Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          RLZo5rebea0PpSKN2h0Jx7XVHSoSChS2saBP16BPpSw=
Subject key identifier:   80:82:EF:17:13:8B:53:38:D1:39:CB:6F:A5:89:5B:AA:F2:91:25:F2
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       01962DF3B303D47B05AE10E19720B5962672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: ZDBmbENwdmo6jHCS83WbXqsl0b8nEUs93OGUVnZ9MV4=)
                          2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b3:03:d4:7b:05:ae:10:e1:97:20:b5:96:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=8082ef17138b5338d139cb6fa5895baaf29125f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:e3:48:ff:5e:85:06:de:90:10:04:14:9d:
                    ec:36:a3:e6:28:f5:6a:a2:00:04:54:3c:8c:92:14:
                    48:2c:e1:38:a7:d9:76:5d:e0:f9:ad:ce:df:3e:28:
                    bd:94:d8:62:6e:b3:85:60:83:06:5c:92:19:88:95:
                    26:a5:8f:e0:04:2d:8d:c2:db:42:31:58:19:31:b1:
                    f2:1f:88:88:c4:b5:d7:f1:09:ff:c2:c0:52:d1:20:
                    48:05:68:be:63:2d:57:05:75:58:04:ee:4c:51:19:
                    62:b6:29:e5:32:28:c8:6d:fb:81:8c:90:39:82:1f:
                    52:d0:b6:8b:3f:22:d9:3c:58:77:b0:f2:87:c0:0d:
                    35:19:27:2b:af:16:0f:d0:64:94:1c:0c:74:70:a6:
                    53:09:67:59:a3:e6:e1:4a:ed:70:75:63:92:8a:25:
                    ae:28:20:14:9e:e1:69:ef:ae:0d:5d:94:08:69:7a:
                    1f:ab:ef:a8:b0:1c:1d:c5:a8:16:ac:a4:cc:bb:f7:
                    3b:e2:28:da:3c:25:42:bc:87:29:eb:17:4c:77:16:
                    3c:da:8a:ea:61:e4:d5:a1:9f:8a:94:53:59:93:9b:
                    48:58:42:7e:60:04:bc:c2:67:09:27:b6:ca:8f:0d:
                    21:d9:5c:1c:86:79:92:cc:ba:8e:60:de:80:f6:2a:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:82:EF:17:13:8B:53:38:D1:39:CB:6F:A5:89:5B:AA:F2:91:25:F2
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:60:79:e5:4a:29:be:18:99:45:10:13:c4:a3:60:44:a5:d5:
         b2:9e:03:4c:09:a2:4c:28:b0:88:41:4a:f5:72:ec:17:35:ea:
         2d:fb:ac:9d:e6:7e:cc:4c:a4:78:4b:1c:90:c2:e3:74:11:15:
         e4:59:60:5f:ac:bc:fb:d2:d5:71:1b:e2:9c:32:56:6e:b7:bd:
         40:78:e9:f1:39:57:67:7d:84:36:ac:ab:46:00:a7:f8:53:79:
         dd:ab:57:1e:cc:c0:3a:1c:ef:03:de:1a:99:d6:01:9e:16:43:
         82:08:5b:6a:83:f6:50:75:be:ae:d7:a4:36:1e:a3:03:ef:fd:
         42:9b:92:01:16:b3:23:a1:fe:c0:d5:df:c6:c2:15:8d:e7:86:
         03:ab:9c:0a:d0:ab:fd:13:8a:0d:2d:ef:80:d2:63:f6:03:16:
         d1:5b:c5:dd:95:cf:03:00:08:8d:de:b5:67:a5:42:42:cb:70:
         ec:8c:95:c9:a8:38:be:36:60:c7:93:58:bb:b7:ff:d7:32:a0:
         98:b1:7c:24:ff:77:2e:22:bb:bd:66:65:29:e4:f8:50:c9:28:
         d3:49:a7:e2:f2:95:b9:11:12:0f:fb:a9:1a:1f:82:2d:23:40:
         ba:47:a7:d7:a1:5c:25:0d:53:04:46:16:17:be:df:27:61:ec:
         b3:8b:52:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87MD1HsFrhDhlyC1liZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODYyMTYyM2FjNmNhYjhmNmJkZTU1MjZlN2EyOTMxZDYy
NmZlOGMwHhcNMjUwNDEzMDcwMTA3WhcNMjUwNDE0MDcwMTA3WjAzMTEwLwYDVQQD
Eyg4MDgyZWYxNzEzOGI1MzM4ZDEzOWNiNmZhNTg5NWJhYWYyOTEyNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTnjSP9ehQbekBAEFJ3sNqPmKPVq
ogAEVDyMkhRILOE4p9l2XeD5rc7fPii9lNhibrOFYIMGXJIZiJUmpY/gBC2NwttC
MVgZMbHyH4iIxLXX8Qn/wsBS0SBIBWi+Yy1XBXVYBO5MURlitinlMijIbfuBjJA5
gh9S0LaLPyLZPFh3sPKHwA01GScrrxYP0GSUHAx0cKZTCWdZo+bhSu1wdWOSiiWu
KCAUnuFp764NXZQIaXofq++osBwdxagWrKTMu/c74ijaPCVCvIcp6xdMdxY82orq
YeTVoZ+KlFNZk5tIWEJ+YAS8wmcJJ7bKjw0h2VwchnmSzLqOYN6A9iopxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICC7xcTi1M40TnLb6WJW6rykSXyMB8GA1UdIwQY
MBaAFHWGIWI6xsq49r3lUm56KTHWJv6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDct
ZjAyMTE2MjI2YTg4LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDctZjAyMTE2MjI2YTg4
LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmB55Uop
vhiZRRATxKNgRKXVsp4DTAmiTCiwiEFK9XLsFzXqLfusneZ+zEykeEsckMLjdBEV
5FlgX6y8+9LVcRvinDJWbre9QHjp8TlXZ32ENqyrRgCn+FN53atXHszAOhzvA94a
mdYBnhZDgghbaoP2UHW+rtekNh6jA+/9QpuSARazI6H+wNXfxsIVjeeGA6ucCtCr
/ROKDS3vgNJj9gMW0VvF3ZXPAwAIjd61Z6VCQstw7IyVyag4vjZgx5NYu7f/1zKg
mLF8JP93LiK7vWZlKeT4UMko00mn4vKVuRESD/upGh+CLSNAuken16FcJQ1TBEYW
F77fJ2Hss4tSRA==
-----END CERTIFICATE-----