Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File:                     ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier:          /SVkQO3547PG/VhufA0IA6iGSDB6FTNMzD9XHfstrDw=
Subject key identifier:   CA:B5:97:AA:93:E5:D2:D5:7E:7E:D7:09:EA:BD:22:CB:9D:16:69:65
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer:       /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial:       01962FAB92D887045BBFE518D67F400EB7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number:          042A
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
                          2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
                          3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: 3RmU/tLf0eiSD5D4aXjWIdJgFizP5yXJbWa0jaPW4F0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:d8:87:04:5b:bf:e5:18:d6:7f:40:0e:b7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=cab597aa93e5d2d57e7ed709eabd22cb9d166965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:34:c5:2d:c1:ab:42:9d:8b:b8:30:bb:2e:
                    90:47:4d:09:a0:d6:b5:3a:d2:ed:24:5e:d1:98:c1:
                    a1:c2:6b:1e:a9:9d:06:97:35:65:84:c6:63:e9:d4:
                    78:d1:47:1c:b2:2d:5f:5f:60:13:89:c0:bf:3e:d2:
                    37:54:30:dd:40:0f:bb:58:7f:d6:e0:52:59:b1:f1:
                    0e:c0:71:f1:66:6d:55:01:5a:f8:09:e1:76:c7:60:
                    e8:42:d9:d0:72:37:70:69:b2:52:fc:1f:10:e0:0c:
                    0c:1f:98:74:b3:6c:2c:c5:0b:9a:c8:1b:92:aa:23:
                    75:76:d3:27:95:82:29:ed:cf:85:88:08:9c:fc:96:
                    40:e2:33:d2:df:c4:5f:0f:c6:30:16:c2:c5:48:09:
                    14:ba:2a:43:f7:4c:65:cc:70:e3:ca:ba:89:21:08:
                    5a:0f:13:d7:c5:28:99:13:64:1c:a4:3c:24:60:06:
                    43:44:98:74:90:86:5b:15:0c:b2:10:90:09:f1:8c:
                    22:22:b3:e4:a0:6d:be:45:4d:5e:4c:b9:ca:77:67:
                    cf:8e:51:8f:fe:4e:a6:52:44:a1:fb:7c:33:4b:41:
                    6d:82:fa:08:32:be:c2:80:12:e1:f3:49:b0:2b:6c:
                    f0:a9:c9:5d:3b:66:3d:25:f0:31:ff:29:01:5d:e0:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B5:97:AA:93:E5:D2:D5:7E:7E:D7:09:EA:BD:22:CB:9D:16:69:65
            X509v3 Authority Key Identifier:
                keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:80:cc:46:29:78:00:9e:dc:cc:3c:93:b7:5d:bc:18:65:
         05:ef:b4:83:ad:53:d4:38:ff:51:c9:9a:28:13:4a:fa:5f:a4:
         1f:e4:61:19:3b:0a:1c:d1:39:50:44:1d:3b:61:f8:a9:14:d1:
         3f:1c:88:ff:dc:ea:0a:6b:61:6b:2a:90:b8:be:3d:a3:4e:0d:
         7d:f9:e0:e8:83:a5:84:aa:93:14:9f:3e:63:1a:af:6c:62:b4:
         e1:b4:bd:59:60:96:8a:c9:94:c6:10:65:49:c8:d7:92:ab:62:
         d0:7f:b1:09:59:2f:80:45:a3:a8:21:3a:3f:c1:bc:d6:31:05:
         cf:44:db:e9:77:09:f0:14:40:bd:2e:66:49:aa:e7:63:6c:e3:
         e4:45:c7:dd:b5:4d:b9:ed:67:9b:ab:1c:bc:80:22:67:15:66:
         9d:c2:25:3e:5f:37:9c:81:2a:ce:ca:22:67:58:8a:18:c3:81:
         c6:28:8c:28:5c:d5:68:68:b8:88:98:c0:e7:a5:ce:93:4a:3a:
         5c:1b:2f:bf:48:e0:a3:22:4e:a9:61:3a:f6:e9:6f:56:59:25:
         bb:79:0e:7f:97:42:dd:9a:88:17:9d:8d:0b:75:62:87:f9:90:
         1f:50:7c:2e:41:61:e1:11:8d:6f:da:87:b6:79:c7:dd:c0:23:
         e8:c5:7e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5LYhwRbv+UY1n9ADrepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDBlOTIzNGNjNjcyMTk1N2E0YWMyMTNlYWM2NzUzZWQ4
NWVlYTcwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
EyhjYWI1OTdhYTkzZTVkMmQ1N2U3ZWQ3MDllYWJkMjJjYjlkMTY2OTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOo0xS3Bq0Kdi7gwuy6QR00JoNa1
OtLtJF7RmMGhwmseqZ0GlzVlhMZj6dR40Uccsi1fX2ATicC/PtI3VDDdQA+7WH/W
4FJZsfEOwHHxZm1VAVr4CeF2x2DoQtnQcjdwabJS/B8Q4AwMH5h0s2wsxQuayBuS
qiN1dtMnlYIp7c+FiAic/JZA4jPS38RfD8YwFsLFSAkUuipD90xlzHDjyrqJIQha
DxPXxSiZE2QcpDwkYAZDRJh0kIZbFQyyEJAJ8YwiIrPkoG2+RU1eTLnKd2fPjlGP
/k6mUkSh+3wzS0FtgvoIMr7CgBLh80mwK2zwqcldO2Y9JfAx/ykBXeDCxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq1l6qT5dLVfn7XCeq9IsudFmllMB8GA1UdIwQY
MBaAFMnQ6SNMxnIZV6SsIT6sZ1Pthe6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt
OWEzMDBiMGE3ZWQyLzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy
LzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs6AzEYp
eACe3Mw8k7ddvBhlBe+0g61T1Dj/UcmaKBNK+l+kH+RhGTsKHNE5UEQdO2H4qRTR
PxyI/9zqCmthayqQuL49o04Nffng6IOlhKqTFJ8+YxqvbGK04bS9WWCWismUxhBl
ScjXkqti0H+xCVkvgEWjqCE6P8G81jEFz0Tb6XcJ8BRAvS5mSarnY2zj5EXH3bVN
ue1nm6scvIAiZxVmncIlPl83nIEqzsoiZ1iKGMOBxiiMKFzVaGi4iJjA56XOk0o6
XBsvv0jgoyJOqWE69ulvVlklu3kOf5dC3ZqIF52NC3Vih/mQH1B8LkFh4RGNb9qH
tnnH3cAj6MV+/w==
-----END CERTIFICATE-----