Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File:                     Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier:          S1M9h20hJPsfEYwxsp5rwRDgZ3s10h69QM5X2PqEfSU=
Subject key identifier:   D9:D9:D8:90:D5:EB:FF:1E:64:CF:7B:ED:40:13:61:42:71:54:A8:30
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer:       /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial:       01962F06B759E4A606AD817FAD24D07E548D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: 8NrE/SZsPA2BBoZL7/cvKcRAOx4nAVaRNenaZEHb+MU=)
                          2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:59:e4:a6:06:ad:81:7f:ad:24:d0:7e:54:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=d9d9d890d5ebff1e64cf7bed401361427154a830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:c6:af:4d:85:e9:e7:9a:a6:48:51:4e:84:
                    67:a6:f6:c1:7b:9e:ac:c3:2c:ed:64:cf:6f:f1:47:
                    c4:b3:01:73:76:ef:fa:28:8c:43:4f:d8:c4:78:99:
                    d2:1c:87:32:7c:7f:4c:d9:eb:f7:9f:5e:63:ee:f2:
                    1c:d7:8c:9b:bf:e1:20:fc:a6:16:f8:0b:1b:8d:c0:
                    73:c5:4d:e0:01:c2:7a:6e:5c:10:76:0d:56:35:d8:
                    fb:46:2a:fb:d1:51:06:54:14:ba:49:56:58:67:70:
                    71:f0:a9:f6:79:eb:49:21:8a:44:b2:a7:3d:0f:5b:
                    7e:94:0c:54:78:1c:99:1f:53:f7:12:98:45:40:56:
                    aa:7b:36:38:1c:b3:3a:6a:74:c8:cd:f3:16:24:f4:
                    60:fd:5e:1b:22:46:4b:d4:3a:4b:34:25:b6:d1:7c:
                    94:a9:6d:1b:5d:99:07:e0:09:44:10:0c:b4:da:bb:
                    97:ba:bf:b6:31:93:ca:52:2b:c9:da:88:73:b1:41:
                    8a:5a:f4:f9:83:1d:ba:20:5f:0c:94:32:8b:4a:e8:
                    f0:90:c1:1c:4a:02:49:04:01:a3:5c:8d:c0:5d:e2:
                    86:f3:46:49:8d:c7:ec:d7:32:a1:69:07:dc:6c:d7:
                    52:e2:35:2e:aa:4a:78:5b:88:ad:d7:1b:90:97:0e:
                    5f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:D8:90:D5:EB:FF:1E:64:CF:7B:ED:40:13:61:42:71:54:A8:30
            X509v3 Authority Key Identifier:
                keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:9b:1c:25:9f:8e:5d:61:02:dc:a5:53:9c:82:de:b0:98:
         7d:39:02:81:5a:95:1d:2a:89:82:b0:53:31:0e:ea:77:83:b1:
         54:5c:8c:bc:a3:13:2a:fb:64:96:45:77:b2:fc:b4:cd:ab:1c:
         74:ca:0c:59:db:8b:ee:b6:d5:f5:f4:06:48:92:a9:49:d6:68:
         aa:5c:2d:5e:c2:8b:2b:9d:41:61:11:4f:ed:1f:5b:1b:ae:7a:
         da:33:8c:a9:ec:4a:86:e7:29:e5:db:11:5c:fc:b1:52:f6:19:
         61:80:4c:28:1a:0d:40:f4:81:4b:26:cf:cc:58:80:dd:ab:04:
         32:ea:39:c8:5d:15:8f:c2:48:74:95:c9:21:7b:64:7e:fc:d3:
         fb:0c:a2:e0:0c:af:6b:2a:b5:7f:c6:f3:6d:38:cb:7c:f5:06:
         ea:98:67:5d:b6:b0:e9:30:9e:96:00:92:70:31:e7:d1:03:a4:
         19:e3:07:e3:47:02:b8:26:93:38:e2:73:30:4a:cf:a8:42:73:
         88:54:0d:95:a0:35:17:eb:a0:ec:f6:03:6b:b4:cf:1c:95:13:
         19:3c:bf:f6:f1:4e:5d:df:9f:76:16:3a:3e:89:fa:36:7c:40:
         98:1d:73:22:dd:ed:37:a9:b4:04:9b:9a:b4:49:b6:6e:e8:89:
         43:67:81:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrdZ5KYGrYF/rSTQflSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz
NWJlNGEwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
EyhkOWQ5ZDg5MGQ1ZWJmZjFlNjRjZjdiZWQ0MDEzNjE0MjcxNTRhODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGHGr02F6eeapkhRToRnpvbBe56s
wyztZM9v8UfEswFzdu/6KIxDT9jEeJnSHIcyfH9M2ev3n15j7vIc14ybv+Eg/KYW
+AsbjcBzxU3gAcJ6blwQdg1WNdj7Rir70VEGVBS6SVZYZ3Bx8Kn2eetJIYpEsqc9
D1t+lAxUeByZH1P3EphFQFaqezY4HLM6anTIzfMWJPRg/V4bIkZL1DpLNCW20XyU
qW0bXZkH4AlEEAy02ruXur+2MZPKUivJ2ohzsUGKWvT5gx26IF8MlDKLSujwkMEc
SgJJBAGjXI3AXeKG80ZJjcfs1zKhaQfcbNdS4jUuqkp4W4it1xuQlw5fswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnZ2JDV6/8eZM977UATYUJxVKgwMB8GA1UdIwQY
MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt
MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4
LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzubHCWf
jl1hAtylU5yC3rCYfTkCgVqVHSqJgrBTMQ7qd4OxVFyMvKMTKvtklkV3svy0zasc
dMoMWduL7rbV9fQGSJKpSdZoqlwtXsKLK51BYRFP7R9bG6562jOMqexKhucp5dsR
XPyxUvYZYYBMKBoNQPSBSybPzFiA3asEMuo5yF0Vj8JIdJXJIXtkfvzT+wyi4Ayv
ayq1f8bzbTjLfPUG6phnXbaw6TCelgCScDHn0QOkGeMH40cCuCaTOOJzMErPqEJz
iFQNlaA1F+ug7PYDa7TPHJUTGTy/9vFOXd+fdhY6Pon6NnxAmB1zIt3tN6m0BJua
tEm2buiJQ2eBeA==
-----END CERTIFICATE-----