Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
File:                     YG03z4fxLyqy3vMTgMOGuCbBnWU.mft (raw, json)
Hash identifier:          YwWi+8IPkoSB2cPi8sZcEl9Z8me0u26eaYfvmfn6nMo=
Subject key identifier:   63:25:F1:4D:6D:4F:21:94:CA:79:55:94:8E:2C:14:48:B0:82:03:1F
Authority key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Certificate issuer:       /CN=606d37cf87f12f2ab2def31380c386b826c19d65
Certificate serial:       01962F3DB6462A6BAC4DBE740F79BB58631C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: YG03z4fxLyqy3vMTgMOGuCbBnWU.crl (hash: dvQ8RnwSHSgrfoHaS+Tm2kmd1t+IFJ2RqbZ7WlX+VIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b6:46:2a:6b:ac:4d:be:74:0f:79:bb:58:63:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606d37cf87f12f2ab2def31380c386b826c19d65
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=6325f14d6d4f2194ca7955948e2c1448b082031f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:8c:79:10:c4:2d:15:4d:dc:3f:ac:45:78:
                    33:d5:af:de:04:96:b3:28:1c:8a:c9:b5:93:53:c3:
                    ad:7b:01:53:3d:8a:99:14:86:d4:4c:83:b7:3f:d0:
                    25:3f:20:a9:a2:88:32:c0:cc:58:8c:37:a5:35:0a:
                    8c:c6:65:d4:26:9a:e8:ed:02:c3:0c:b3:a2:4c:9b:
                    7a:ca:98:9d:20:2f:11:69:e3:33:2b:03:8e:0e:e0:
                    c8:c5:cd:11:ed:a1:f2:2e:56:1c:dd:9e:c0:90:3d:
                    b5:45:0e:13:a0:5d:6b:1a:32:51:13:36:55:bc:5d:
                    5b:03:3e:9d:ac:f2:06:0b:ac:7b:33:88:e6:1d:3b:
                    7a:0d:df:19:b3:89:80:f1:95:c5:1a:15:a5:23:8e:
                    91:1f:3f:9b:35:37:cb:6e:dc:a4:d2:84:53:5d:a8:
                    66:ec:00:0f:98:98:b8:eb:73:9f:00:4e:aa:b7:8e:
                    78:b7:68:7e:73:0c:51:7e:1c:5f:3d:7e:9b:d1:1d:
                    45:8b:56:7d:c8:8a:95:67:90:4e:2a:8f:b1:2c:32:
                    1b:9b:58:97:6d:54:0e:0a:a8:5b:50:2e:9f:a3:02:
                    52:6a:84:43:b6:e1:68:9f:e3:aa:2f:83:df:a7:04:
                    3e:84:52:61:00:d1:8d:5c:e8:6c:a3:1f:11:7e:ae:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:25:F1:4D:6D:4F:21:94:CA:79:55:94:8E:2C:14:48:B0:82:03:1F
            X509v3 Authority Key Identifier:
                keyid:60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5a:9e:91:ce:71:a6:d2:1c:4b:43:54:5f:02:58:83:ad:64:
         b6:bd:71:14:65:27:0f:2d:22:be:8e:e0:d7:51:d4:20:8f:8b:
         46:35:1b:71:c7:25:b5:ba:6d:a4:3c:5f:6e:8b:3f:b5:c7:28:
         d3:45:ab:d8:59:2e:f8:42:ea:01:07:39:65:59:73:03:9c:eb:
         2f:40:7f:0c:f3:25:c1:40:8e:4a:f1:39:f6:74:4a:d5:f8:70:
         38:c7:6d:d1:79:f4:22:c1:03:0b:8e:93:18:5a:c2:70:a7:0d:
         31:1a:b7:76:b4:04:7d:5e:63:bd:3e:ce:e6:1b:2f:7d:c2:11:
         6b:5a:45:9e:7e:8a:31:c6:3d:ea:d0:6e:8b:52:23:89:e1:d0:
         13:99:ec:d9:34:bd:64:53:c4:c6:3b:15:88:dd:09:06:d7:d6:
         9e:3b:e3:2e:70:0a:9d:10:b9:4b:87:32:a3:cf:e9:29:a5:e3:
         3c:be:89:f8:f2:68:83:a6:bd:67:a2:68:d1:99:46:f7:1a:1b:
         2f:dc:bf:e7:d9:22:df:34:00:03:bc:ed:0a:40:9e:3d:a6:fb:
         df:bd:a1:6b:e3:af:f2:e9:42:8b:f1:19:dc:f6:c7:ca:4d:37:
         b5:02:24:72:97:6f:ba:1a:02:ef:0a:03:b7:13:31:27:5d:69:
         29:7a:7a:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbZGKmusTb50D3m7WGMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmQzN2NmODdmMTJmMmFiMmRlZjMxMzgwYzM4NmI4MjZj
MTlkNjUwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
Eyg2MzI1ZjE0ZDZkNGYyMTk0Y2E3OTU1OTQ4ZTJjMTQ0OGIwODIwMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXuMeRDELRVN3D+sRXgz1a/eBJaz
KByKybWTU8OtewFTPYqZFIbUTIO3P9AlPyCpoogywMxYjDelNQqMxmXUJpro7QLD
DLOiTJt6ypidIC8RaeMzKwOODuDIxc0R7aHyLlYc3Z7AkD21RQ4ToF1rGjJREzZV
vF1bAz6drPIGC6x7M4jmHTt6Dd8Zs4mA8ZXFGhWlI46RHz+bNTfLbtyk0oRTXahm
7AAPmJi463OfAE6qt454t2h+cwxRfhxfPX6b0R1Fi1Z9yIqVZ5BOKo+xLDIbm1iX
bVQOCqhbUC6fowJSaoRDtuFon+OqL4PfpwQ+hFJhANGNXOhsox8Rfq5HyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMl8U1tTyGUynlVlI4sFEiwggMfMB8GA1UdIwQY
MBaAFGBtN8+H8S8qst7zE4DDhrgmwZ1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMjBkNmEtOTFiYS00NDJmLTg5Mjct
ZGMwMDQzZTliYjRkLzEvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hMjBkNmEtOTFiYS00NDJmLTg5MjctZGMwMDQzZTliYjRk
LzEvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVqekc5x
ptIcS0NUXwJYg61ktr1xFGUnDy0ivo7g11HUII+LRjUbcccltbptpDxfbos/tcco
00Wr2Fku+ELqAQc5ZVlzA5zrL0B/DPMlwUCOSvE59nRK1fhwOMdt0Xn0IsEDC46T
GFrCcKcNMRq3drQEfV5jvT7O5hsvfcIRa1pFnn6KMcY96tBui1IjieHQE5ns2TS9
ZFPExjsViN0JBtfWnjvjLnAKnRC5S4cyo8/pKaXjPL6J+PJog6a9Z6Jo0ZlG9xob
L9y/59ki3zQAA7ztCkCePab7372ha+Ov8ulCi/EZ3PbHyk03tQIkcpdvuhoC7woD
txMxJ11pKXp6fA==
-----END CERTIFICATE-----