Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          qrZp7k2hZStnf4VoZ9JvyMZrmr29K5JzYsXH/3CGhUw=
Subject key identifier:   D2:E2:D4:28:48:16:88:EA:52:1F:C5:96:43:F8:23:AF:3B:35:36:B1
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       01962F073FD99AF48EAAF4B830A632F7F254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0929
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: s4kxSR5ieHtNU+NTtyyLO4zvy15eo2mdGWdfyEmWa4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3f:d9:9a:f4:8e:aa:f4:b8:30:a6:32:f7:f2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=d2e2d428481688ea521fc59643f823af3b3536b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:9b:19:1a:92:a5:dd:c1:52:c7:45:71:3a:
                    f3:01:27:e7:2b:7a:68:31:f2:09:7a:10:d3:96:17:
                    2a:87:b0:ca:e8:02:62:8d:57:82:1d:57:f9:c3:ad:
                    b9:39:d0:4f:bf:76:0b:c3:e9:c6:46:a5:8a:36:fc:
                    33:bf:8b:77:a4:5d:1a:bb:f6:8c:27:b4:14:20:e8:
                    ce:2e:a5:05:65:0a:62:e1:78:70:9d:e5:b9:69:8e:
                    fb:95:f2:93:2b:61:96:94:d6:85:a0:2f:db:f9:e7:
                    cc:da:f7:6f:28:59:62:cb:fb:13:1f:fb:22:97:9a:
                    30:f8:e9:5d:e8:26:9a:0a:ab:88:f6:7f:af:98:96:
                    b4:0c:0c:b1:7e:ec:b7:d6:28:f9:c9:3c:66:77:32:
                    06:01:7f:95:6b:c0:89:86:49:20:44:22:0e:45:12:
                    bb:09:e9:3c:46:93:75:9f:e7:74:c3:57:5e:ab:dc:
                    0b:92:e9:13:40:9c:e3:b4:db:34:34:36:f7:93:f7:
                    fe:98:af:22:53:e7:90:63:7c:a1:e0:ba:18:cf:a3:
                    62:10:05:d8:8b:db:95:20:7a:2b:9a:6c:c2:fe:fe:
                    ce:3b:b4:d1:ff:96:66:67:6e:24:33:93:42:dc:bc:
                    28:87:fa:bf:41:b6:50:4b:a1:b4:72:a6:c2:cf:08:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:D4:28:48:16:88:EA:52:1F:C5:96:43:F8:23:AF:3B:35:36:B1
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:14:22:c8:6e:19:3b:2b:30:79:ea:5f:86:4d:4b:3d:66:0d:
         06:db:2d:e5:2b:18:50:b1:d2:c3:09:d8:98:d4:6c:76:1e:09:
         78:58:05:73:e9:c3:fb:8b:91:ca:22:08:68:9f:d4:bb:73:72:
         2b:c6:c6:c8:96:5a:16:ac:a6:e0:d5:ab:07:32:24:dd:fe:ea:
         12:a6:88:16:50:5d:81:c0:9c:2c:f9:10:29:44:6a:ab:b9:14:
         9c:64:d9:82:f4:62:4e:39:8c:b3:22:d8:18:89:ea:65:12:6b:
         a0:8e:ae:2b:39:f6:1c:2b:d6:d6:db:d6:c5:af:3d:65:42:69:
         22:77:5a:43:5e:be:35:6c:ae:cc:fe:3c:d0:4a:79:74:c8:2b:
         d4:41:c6:a6:44:26:76:98:e7:3b:93:03:46:f8:ef:3c:34:94:
         04:92:39:f1:00:f2:3a:74:c7:4b:24:e0:08:c7:9a:19:f0:12:
         b1:c1:49:ef:fa:d8:38:21:82:44:bb:b3:59:2d:c8:dc:7c:36:
         31:52:02:01:3d:c8:78:86:b7:a5:2f:b7:28:89:01:2e:ae:4e:
         da:ae:ec:46:f8:0b:46:0e:96:48:49:09:c1:63:3b:96:cf:99:
         69:04:2f:78:1d:60:80:42:26:97:34:ba:60:0d:29:93:0f:04:
         2e:b4:c7:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBz/ZmvSOqvS4MKYy9/JUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4
YzNiZjEwHhcNMjUwNDEzMTIwMjA2WhcNMjUwNDE0MTIwMjA2WjAzMTEwLwYDVQQD
EyhkMmUyZDQyODQ4MTY4OGVhNTIxZmM1OTY0M2Y4MjNhZjNiMzUzNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ybGRqSpd3BUsdFcTrzASfnK3po
MfIJehDTlhcqh7DK6AJijVeCHVf5w625OdBPv3YLw+nGRqWKNvwzv4t3pF0au/aM
J7QUIOjOLqUFZQpi4XhwneW5aY77lfKTK2GWlNaFoC/b+efM2vdvKFliy/sTH/si
l5ow+Old6CaaCquI9n+vmJa0DAyxfuy31ij5yTxmdzIGAX+Va8CJhkkgRCIORRK7
Cek8RpN1n+d0w1deq9wLkukTQJzjtNs0NDb3k/f+mK8iU+eQY3yh4LoYz6NiEAXY
i9uVIHormmzC/v7OO7TR/5ZmZ24kM5NC3Lwoh/q/QbZQS6G0cqbCzwiNeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLi1ChIFojqUh/FlkP4I687NTaxMB8GA1UdIwQY
MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt
NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh
LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBQiyG4Z
Oysweepfhk1LPWYNBtst5SsYULHSwwnYmNRsdh4JeFgFc+nD+4uRyiIIaJ/Uu3Ny
K8bGyJZaFqym4NWrBzIk3f7qEqaIFlBdgcCcLPkQKURqq7kUnGTZgvRiTjmMsyLY
GInqZRJroI6uKzn2HCvW1tvWxa89ZUJpIndaQ16+NWyuzP480Ep5dMgr1EHGpkQm
dpjnO5MDRvjvPDSUBJI58QDyOnTHSyTgCMeaGfASscFJ7/rYOCGCRLuzWS3I3Hw2
MVICAT3IeIa3pS+3KIkBLq5O2q7sRvgLRg6WSEkJwWM7ls+ZaQQveB1ggEImlzS6
YA0pkw8ELrTHsg==
-----END CERTIFICATE-----