Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File:                     y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier:          iEIRTPyVF+eVFc0EA3jso742nrgzptMe+/mcHLuFxNI=
Subject key identifier:   04:18:35:A2:6A:45:81:33:FB:B7:75:A8:B0:B7:4C:8B:D4:9E:58:12
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer:       /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial:       01962ECF99626FC6DCEB8CCDA5D61B323AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number:          0618
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
                          2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: 93bntHyWw0aUvriHPgxYpjCNcj4gYDP3B8Z7VdaI/S4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:99:62:6f:c6:dc:eb:8c:cd:a5:d6:1b:32:3a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=041835a26a458133fbb775a8b0b74c8bd49e5812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:9d:5d:9c:18:76:33:8a:49:5c:ed:22:b9:
                    28:d5:5b:40:25:cf:62:48:52:55:30:6c:06:b5:6d:
                    3a:4e:b9:2a:70:aa:70:9b:56:9a:de:c3:9c:39:1a:
                    a1:29:2a:03:d9:f7:31:fa:3c:1a:dc:95:12:de:8d:
                    0d:12:77:99:13:f1:d0:c2:b1:95:de:2e:50:e1:cc:
                    93:52:1a:1e:f7:ac:84:37:19:44:c6:e6:fd:8e:88:
                    a6:bb:4a:ba:e1:6d:7a:05:e7:c7:16:e6:e0:55:42:
                    4d:89:7e:43:11:d5:5e:5c:73:fa:db:be:0e:55:39:
                    0c:dc:e1:f3:27:bb:9f:62:ec:34:dc:1a:03:f2:d2:
                    b8:53:df:d8:1e:53:4c:3b:2a:ea:2d:e1:a4:b2:63:
                    cd:78:b6:ae:04:f0:2d:21:74:0f:0a:89:28:cb:05:
                    46:d1:8d:dc:02:67:32:83:3d:95:1f:02:d8:ec:15:
                    44:91:1b:46:87:5f:a5:ae:c5:03:ba:a4:2c:7a:cb:
                    6a:54:d8:5a:15:0c:4e:66:9c:2d:04:bf:a0:8f:97:
                    ce:98:37:37:90:2e:14:ea:06:84:f2:a2:1b:a9:31:
                    c3:de:48:40:87:8c:40:1a:1a:39:d8:00:6e:81:30:
                    1a:3e:0e:66:76:06:65:b1:27:e2:aa:1d:c4:b5:0c:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:35:A2:6A:45:81:33:FB:B7:75:A8:B0:B7:4C:8B:D4:9E:58:12
            X509v3 Authority Key Identifier:
                keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:96:49:d0:c4:05:d4:39:48:5c:fe:f9:30:3f:40:4e:97:
         3b:76:e1:ba:1c:ff:8c:57:36:4c:2c:a2:15:82:0e:d7:f3:1e:
         af:9f:55:ff:2e:69:d3:66:a5:38:c2:86:bd:74:0c:ec:8e:9d:
         c4:a3:67:5b:29:56:49:83:49:a7:47:89:b5:d2:88:e4:96:40:
         70:2d:eb:7b:06:9e:23:0f:fc:97:52:36:fa:9d:b6:65:66:f3:
         e4:55:7f:01:a9:e2:7d:b0:5b:0f:8f:d7:83:03:69:59:1b:2f:
         5b:19:72:79:4c:fa:aa:61:a4:66:f3:e0:0a:9d:1b:b6:a7:0f:
         8f:35:8b:6e:ff:69:e1:a1:28:a6:75:12:f2:c2:ac:0b:41:3e:
         d9:df:47:22:1b:63:7a:21:4a:45:2f:6b:25:99:21:d2:c8:fa:
         56:ac:94:fa:ae:3f:79:89:cb:6e:ec:d7:f7:e3:35:00:be:4c:
         c2:1a:76:7d:33:2e:50:66:79:08:9c:ab:ba:d0:d9:2c:45:04:
         3f:fe:41:19:00:c0:51:9c:92:51:0e:0d:16:a4:a7:80:c6:eb:
         3f:37:49:81:e3:04:4f:a0:62:48:97:71:fd:b9:88:59:1b:af:
         54:9d:62:f2:07:91:3e:75:85:60:00:d6:3d:b8:8d:d7:cb:0d:
         4b:3a:9b:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5lib8bc64zNpdYbMjrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1
NWY2MmQwHhcNMjUwNDEzMTEwMTE5WhcNMjUwNDE0MTEwMTE5WjAzMTEwLwYDVQQD
EygwNDE4MzVhMjZhNDU4MTMzZmJiNzc1YThiMGI3NGM4YmQ0OWU1ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lidXZwYdjOKSVztIrko1VtAJc9i
SFJVMGwGtW06TrkqcKpwm1aa3sOcORqhKSoD2fcx+jwa3JUS3o0NEneZE/HQwrGV
3i5Q4cyTUhoe96yENxlExub9joimu0q64W16BefHFubgVUJNiX5DEdVeXHP6274O
VTkM3OHzJ7ufYuw03BoD8tK4U9/YHlNMOyrqLeGksmPNeLauBPAtIXQPCokoywVG
0Y3cAmcygz2VHwLY7BVEkRtGh1+lrsUDuqQsestqVNhaFQxOZpwtBL+gj5fOmDc3
kC4U6gaE8qIbqTHD3khAh4xAGho52ABugTAaPg5mdgZlsSfiqh3EtQzIEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQYNaJqRYEz+7d1qLC3TIvUnlgSMB8GA1UdIwQY
MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt
MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw
LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASauWSdDE
BdQ5SFz++TA/QE6XO3bhuhz/jFc2TCyiFYIO1/Mer59V/y5p02alOMKGvXQM7I6d
xKNnWylWSYNJp0eJtdKI5JZAcC3rewaeIw/8l1I2+p22ZWbz5FV/AanifbBbD4/X
gwNpWRsvWxlyeUz6qmGkZvPgCp0btqcPjzWLbv9p4aEopnUS8sKsC0E+2d9HIhtj
eiFKRS9rJZkh0sj6VqyU+q4/eYnLbuzX9+M1AL5Mwhp2fTMuUGZ5CJyrutDZLEUE
P/5BGQDAUZySUQ4NFqSngMbrPzdJgeMET6BiSJdx/bmIWRuvVJ1i8geRPnWFYADW
PbiN18sNSzqbcg==
-----END CERTIFICATE-----