Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
File:                     yFiMcrJRDxd7g18gHjNl7PnkWh0.mft (raw, json)
Hash identifier:          BwKSFFDGZfzdpy4M1rn6ZTJHyx8trstn124gVGbVbnE=
Subject key identifier:   66:BB:EE:4E:81:A1:12:B2:16:B6:B4:0B:CE:83:02:9B:F9:E0:D0:C9
Authority key identifier: C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
Certificate issuer:       /CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Certificate serial:       01962F3DD0D3B8C4F64276EF16E0A647BCDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
Manifest number:          0E9B
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: yFiMcrJRDxd7g18gHjNl7PnkWh0.crl (hash: lKDFHQXEpD1uEdncJKbfxdFV5Wjp9WxkTsu6xHgH5CY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d0:d3:b8:c4:f6:42:76:ef:16:e0:a6:47:bc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=66bbee4e81a112b216b6b40bce83029bf9e0d0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:ce:92:91:c6:cd:49:9b:1d:da:a8:fb:cc:
                    5c:6a:05:2c:14:4d:cf:ed:e3:21:61:02:69:5e:e7:
                    4d:9a:da:57:e3:40:50:16:8d:db:c4:e2:9d:b0:5b:
                    ea:ed:4d:77:47:f7:21:03:f4:5f:a7:4c:4a:69:04:
                    80:08:1d:ef:90:7c:c0:e8:0b:33:79:e9:38:cf:a6:
                    b3:82:15:c0:b2:1e:71:8e:c9:88:04:51:e2:3c:ea:
                    76:0b:a8:94:7f:df:f9:4c:3b:fd:af:96:57:4c:eb:
                    20:5f:81:e1:3c:dc:05:ac:9d:0f:aa:bd:28:7a:3f:
                    df:6d:b2:08:93:55:57:50:7e:3d:c8:1f:fe:d4:a1:
                    18:4e:23:cb:54:43:78:4f:d9:86:04:07:9a:29:ae:
                    82:83:5f:0b:3a:ee:9d:f1:cc:6c:80:e5:64:55:63:
                    c1:9c:3d:86:22:f4:75:b4:96:fe:70:f4:ff:f1:b1:
                    f3:9c:6e:be:f7:6b:fa:c1:3a:7e:bd:1f:53:4c:fb:
                    56:27:c0:52:f1:b5:07:cb:79:87:e6:63:29:09:8e:
                    f7:c2:d7:d3:83:8b:35:03:4b:32:59:f9:34:d1:cd:
                    59:4d:ec:bd:3c:e5:27:c4:5d:20:0a:19:75:1e:b2:
                    c0:30:70:3d:2a:be:c9:7f:b3:b1:cf:2a:80:51:32:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BB:EE:4E:81:A1:12:B2:16:B6:B4:0B:CE:83:02:9B:F9:E0:D0:C9
            X509v3 Authority Key Identifier:
                keyid:C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:13:bb:c4:e0:37:26:fb:e8:9c:aa:13:7f:ac:08:e5:7f:
         38:7a:c6:c3:ae:f7:be:c2:31:85:54:27:63:a6:cd:0c:a9:ba:
         ab:0f:8f:9d:64:c2:e0:de:bc:a1:ad:c2:6e:4e:cf:2d:48:07:
         e7:aa:bf:98:a4:ae:fd:33:a9:57:a1:41:43:62:da:19:c8:05:
         b6:bf:05:46:d1:26:ce:2f:70:40:d0:65:c6:e5:6a:70:f5:e7:
         2f:ee:a9:bd:75:52:07:13:17:19:d0:fa:7b:79:f2:19:18:84:
         01:21:f5:c8:a6:c9:60:6f:ab:b8:18:15:20:32:25:2c:9f:07:
         bd:52:60:ec:e2:3f:ac:c0:dc:2b:f9:e1:e0:0e:9d:fc:44:75:
         dc:30:48:7a:99:af:5b:de:b9:14:4b:d6:c7:34:bb:1d:43:c1:
         00:c8:6b:c0:a1:7f:26:a2:7d:14:aa:ba:de:be:97:bb:a3:ab:
         22:58:31:58:6e:d0:77:d2:05:0a:df:b1:39:58:6c:cd:84:c0:
         02:57:12:83:f6:ef:6b:2e:f9:27:cc:62:b7:fa:b1:d6:55:46:
         27:87:65:89:64:1d:ae:a0:a4:61:32:f4:c1:7e:44:2b:24:f9:
         5f:38:4f:bd:f5:f5:57:80:7d:21:53:5c:a2:fc:e3:1a:07:f5:
         ca:c8:3a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdDTuMT2QnbvFuCmR7zdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTg4YzcyYjI1MTBmMTc3YjgzNWYyMDFlMzM2NWVjZjll
NDVhMWQwHhcNMjUwNDEzMTMwMTQyWhcNMjUwNDE0MTMwMTQyWjAzMTEwLwYDVQQD
Eyg2NmJiZWU0ZTgxYTExMmIyMTZiNmI0MGJjZTgzMDI5YmY5ZTBkMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4rOkpHGzUmbHdqo+8xcagUsFE3P
7eMhYQJpXudNmtpX40BQFo3bxOKdsFvq7U13R/chA/Rfp0xKaQSACB3vkHzA6Asz
eek4z6azghXAsh5xjsmIBFHiPOp2C6iUf9/5TDv9r5ZXTOsgX4HhPNwFrJ0Pqr0o
ej/fbbIIk1VXUH49yB/+1KEYTiPLVEN4T9mGBAeaKa6Cg18LOu6d8cxsgOVkVWPB
nD2GIvR1tJb+cPT/8bHznG6+92v6wTp+vR9TTPtWJ8BS8bUHy3mH5mMpCY73wtfT
g4s1A0syWfk00c1ZTey9POUnxF0gChl1HrLAMHA9Kr7Jf7OxzyqAUTJI+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa77k6BoRKyFra0C86DApv54NDJMB8GA1UdIwQY
MBaAFMhYjHKyUQ8Xe4NfIB4zZez55FodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZpTWNySlJEeGQ3ZzE4Z0hqTmw3UG5rV2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85M2IzOGUtNjQwMC00ZTZkLWEwZWIt
MDQ5Y2MxZmNlMzdlLzEveUZpTWNySlJEeGQ3ZzE4Z0hqTmw3UG5rV2gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85M2IzOGUtNjQwMC00ZTZkLWEwZWItMDQ5Y2MxZmNlMzdl
LzEveUZpTWNySlJEeGQ3ZzE4Z0hqTmw3UG5rV2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5wTu8Tg
Nyb76JyqE3+sCOV/OHrGw673vsIxhVQnY6bNDKm6qw+PnWTC4N68oa3Cbk7PLUgH
56q/mKSu/TOpV6FBQ2LaGcgFtr8FRtEmzi9wQNBlxuVqcPXnL+6pvXVSBxMXGdD6
e3nyGRiEASH1yKbJYG+ruBgVIDIlLJ8HvVJg7OI/rMDcK/nh4A6d/ER13DBIepmv
W965FEvWxzS7HUPBAMhrwKF/JqJ9FKq63r6Xu6OrIlgxWG7Qd9IFCt+xOVhszYTA
AlcSg/bvay75J8xit/qx1lVGJ4dliWQdrqCkYTL0wX5EKyT5XzhPvfX1V4B9IVNc
ovzjGgf1ysg6tw==
-----END CERTIFICATE-----