a9:e4:36:59:0b:
                    6b:78:fd:c7:69:2b:6c:8a:f7:48:b9:06:51:87:b7:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:76:F7:6D:E7:72:3B:55:AC:C2:B2:A9:10:59:D5:EC:A5:48:94
            X509v3 Authority Key Identifier:
                keyid:FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:44:54:52:a8:21:09:e8:11:f7:8e:ed:ad:0a:87:2b:fa:
         df:b1:50:c8:34:7c:b5:3d:e6:db:89:35:40:56:d0:3b:9e:96:
         de:ae:c6:78:03:13:7f:62:90:fe:06:73:bd:0b:e2:f3:d3:f1:
         7d:30:0e:3c:a8:53:08:45:d7:8f:4f:1e:95:22:52:07:cb:62:
         d8:5f:40:ce:00:b8:8b:f1:34:89:67:d1:73:2c:9d:99:3e:2a:
         09:80:0e:db:4d:4d:74:fc:c3:05:8e:36:4b:e1:9b:f9:fd:a3:
         dd:f8:da:73:cd:05:1b:50:1b:51:35:a0:f3:0e:1a:86:9f:e6:
         c0:ed:d8:e3:a7:8d:03:cb:bb:19:e2:7c:3e:d0:e0:07:38:cc:
         54:b6:de:a5:43:f7:84:6b:bc:f1:6b:b4:2c:47:42:b5:76:07:
         78:c9:02:39:76:8d:47:a5:8f:12:f5:39:c5:2c:1e:d0:bd:26:
         93:c8:28:cf:62:ef:78:8c:cc:80:48:1c:78:13:42:25:79:7d:
         09:8c:45:13:47:58:3d:b7:f6:b1:b7:ed:9e:02:a3:0d:9e:59:
         57:06:4c:d2:49:dd:f5:48:25:54:de:b4:56:68:4d:41:e0:d9:
         ce:0f:b2:e9:18:fe:75:87:a1:78:47:44:bd:b5:7f:c6:d8:60:
         45:81:55:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/X3bt55kEZJunhO+iQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmE1ZGIzYmEzM2UzNmMxNmRiZjUyNjBiMmZlMjc0YWU3
ZmIyMjIwHhcNMjUwNDEzMDcwMTI0WhcNMjUwNDE0MDcwMTI0WjAzMTEwLwYDVQQD
EygyMDIzNzZmNzZkZTc3MjNiNTVhY2MyYjJhOTEwNTlkNWVjYTU0ODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRwEDEVmLQnu6wAZb1Ta4YIJLO63
B1a50MAHMWMYdwsHb/KqHNCv5ZFDlmgTTZ7DHOhlA1IxnN9lKWvOgwkck4dgJOtp
GG93EP4JBS3f5PlCCGplxNWKY/ZEIau2faePMGuwYpbUwgyqy3K+xxb5+21HxZIY
74E1ExXzxozXQgzDCne+ag9GLN4DutRaWyaJt5tkrkaIBUS6FhzqWYs+NuJezAsP
4+E//TRzz8+JXZPd21jl/0SxYl1p/WXLMv6u1xUQeuHHtwdwvxrrxFY07Qy/pUYw
Tz+CKaZxkauBGlwhsF0b6eqT90mmqeQ2WQtreP3HaStsivdIuQZRh7eKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAjdvdt53I7VazCsqkQWdXspUiUMB8GA1UdIwQY
MBaAFP8qXbO6M+NsFtv1Jgsv4nSuf7IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTIt
NTI2MGNkNWMyNGMzLzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTItNTI2MGNkNWMyNGMz
LzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEtEVFKo
IQnoEfeO7a0Khyv637FQyDR8tT3m24k1QFbQO56W3q7GeAMTf2KQ/gZzvQvi89Px
fTAOPKhTCEXXj08elSJSB8ti2F9AzgC4i/E0iWfRcyydmT4qCYAO201NdPzDBY42
S+Gb+f2j3fjac80FG1AbUTWg8w4ahp/mwO3Y46eNA8u7GeJ8PtDgBzjMVLbepUP3
hGu88Wu0LEdCtXYHeMkCOXaNR6WPEvU5xSwe0L0mk8goz2LveIzMgEgceBNCJXl9
CYxFE0dYPbf2sbftngKjDZ5ZVwZM0knd9UglVN60VmhNQeDZzg+y6Rj+dYeheEdE
vbV/xthgRYFVgw==
-----END CERTIFICATE-----