Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File:                     YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier:          JqVng7GnAns3WO7qixb2OvDNHX97lqaPeGsVjILN7vM=
Subject key identifier:   2F:22:55:DE:61:53:BA:AE:75:69:F6:2B:46:9F:E0:33:2E:E5:F9:52
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer:       /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial:       01962F068E60BD78C20CADE4FF4E2E45106B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number:          04D2
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: zILSEfrfuxzA3RlgRUXWvgXRcBe75OVp1lJ6bCKPqMg=)
                          2: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:60:bd:78:c2:0c:ad:e4:ff:4e:2e:45:10:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=2f2255de6153baae7569f62b469fe0332ee5f952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:db:c0:06:15:51:24:f3:d8:38:84:06:8e:
                    7c:a3:4a:8d:20:fa:31:8e:3c:8c:ea:a9:72:78:60:
                    87:0e:80:19:08:a4:5e:56:09:0e:af:58:2c:06:ca:
                    3c:63:16:7d:86:34:cc:0b:c4:7c:85:a4:e1:d0:2c:
                    c5:fb:dc:7b:72:c0:ba:96:38:f8:d2:d0:f5:33:90:
                    35:e5:8b:c2:22:5d:9f:17:63:b5:8a:17:f1:be:20:
                    29:0b:46:e7:f4:ba:15:88:7a:ab:90:a4:eb:3e:4c:
                    f2:57:52:9d:59:ba:62:93:4b:51:2d:07:57:d2:d0:
                    c0:ec:0d:af:ef:ea:de:33:46:b4:f7:38:e4:b0:8d:
                    04:97:b9:a4:6b:01:52:bb:65:53:7a:45:4a:1c:da:
                    ae:9b:6a:53:d2:43:5d:14:32:8b:83:84:9a:d4:65:
                    6f:7f:de:ce:d7:1f:6f:2b:8a:ed:5b:68:45:08:e2:
                    b4:56:47:c1:bd:0b:35:4d:53:50:6f:a4:19:ae:7f:
                    f6:d1:39:8b:f3:47:9c:34:1a:07:24:5a:24:9f:19:
                    6f:4a:1e:a3:e6:40:1e:54:52:7d:c6:7c:79:d7:fa:
                    3e:54:ad:71:34:bc:e0:d8:da:83:f8:99:00:ac:fd:
                    e7:20:57:05:8f:05:30:12:89:f4:73:b4:a0:65:fe:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:22:55:DE:61:53:BA:AE:75:69:F6:2B:46:9F:E0:33:2E:E5:F9:52
            X509v3 Authority Key Identifier:
                keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:64:77:cd:72:42:e5:e4:6b:7e:95:37:72:4e:85:ac:9d:75:
         ec:3d:79:7c:5c:dd:f4:f3:9d:49:32:b2:9e:7f:9d:46:a7:94:
         06:91:8f:0b:25:dc:46:43:26:77:0a:38:ab:9d:f9:db:94:12:
         a5:ae:ba:e1:04:a2:b2:75:92:1b:3d:b1:ba:ea:67:0d:7d:4c:
         38:56:f2:16:cd:1d:fe:57:8d:43:42:7e:83:39:bd:7d:20:9a:
         24:bf:c1:2a:e3:5d:b3:fe:23:d8:87:91:da:84:04:b7:28:69:
         db:44:c3:e1:20:f0:ee:7e:62:99:76:13:28:a6:96:d8:29:66:
         a8:78:9d:f1:ac:a2:99:a6:7e:b0:79:64:f7:e1:c1:ce:9f:db:
         51:90:55:22:72:6c:d7:20:c9:e3:1c:de:dc:58:d6:56:d8:5c:
         3c:1c:08:d3:9b:97:d4:ba:01:79:9f:fb:ba:a4:9a:88:fb:9f:
         82:32:b6:10:d5:28:2a:91:d3:87:35:c1:8c:d3:cd:5d:2f:37:
         bf:40:7d:73:c3:cb:da:06:11:e3:0c:70:86:36:3f:c2:b6:8e:
         66:9f:42:9e:a1:9e:4d:1d:ff:82:cb:52:a5:dc:c3:b4:c5:87:
         f8:9c:71:d0:26:c4:fc:3a:20:b2:b0:1c:c8:c0:4c:df:17:d5:
         e6:c6:18:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBo5gvXjCDK3k/04uRRBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm
YjQyOTUwHhcNMjUwNDEzMTIwMTIwWhcNMjUwNDE0MTIwMTIwWjAzMTEwLwYDVQQD
EygyZjIyNTVkZTYxNTNiYWFlNzU2OWY2MmI0NjlmZTAzMzJlZTVmOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKLbwAYVUSTz2DiEBo58o0qNIPox
jjyM6qlyeGCHDoAZCKReVgkOr1gsBso8YxZ9hjTMC8R8haTh0CzF+9x7csC6ljj4
0tD1M5A15YvCIl2fF2O1ihfxviApC0bn9LoViHqrkKTrPkzyV1KdWbpik0tRLQdX
0tDA7A2v7+reM0a09zjksI0El7mkawFSu2VTekVKHNqum2pT0kNdFDKLg4Sa1GVv
f97O1x9vK4rtW2hFCOK0VkfBvQs1TVNQb6QZrn/20TmL80ecNBoHJFoknxlvSh6j
5kAeVFJ9xnx51/o+VK1xNLzg2NqD+JkArP3nIFcFjwUwEon0c7SgZf48dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8iVd5hU7qudWn2K0af4DMu5flSMB8GA1UdIwQY
MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt
NGQ2ODVhY2E4Mjc5LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5
LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2R3zXJC
5eRrfpU3ck6FrJ117D15fFzd9POdSTKynn+dRqeUBpGPCyXcRkMmdwo4q53525QS
pa664QSisnWSGz2xuupnDX1MOFbyFs0d/leNQ0J+gzm9fSCaJL/BKuNds/4j2IeR
2oQEtyhp20TD4SDw7n5imXYTKKaW2ClmqHid8ayimaZ+sHlk9+HBzp/bUZBVInJs
1yDJ4xze3FjWVthcPBwI05uX1LoBeZ/7uqSaiPufgjK2ENUoKpHThzXBjNPNXS83
v0B9c8PL2gYR4wxwhjY/wraOZp9CnqGeTR3/gstSpdzDtMWH+Jxx0CbE/DogsrAc
yMBM3xfV5sYYSw==
-----END CERTIFICATE-----