Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File:                     y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier:          MrgWcvNxIdLK8duzVnJeYa/PM01QRLBQZQEPnjTLamM=
Subject key identifier:   4E:DD:B3:C9:4C:8A:2A:E5:30:15:17:34:5B:FF:12:BE:77:6D:C8:D9
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer:       /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial:       01962E990BB86856559F74F0BCE3A3E53381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number:          9D
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
                          2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: qyq0gnUF4mzVk1uR11/2kR7LPP6vIfQrg9QMHRbQSBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0b:b8:68:56:55:9f:74:f0:bc:e3:a3:e5:33:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=4eddb3c94c8a2ae5301517345bff12be776dc8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:af:38:0d:53:37:59:63:e8:2f:55:d6:3a:d6:
                    b6:69:44:e7:e8:d8:d1:bf:33:63:51:48:43:aa:32:
                    c2:63:72:8e:16:d0:0a:1d:2c:5d:28:ed:16:b2:32:
                    78:b9:a9:80:6a:92:89:09:e2:97:29:ae:64:90:ae:
                    dc:18:ff:30:57:ab:02:97:e1:85:46:40:50:6a:33:
                    12:ca:6e:b6:64:fe:09:80:da:2b:2b:94:73:5f:d8:
                    a0:39:c0:24:fc:b9:43:25:73:d6:c0:88:cf:6e:9e:
                    72:a9:93:f7:8f:3c:c5:4a:5e:25:67:6a:be:40:8b:
                    21:0d:f5:68:db:a7:67:1b:09:75:b2:3f:e1:79:e2:
                    6b:41:4f:9f:90:4a:c7:bc:74:d4:c7:71:8f:9a:8e:
                    7c:52:14:98:52:65:7b:cf:89:2f:e9:3d:5f:6d:6b:
                    d2:40:5e:87:1a:1e:47:57:a8:bc:61:bf:8b:28:09:
                    05:81:ac:7d:4f:ab:22:49:35:5e:9a:db:df:1f:ad:
                    55:a0:3e:e1:75:dd:ae:4b:4d:c9:46:e5:b7:d3:ee:
                    d1:a8:27:11:dc:eb:9a:99:da:3f:2e:2e:37:e9:ff:
                    39:f9:0d:cc:a4:8f:df:78:ac:4e:25:71:cf:9c:0a:
                    6b:b9:92:48:a6:21:60:4c:5c:68:e3:84:fd:01:a1:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DD:B3:C9:4C:8A:2A:E5:30:15:17:34:5B:FF:12:BE:77:6D:C8:D9
            X509v3 Authority Key Identifier:
                keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c9:25:bb:a4:f3:23:85:51:82:d6:7d:70:58:05:07:c6:9a:
         ae:0b:ff:bc:d1:05:86:1e:b5:62:96:b2:4b:4f:ea:04:35:63:
         5c:79:31:44:eb:1b:4a:1c:9f:cd:66:d3:36:c9:1e:d4:68:75:
         0c:bd:ab:4d:3d:33:6f:c8:4d:49:62:af:aa:80:0a:1d:03:de:
         80:71:39:4f:ed:63:c4:7e:ab:b7:02:cf:56:7b:6c:7b:38:7d:
         14:c8:cf:db:7a:46:1c:c3:36:76:ed:20:0b:70:2d:85:7c:56:
         a5:77:71:36:8b:7f:51:09:d4:15:92:75:5f:20:be:00:61:ce:
         4f:fa:69:56:47:01:66:5c:5d:9d:d6:33:dd:df:29:d2:8e:11:
         70:b1:e5:98:f6:6a:c6:b0:51:6c:49:d8:e9:90:3b:7f:fd:8a:
         a8:40:e4:db:ec:89:a9:2a:ce:8b:59:7c:b3:e9:12:c0:d8:9f:
         fe:72:ec:94:81:b8:b7:39:4e:1b:5c:07:a3:38:e0:de:f3:79:
         ef:7d:a5:71:4b:b6:ab:ba:d6:67:e5:c9:df:e0:6f:53:3e:20:
         58:d3:4e:e0:94:a6:e7:2e:56:6d:03:19:4f:e6:0d:9d:db:a9:
         f1:a3:2a:1d:2c:13:25:7d:61:3e:c4:43:61:fd:b9:0e:fc:89:
         72:fd:8a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQu4aFZVn3TwvOOj5TOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5
ZTViNjQwHhcNMjUwNDEzMTAwMTQ0WhcNMjUwNDE0MTAwMTQ0WjAzMTEwLwYDVQQD
Eyg0ZWRkYjNjOTRjOGEyYWU1MzAxNTE3MzQ1YmZmMTJiZTc3NmRjOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9684DVM3WWPoL1XWOta2aUTn6NjR
vzNjUUhDqjLCY3KOFtAKHSxdKO0WsjJ4uamAapKJCeKXKa5kkK7cGP8wV6sCl+GF
RkBQajMSym62ZP4JgNorK5RzX9igOcAk/LlDJXPWwIjPbp5yqZP3jzzFSl4lZ2q+
QIshDfVo26dnGwl1sj/heeJrQU+fkErHvHTUx3GPmo58UhSYUmV7z4kv6T1fbWvS
QF6HGh5HV6i8Yb+LKAkFgax9T6siSTVemtvfH61VoD7hdd2uS03JRuW30+7RqCcR
3Ouamdo/Li436f85+Q3MpI/feKxOJXHPnApruZJIpiFgTFxo44T9AaFKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7ds8lMiirlMBUXNFv/Er53bcjZMB8GA1UdIwQY
MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt
ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw
LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8klu6Tz
I4VRgtZ9cFgFB8aargv/vNEFhh61YpayS0/qBDVjXHkxROsbShyfzWbTNske1Gh1
DL2rTT0zb8hNSWKvqoAKHQPegHE5T+1jxH6rtwLPVntsezh9FMjP23pGHMM2du0g
C3AthXxWpXdxNot/UQnUFZJ1XyC+AGHOT/ppVkcBZlxdndYz3d8p0o4RcLHlmPZq
xrBRbEnY6ZA7f/2KqEDk2+yJqSrOi1l8s+kSwNif/nLslIG4tzlOG1wHozjg3vN5
732lcUu2q7rWZ+XJ3+BvUz4gWNNO4JSm5y5WbQMZT+YNndup8aMqHSwTJX1hPsRD
Yf25DvyJcv2KEA==
-----END CERTIFICATE-----