Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File:                     Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier:          91Zl19oxJtsHgwEtjfXTOBSze1rK2tKuRA1pN2Cks14=
Subject key identifier:   47:F7:6D:FF:45:11:61:45:53:B2:8F:F9:B0:FC:5E:23:B8:DF:CE:65
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer:       /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial:       01962F3DC44815A8D34A9BC70EFE5F305232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number:          0E69
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: jLOxGUpfc6WiwpJJQPN8ySqr5ExCk+v0VNZEGQ2ilkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c4:48:15:a8:d3:4a:9b:c7:0e:fe:5f:30:52:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=47f76dff4511614553b28ff9b0fc5e23b8dfce65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:2b:1e:27:cc:29:c8:07:03:58:04:8d:32:
                    35:87:f9:04:aa:51:45:0e:60:05:3c:f6:56:57:86:
                    9c:75:36:dd:24:44:80:b1:28:c8:bf:5b:58:0e:03:
                    97:05:04:73:98:3d:cd:dc:01:25:29:f8:f9:27:d7:
                    ed:81:d6:02:9e:7d:1d:16:68:ea:24:0f:7d:4d:ca:
                    a9:c9:8a:4a:aa:64:eb:76:3d:42:16:34:2b:22:7c:
                    fe:8e:26:dc:b3:c4:f2:30:57:5f:c0:2b:6e:9c:61:
                    45:71:22:a9:2a:ea:19:f4:13:51:7b:e6:d2:95:57:
                    9f:90:5f:bc:a3:5d:8b:c9:e3:29:c3:48:95:f8:a7:
                    5d:b8:3d:24:fe:16:04:23:c8:49:73:ae:29:2f:e8:
                    e2:6f:df:f4:73:82:05:39:1b:51:88:2e:af:ee:32:
                    7f:47:94:81:d0:c9:06:a8:56:49:bb:07:a4:91:6e:
                    7a:a6:c6:3d:88:94:66:4c:41:9b:96:4c:23:b6:7e:
                    6c:27:65:c1:cc:2c:d5:e5:28:82:f0:e8:64:46:de:
                    66:43:ad:60:f1:0e:ae:99:97:51:4c:b1:61:11:c4:
                    62:c0:16:97:d9:45:67:03:1b:58:6c:a3:fb:f6:52:
                    f5:53:fa:35:81:4a:99:26:02:16:f8:07:c2:de:47:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F7:6D:FF:45:11:61:45:53:B2:8F:F9:B0:FC:5E:23:B8:DF:CE:65
            X509v3 Authority Key Identifier:
                keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:b2:1b:ff:40:f0:6b:78:e5:2c:56:2e:bb:db:73:96:4f:
         dd:3d:51:f9:06:c2:d8:d2:86:31:dc:dc:b9:2e:fc:ed:d3:17:
         bb:1f:f0:63:8b:9d:80:7b:e7:36:e1:cf:3f:2a:4b:9d:c0:0d:
         50:3b:fe:43:65:ee:6d:41:e2:d7:62:dd:de:c3:f3:76:eb:a0:
         92:db:71:8f:cc:35:c0:de:28:b0:e4:c9:cb:52:be:31:92:53:
         52:6f:37:01:6d:ee:32:15:80:2a:c1:8e:26:6d:a3:e7:fa:62:
         4a:49:8c:44:a5:09:02:f2:6f:af:40:71:8c:83:ee:3e:2e:6c:
         75:91:b4:cc:91:df:23:84:8a:dd:f3:ae:e0:81:66:d7:e8:7f:
         db:e3:1e:42:34:5a:f8:bf:2b:ce:56:0b:78:e5:b5:32:46:e5:
         15:e6:42:9a:03:c4:24:be:68:30:a1:75:d2:0a:2f:26:07:ec:
         d9:9e:6d:ad:22:e2:0f:b0:07:63:ce:df:dc:94:e7:c7:78:98:
         8b:2d:6c:56:79:60:66:e1:73:7b:36:a7:39:1a:38:f2:b1:e6:
         11:5c:bf:a9:91:fb:50:a1:23:6d:e8:60:19:ed:26:99:5d:c7:
         b1:02:5c:57:e4:8b:0d:8b:fc:31:c3:b5:19:33:f7:1a:b1:cd:
         33:f7:b6:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcRIFajTSpvHDv5fMFIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODVlYmVlNDM2M2Y1YWQ5MzM2NmNiMjhmNDJmZDViNzI3
ODNlNmYwHhcNMjUwNDEzMTMwMTM5WhcNMjUwNDE0MTMwMTM5WjAzMTEwLwYDVQQD
Eyg0N2Y3NmRmZjQ1MTE2MTQ1NTNiMjhmZjliMGZjNWUyM2I4ZGZjZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwywrHifMKcgHA1gEjTI1h/kEqlFF
DmAFPPZWV4acdTbdJESAsSjIv1tYDgOXBQRzmD3N3AElKfj5J9ftgdYCnn0dFmjq
JA99TcqpyYpKqmTrdj1CFjQrInz+jibcs8TyMFdfwCtunGFFcSKpKuoZ9BNRe+bS
lVefkF+8o12LyeMpw0iV+KdduD0k/hYEI8hJc64pL+jib9/0c4IFORtRiC6v7jJ/
R5SB0MkGqFZJuwekkW56psY9iJRmTEGblkwjtn5sJ2XBzCzV5SiC8OhkRt5mQ61g
8Q6umZdRTLFhEcRiwBaX2UVnAxtYbKP79lL1U/o1gUqZJgIW+AfC3kd+lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf3bf9FEWFFU7KP+bD8XiO4385lMB8GA1UdIwQY
MBaAFGOF6+5DY/WtkzZsso9C/VtyeD5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjJjZDctMzNmMi00NmEyLThiM2Ut
N2Q3NGJlNmFlNTU4LzEvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjJjZDctMzNmMi00NmEyLThiM2UtN2Q3NGJlNmFlNTU4
LzEvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBqyG/9A
8Gt45SxWLrvbc5ZP3T1R+QbC2NKGMdzcuS787dMXux/wY4udgHvnNuHPPypLncAN
UDv+Q2XubUHi12Ld3sPzduugkttxj8w1wN4osOTJy1K+MZJTUm83AW3uMhWAKsGO
Jm2j5/piSkmMRKUJAvJvr0BxjIPuPi5sdZG0zJHfI4SK3fOu4IFm1+h/2+MeQjRa
+L8rzlYLeOW1MkblFeZCmgPEJL5oMKF10govJgfs2Z5trSLiD7AHY87f3JTnx3iY
iy1sVnlgZuFzezanORo48rHmEVy/qZH7UKEjbehgGe0mmV3HsQJcV+SLDYv8McO1
GTP3GrHNM/e2mQ==
-----END CERTIFICATE-----