Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          ydOR2PYwhSi1KXe2oONeVZov5Odv81ZKDVS2Ks8tjPQ=
Subject key identifier:   49:2D:C4:EA:AD:E4:C8:C4:72:E4:24:B2:D9:57:78:3C:90:65:99:51
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       01962E2B280EED67BD93899E686FB17212C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: A5z0yhn0fTncZJUfSkeFLyqUNcofXnKmm5LtT2EE2uE=)
                          2: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:28:0e:ed:67:bd:93:89:9e:68:6f:b1:72:12:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=492dc4eaade4c8c472e424b2d957783c90659951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:09:03:85:cc:5a:f9:a2:be:19:e8:3f:28:
                    ed:db:75:ba:4f:50:4c:3d:4b:9d:aa:57:66:2d:bb:
                    ab:c3:1e:ab:6d:44:41:6c:a8:cf:58:07:73:a0:6a:
                    97:77:b6:9e:61:00:af:9f:b6:6b:7b:21:0f:08:b2:
                    04:12:55:2b:48:f0:87:b1:ee:4a:fe:d0:e2:82:78:
                    79:05:39:fd:a1:c6:9e:d3:ca:4a:0e:b7:01:ec:06:
                    75:68:ee:2a:0b:e5:f8:74:ae:32:16:fe:82:bb:1f:
                    d3:44:e0:6d:77:46:f1:44:d4:5c:29:79:c6:c3:21:
                    61:ff:96:29:0d:ba:34:bf:70:da:51:57:e2:cd:73:
                    07:70:ac:1e:fe:41:3b:5c:a0:9f:b6:bf:32:ad:d9:
                    2a:ca:4f:30:49:60:fa:b2:12:28:cf:16:f9:51:bf:
                    fc:71:de:27:e4:42:71:73:cf:4a:c7:2d:31:e0:6e:
                    bf:c6:6e:95:ad:1c:62:7c:11:62:0d:54:f0:97:07:
                    97:f9:64:44:e8:6f:94:57:46:a0:72:b0:a0:55:8f:
                    9a:fa:9f:bf:90:b6:1b:00:67:f6:b7:3a:f0:a3:0f:
                    d9:48:a8:6e:a4:80:74:56:91:e6:86:78:ba:7f:8e:
                    71:a0:93:36:23:42:8f:ed:15:78:f8:f5:62:5c:45:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2D:C4:EA:AD:E4:C8:C4:72:E4:24:B2:D9:57:78:3C:90:65:99:51
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:61:c3:77:12:c8:bd:6d:58:c7:34:28:f1:78:a8:8c:6a:
         1d:65:c4:a7:d0:8c:9b:0c:fb:fd:0a:9c:98:f4:0f:ee:7e:ca:
         e8:c3:ec:af:97:22:b5:bd:0f:21:fc:01:8b:e5:20:45:9d:54:
         ef:c6:9f:ff:eb:b0:31:5c:36:e3:ba:2c:28:b4:91:b8:ae:c1:
         a6:2b:0a:12:86:3d:96:cd:d4:5c:88:5d:fa:78:1f:d0:cc:61:
         c8:a7:c9:e9:c6:cd:ab:e1:83:c9:7c:4d:ea:0c:e7:e9:77:9d:
         f4:b3:f5:41:51:67:64:cb:a6:bf:a3:fd:7c:4d:08:9c:19:2f:
         d5:c5:e0:1e:a5:f4:d9:11:b7:3a:f8:29:13:ff:fe:c3:e8:a3:
         2f:b2:48:0c:99:7b:68:7a:06:71:91:34:7b:71:76:3c:3c:5a:
         eb:58:5e:ca:d2:3e:a7:1d:f6:2e:98:fc:4d:fa:34:55:4b:9f:
         0f:f0:e5:f0:e4:b2:a9:4a:c8:a5:d1:4e:d2:f9:98:09:6e:bb:
         fb:ca:ac:3f:61:ac:04:b4:ad:f9:3e:ea:58:19:06:8c:24:f5:
         7f:ed:e2:eb:36:fa:e5:d0:50:c9:fe:36:ff:f0:ac:08:f6:fc:
         56:78:46:31:75:d1:b2:d8:18:39:d4:ac:4f:0f:ae:e4:2e:bc:
         a8:7b:20:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKygO7We9k4meaG+xchLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi
Zjc5OTYwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
Eyg0OTJkYzRlYWFkZTRjOGM0NzJlNDI0YjJkOTU3NzgzYzkwNjU5OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+0JA4XMWvmivhnoPyjt23W6T1BM
PUudqldmLburwx6rbURBbKjPWAdzoGqXd7aeYQCvn7ZreyEPCLIEElUrSPCHse5K
/tDignh5BTn9ocae08pKDrcB7AZ1aO4qC+X4dK4yFv6Cux/TROBtd0bxRNRcKXnG
wyFh/5YpDbo0v3DaUVfizXMHcKwe/kE7XKCftr8yrdkqyk8wSWD6shIozxb5Ub/8
cd4n5EJxc89Kxy0x4G6/xm6VrRxifBFiDVTwlweX+WRE6G+UV0agcrCgVY+a+p+/
kLYbAGf2tzrwow/ZSKhupIB0VpHmhni6f45xoJM2I0KP7RV4+PViXEWxFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEktxOqt5MjEcuQkstlXeDyQZZlRMB8GA1UdIwQY
MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt
NmVhYTFjODk4MjRhLzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh
LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF5hw3cS
yL1tWMc0KPF4qIxqHWXEp9CMmwz7/QqcmPQP7n7K6MPsr5citb0PIfwBi+UgRZ1U
78af/+uwMVw247osKLSRuK7BpisKEoY9ls3UXIhd+ngf0MxhyKfJ6cbNq+GDyXxN
6gzn6Xed9LP1QVFnZMumv6P9fE0InBkv1cXgHqX02RG3OvgpE//+w+ijL7JIDJl7
aHoGcZE0e3F2PDxa61heytI+px32Lpj8Tfo0VUufD/Dl8OSyqUrIpdFO0vmYCW67
+8qsP2GsBLSt+T7qWBkGjCT1f+3i6zb65dBQyf42//CsCPb8VnhGMXXRstgYOdSs
Tw+u5C68qHsgfg==
-----END CERTIFICATE-----