Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File:                     mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier:          UmMOlYiOy3IdVh3BDaBZTg8G3BzFvetc3T3jX5tF81Q=
Subject key identifier:   48:EB:B7:34:2A:75:27:F1:14:64:D5:1C:68:83:55:88:54:81:31:9B
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer:       /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial:       01962E61ACF6A290FE179F5E94069EC12890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
                          2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: EM1s2bAEVlsNQbSzGdIwUwAWJ81WN72/CpixL7Mrs40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:f6:a2:90:fe:17:9f:5e:94:06:9e:c1:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=48ebb7342a7527f11464d51c688355885481319b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:00:d9:f4:a6:c0:d3:bd:9b:a9:3a:03:06:
                    d9:04:d3:8e:d2:ec:15:30:4b:64:45:83:93:1f:de:
                    33:bf:83:1f:43:cc:6b:a8:f7:a5:a7:2a:14:b0:20:
                    3e:04:bc:db:8a:99:7a:9a:ea:3d:0e:be:ba:fb:63:
                    d7:c2:45:aa:4b:10:e9:b3:c3:92:82:85:fd:77:2c:
                    19:2a:57:8d:5e:b2:54:23:e2:58:a6:5f:6b:4d:29:
                    64:e7:8c:13:f1:9f:24:4e:a6:a6:0a:63:b0:bc:da:
                    2b:a7:ed:14:7e:5d:70:e5:35:c6:57:14:0b:f4:24:
                    c5:a4:8c:d6:c6:31:92:e8:c5:5c:fe:4e:e5:f4:4a:
                    1c:f2:12:29:c1:80:74:c4:7c:14:0e:23:24:63:3a:
                    da:2c:6c:dd:fa:1a:5d:03:8b:0b:01:52:a4:22:cd:
                    d1:d2:33:cf:0d:15:84:43:08:8e:d1:e0:44:d2:67:
                    c3:8c:79:01:61:d6:37:3c:7e:b3:9f:ab:bd:77:77:
                    17:8e:47:06:82:7c:69:22:23:78:9d:d9:9d:90:d4:
                    a5:d6:2c:fb:56:78:cf:b8:91:1a:ba:6b:9f:19:17:
                    5a:e2:04:da:e0:5d:9b:2f:e8:a2:2e:11:72:59:f6:
                    7a:d8:be:3a:96:58:71:3b:d5:6d:15:db:d4:65:27:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EB:B7:34:2A:75:27:F1:14:64:D5:1C:68:83:55:88:54:81:31:9B
            X509v3 Authority Key Identifier:
                keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:17:57:21:c9:8b:2f:3a:99:01:f1:e0:74:b0:bd:22:53:
         57:a1:5f:39:b1:84:fc:30:bc:82:ac:a9:15:9e:d1:55:9c:61:
         a6:d2:da:f9:ce:fc:a9:6a:fa:d5:31:8f:31:6a:e9:af:fa:6c:
         b3:08:6a:27:ad:32:d9:d2:55:b0:65:2e:ae:bd:bf:98:c3:8e:
         36:91:46:f4:ed:ae:1f:61:99:54:5d:11:e0:02:32:8e:c0:bf:
         50:00:8a:dc:f6:b0:5c:48:b5:7b:e8:ae:72:f9:11:c5:52:0b:
         cb:90:fe:24:d4:2e:1f:d2:43:d2:62:f8:96:53:00:09:5f:6c:
         c0:b9:bf:76:0a:e6:17:b4:81:d1:04:6c:05:e8:e5:19:d1:dc:
         6d:18:a4:e7:2e:e7:93:8a:7a:16:62:d6:f5:21:94:94:a6:56:
         3b:d8:17:63:cf:d3:e0:d3:1a:1b:1e:90:ba:48:42:14:a9:80:
         15:c4:dc:69:82:3e:95:8a:55:60:a2:a7:cd:ba:2a:e9:ca:13:
         ca:50:d4:17:7d:00:cb:19:72:47:ea:4a:df:c4:18:1c:60:73:
         59:f3:66:51:0c:d7:d4:28:13:99:48:c7:11:83:4a:5f:56:ee:
         86:2e:74:68:e6:91:54:b5:1a:11:0c:ff:80:0a:79:28:ad:2f:
         19:4c:03:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaz2opD+F59elAaewSiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy
OGU1N2IwHhcNMjUwNDEzMDkwMTE1WhcNMjUwNDE0MDkwMTE1WjAzMTEwLwYDVQQD
Eyg0OGViYjczNDJhNzUyN2YxMTQ2NGQ1MWM2ODgzNTU4ODU0ODEzMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnsA2fSmwNO9m6k6AwbZBNOO0uwV
MEtkRYOTH94zv4MfQ8xrqPelpyoUsCA+BLzbipl6muo9Dr66+2PXwkWqSxDps8OS
goX9dywZKleNXrJUI+JYpl9rTSlk54wT8Z8kTqamCmOwvNorp+0Ufl1w5TXGVxQL
9CTFpIzWxjGS6MVc/k7l9Eoc8hIpwYB0xHwUDiMkYzraLGzd+hpdA4sLAVKkIs3R
0jPPDRWEQwiO0eBE0mfDjHkBYdY3PH6zn6u9d3cXjkcGgnxpIiN4ndmdkNSl1iz7
VnjPuJEaumufGRda4gTa4F2bL+iiLhFyWfZ62L46llhxO9VtFdvUZSfjdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjrtzQqdSfxFGTVHGiDVYhUgTGbMB8GA1UdIwQY
MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct
NTJkNmIzZTQ3ODlmLzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODctNTJkNmIzZTQ3ODlm
LzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4UXVyHJ
iy86mQHx4HSwvSJTV6FfObGE/DC8gqypFZ7RVZxhptLa+c78qWr61TGPMWrpr/ps
swhqJ60y2dJVsGUurr2/mMOONpFG9O2uH2GZVF0R4AIyjsC/UACK3PawXEi1e+iu
cvkRxVILy5D+JNQuH9JD0mL4llMACV9swLm/dgrmF7SB0QRsBejlGdHcbRik5y7n
k4p6FmLW9SGUlKZWO9gXY8/T4NMaGx6QukhCFKmAFcTcaYI+lYpVYKKnzboq6coT
ylDUF30AyxlyR+pK38QYHGBzWfNmUQzX1CgTmUjHEYNKX1buhi50aOaRVLUaEQz/
gAp5KK0vGUwDhA==
-----END CERTIFICATE-----