Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
File:                     Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json)
Hash identifier:          JaSQpDCaA2RTLf8VlyzxTqbFoCdygyWgyXrag4/oJgk=
Subject key identifier:   AD:48:CB:B3:E9:9E:D8:41:BE:F3:B6:B5:32:A7:0C:EA:30:69:0B:C2
Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
Certificate issuer:       /CN=63ef6bdbc42ad06defdad72679414346d8d048df
Certificate serial:       01962E61F7AD5D437D038761820044EBCB0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: VFLxgH8iKT7PCEN0TPct14GstGXlYxkp8X63DkkoIwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:ad:5d:43:7d:03:87:61:82:00:44:eb:cb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=ad48cbb3e99ed841bef3b6b532a70cea30690bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:a2:45:80:16:a5:e2:a4:71:47:59:17:a9:
                    fc:23:43:93:a3:9a:93:fe:8b:56:e5:bf:b0:0e:61:
                    b8:61:dd:1b:c0:ca:78:ae:cf:a8:2d:bd:82:65:0b:
                    f6:20:46:2b:c6:f9:95:ec:cc:7f:f5:41:c0:81:a7:
                    f4:54:94:dd:34:8e:1c:df:4c:fc:3a:2b:2e:15:f7:
                    95:34:26:37:f1:b7:e0:01:fd:f4:89:b1:db:1a:0f:
                    df:2c:4a:cc:9c:b4:71:4b:9d:c2:af:f9:db:18:ef:
                    15:d2:41:64:85:63:28:3e:69:6d:16:05:3a:fb:4d:
                    ed:be:bf:4b:0a:cb:27:46:cf:75:8f:da:8f:73:b9:
                    f3:e4:9c:a3:de:08:a8:ef:27:9b:eb:01:9a:3c:61:
                    66:1a:2f:86:7c:89:41:96:b0:6a:31:e8:bc:a3:ec:
                    b8:e2:0b:b6:ca:a8:1b:a2:9b:60:94:e2:4a:4f:0a:
                    4d:f2:42:4f:f3:6f:ef:03:d2:00:64:13:1a:76:19:
                    22:49:20:c6:9d:48:11:39:e2:32:56:47:c4:0e:9d:
                    64:29:f3:5b:e2:6c:2e:32:df:87:4c:9a:51:75:01:
                    9b:36:7f:4b:80:fb:7b:de:73:b3:cf:c6:bc:29:2e:
                    2c:c0:c6:3a:7f:f5:78:d6:e9:23:a3:24:38:7f:1f:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:48:CB:B3:E9:9E:D8:41:BE:F3:B6:B5:32:A7:0C:EA:30:69:0B:C2
            X509v3 Authority Key Identifier:
                keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:4d:e8:8b:31:ac:a8:0c:c5:63:7b:5a:b9:d7:48:97:5d:
         b7:7f:3c:1d:a5:49:92:4e:86:51:77:44:1a:fe:61:f7:fb:6d:
         66:56:6d:4e:1e:2d:5a:38:e4:e8:24:3a:d9:69:c0:d9:04:c0:
         bc:e1:fd:c1:3c:c7:b8:9e:6d:6d:70:03:fb:86:47:de:7a:37:
         ca:38:33:41:e9:2d:0b:23:56:ac:c8:3a:a5:8c:9f:fc:34:91:
         ca:b5:f3:64:8e:fa:b5:ae:62:07:72:42:d5:df:9c:12:c2:fc:
         ba:a7:0f:a1:35:6d:be:ba:37:a7:d8:30:07:7e:24:63:6b:0a:
         35:d1:22:11:ab:c0:42:5a:e5:e4:95:5d:26:11:8f:8a:96:19:
         e8:03:30:8e:7a:1e:00:cb:52:4a:17:b5:93:36:58:30:1b:1b:
         fa:d6:19:02:2e:72:b8:dc:73:a6:d1:fa:04:96:9b:61:82:30:
         7d:91:c8:48:25:7b:51:4d:37:1b:e7:45:98:db:f0:bd:48:32:
         0f:00:c0:3d:c8:02:e7:8e:a7:c5:a9:9c:9e:74:84:06:64:d2:
         43:a8:dc:b2:f4:5a:db:ed:80:e0:8f:7e:9b:71:e8:5f:1b:e3:
         b0:ff:64:76:eb:d8:b1:45:d8:13:31:08:47:35:b2:ed:52:dd:
         cc:a6:32:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfetXUN9A4dhggBE68sPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWY2YmRiYzQyYWQwNmRlZmRhZDcyNjc5NDE0MzQ2ZDhk
MDQ4ZGYwHhcNMjUwNDEzMDkwMTM0WhcNMjUwNDE0MDkwMTM0WjAzMTEwLwYDVQQD
EyhhZDQ4Y2JiM2U5OWVkODQxYmVmM2I2YjUzMmE3MGNlYTMwNjkwYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j2iRYAWpeKkcUdZF6n8I0OTo5qT
/otW5b+wDmG4Yd0bwMp4rs+oLb2CZQv2IEYrxvmV7Mx/9UHAgaf0VJTdNI4c30z8
OisuFfeVNCY38bfgAf30ibHbGg/fLErMnLRxS53Cr/nbGO8V0kFkhWMoPmltFgU6
+03tvr9LCssnRs91j9qPc7nz5Jyj3gio7yeb6wGaPGFmGi+GfIlBlrBqMei8o+y4
4gu2yqgboptglOJKTwpN8kJP82/vA9IAZBMadhkiSSDGnUgROeIyVkfEDp1kKfNb
4mwuMt+HTJpRdQGbNn9LgPt73nOzz8a8KS4swMY6f/V41ukjoyQ4fx96rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1Iy7PpnthBvvO2tTKnDOowaQvCMB8GA1UdIwQY
MBaAFGPva9vEKtBt79rXJnlBQ0bY0EjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUt
MGM4MzY4ZGI5NTYzLzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUtMGM4MzY4ZGI5NTYz
LzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajBN6Isx
rKgMxWN7WrnXSJddt388HaVJkk6GUXdEGv5h9/ttZlZtTh4tWjjk6CQ62WnA2QTA
vOH9wTzHuJ5tbXAD+4ZH3no3yjgzQektCyNWrMg6pYyf/DSRyrXzZI76ta5iB3JC
1d+cEsL8uqcPoTVtvro3p9gwB34kY2sKNdEiEavAQlrl5JVdJhGPipYZ6AMwjnoe
AMtSShe1kzZYMBsb+tYZAi5yuNxzptH6BJabYYIwfZHISCV7UU03G+dFmNvwvUgy
DwDAPcgC546nxamcnnSEBmTSQ6jcsvRa2+2A4I9+m3HoXxvjsP9kduvYsUXYEzEI
RzWy7VLdzKYy1A==
-----END CERTIFICATE-----