Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File:                     SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier:          ao3Tz/EX3QyIkp/efBsSUqNMEFwfeRty+PpiRGQrYWs=
Subject key identifier:   7C:8D:2D:ED:12:B6:F2:52:81:89:D7:A8:A5:3C:E8:7F:16:57:C1:AD
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer:       /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial:       01962F06E4A33D865466A3CAC6C614084A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number:          0E81
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
                          2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: YT9TKkSame8ry2Z8SutKQhcyiH3Q1KTMCXpvS/27s2w=)
                          3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e4:a3:3d:86:54:66:a3:ca:c6:c6:14:08:4a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=7c8d2ded12b6f2528189d7a8a53ce87f1657c1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bb:7b:0b:32:63:5f:bb:e1:63:41:6c:ed:2f:
                    1d:e2:a2:b8:4a:db:37:99:07:5b:c9:f4:20:55:61:
                    e2:4b:15:be:b0:02:c4:13:ca:3d:b4:3e:ba:1b:ad:
                    6b:cb:44:91:c4:22:a9:36:a7:9c:42:08:11:98:24:
                    ff:ad:44:8e:97:19:78:b5:ef:82:4a:3e:91:4b:ad:
                    76:d6:94:dc:2d:da:95:68:d5:cc:b5:0a:4c:1c:63:
                    35:b0:23:54:d6:19:49:5d:57:0b:60:3c:01:4d:0e:
                    3d:60:5e:5d:3e:98:1b:2b:31:f1:46:84:a0:68:6a:
                    d6:96:40:15:d7:0c:c5:c9:17:40:f9:5c:c7:a4:02:
                    d4:33:fc:df:40:b0:e7:a4:9c:59:80:ec:a2:0c:17:
                    80:23:aa:68:a7:5a:e2:c7:2d:e2:17:fd:ee:06:6e:
                    02:29:27:58:74:61:e4:d8:3b:3d:02:19:96:13:2d:
                    46:fa:b2:00:86:f3:38:f0:b1:42:7d:c2:3b:7d:df:
                    86:59:3f:27:64:88:33:28:9e:38:ef:91:38:ec:54:
                    d9:f2:a1:ff:1f:d4:b9:5f:3b:db:2b:bc:68:b8:bf:
                    21:7c:49:f6:18:02:e6:06:c6:72:3b:c8:0c:0a:ed:
                    f3:d3:22:eb:33:2c:4d:a0:f3:3f:1f:01:a5:ba:58:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:2D:ED:12:B6:F2:52:81:89:D7:A8:A5:3C:E8:7F:16:57:C1:AD
            X509v3 Authority Key Identifier:
                keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:82:4d:e7:80:f0:1c:36:45:c9:15:ba:57:d9:89:37:6d:2b:
         36:34:e9:5c:31:b0:f6:97:6e:de:e6:44:c8:99:0e:3d:38:b6:
         19:c0:db:db:6a:04:4a:5a:10:3c:e9:d2:d8:fa:7f:1f:eb:60:
         1b:3e:a2:eb:33:a0:ec:c5:6d:52:60:b9:db:ab:df:36:53:65:
         39:d9:f0:a9:59:6c:77:53:a6:5a:fc:91:1e:bb:d8:a5:fc:13:
         92:5e:d8:d6:61:4d:19:02:d4:5e:39:4e:98:80:ea:a7:25:15:
         d6:70:89:e3:83:67:5c:9d:fb:1c:e8:ce:04:bd:b2:90:79:55:
         e8:cf:73:9c:ba:f1:e2:01:a1:2c:19:60:78:e7:d8:79:82:13:
         e7:3a:57:96:eb:38:55:c9:cc:50:7f:1b:de:dd:06:5f:e0:9a:
         08:37:28:7a:31:0f:07:87:c8:37:80:35:19:1f:f4:97:a0:e7:
         63:28:c2:10:e0:ff:14:8a:eb:a6:5d:92:c4:e8:26:6e:26:88:
         2f:c1:15:ff:94:14:48:15:c6:d1:4e:6e:71:34:08:23:a4:0c:
         f6:dd:b1:a0:66:5e:29:5d:02:29:ba:d7:39:4a:ea:f7:08:b8:
         aa:83:44:5f:29:b3:23:48:1d:6a:6d:97:bb:1c:be:ad:f9:68:
         a7:39:58:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuSjPYZUZqPKxsYUCEoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODRkMGNjNjcwM2JmOTQyYzZkYWM4OWRmZjFhN2JmNjYz
MmVhOGIwHhcNMjUwNDEzMTIwMTQyWhcNMjUwNDE0MTIwMTQyWjAzMTEwLwYDVQQD
Eyg3YzhkMmRlZDEyYjZmMjUyODE4OWQ3YThhNTNjZTg3ZjE2NTdjMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7t7CzJjX7vhY0Fs7S8d4qK4Sts3
mQdbyfQgVWHiSxW+sALEE8o9tD66G61ry0SRxCKpNqecQggRmCT/rUSOlxl4te+C
Sj6RS6121pTcLdqVaNXMtQpMHGM1sCNU1hlJXVcLYDwBTQ49YF5dPpgbKzHxRoSg
aGrWlkAV1wzFyRdA+VzHpALUM/zfQLDnpJxZgOyiDBeAI6pop1rixy3iF/3uBm4C
KSdYdGHk2Ds9AhmWEy1G+rIAhvM48LFCfcI7fd+GWT8nZIgzKJ4475E47FTZ8qH/
H9S5XzvbK7xouL8hfEn2GALmBsZyO8gMCu3z0yLrMyxNoPM/HwGlulhrTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyNLe0StvJSgYnXqKU86H8WV8GtMB8GA1UdIwQY
MBaAFEmE0MxnA7+ULG2sid/xp79mMuqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjIt
MTQ3MGJjY2VlYjFiLzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjItMTQ3MGJjY2VlYjFi
LzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYJN54Dw
HDZFyRW6V9mJN20rNjTpXDGw9pdu3uZEyJkOPTi2GcDb22oESloQPOnS2Pp/H+tg
Gz6i6zOg7MVtUmC526vfNlNlOdnwqVlsd1OmWvyRHrvYpfwTkl7Y1mFNGQLUXjlO
mIDqpyUV1nCJ44NnXJ37HOjOBL2ykHlV6M9znLrx4gGhLBlgeOfYeYIT5zpXlus4
VcnMUH8b3t0GX+CaCDcoejEPB4fIN4A1GR/0l6DnYyjCEOD/FIrrpl2SxOgmbiaI
L8EV/5QUSBXG0U5ucTQII6QM9t2xoGZeKV0CKbrXOUrq9wi4qoNEXymzI0gdam2X
uxy+rflopzlYgg==
-----END CERTIFICATE-----