Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File:                     YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier:          tLhL8pTd9infbQM8DKgH+8f1FxJq5LSeOnH8o23gCeg=
Subject key identifier:   F4:EC:AE:DE:58:B5:4F:CA:93:BD:87:CF:E5:F0:38:71:5F:CF:7A:2F
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer:       /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial:       01962E98F73950F81D4D7BB8AB870703BC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number:          10EF
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: eOvN3P3ibrepVXoOhzoiQlv6ueaMQg60JM99dxxm71A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f7:39:50:f8:1d:4d:7b:b8:ab:87:07:03:bc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=f4ecaede58b54fca93bd87cfe5f038715fcf7a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:a5:80:d9:00:38:f7:6e:60:4e:28:46:c3:
                    3a:4b:93:f5:ac:6f:02:af:fa:91:ea:7e:14:a4:65:
                    18:14:70:33:35:ed:78:2c:fe:3c:c2:b1:e1:96:9c:
                    cb:80:20:59:c8:92:6f:e3:e6:b2:1e:39:34:ac:d7:
                    92:66:40:ae:77:eb:b6:3c:3a:bb:a5:ba:5d:d4:9d:
                    6a:a0:c7:d0:6a:ba:4d:45:f0:69:01:1a:c7:be:6f:
                    bd:5f:a0:d6:7f:60:87:a0:c5:2c:9a:40:b2:a2:6a:
                    ef:8f:8d:e3:c2:f7:9d:d6:1d:9f:65:91:82:bd:84:
                    74:6e:0d:da:2d:35:4f:16:2f:31:ea:0e:24:b5:59:
                    0d:58:72:c6:18:88:01:ac:5e:d8:9d:51:9a:1f:27:
                    39:3f:84:11:11:cf:50:cb:b9:5b:e6:fd:ff:5b:ac:
                    c4:59:94:18:e4:42:d7:ff:a4:7d:cc:bf:28:43:fc:
                    e0:2c:2f:7a:6e:be:2f:90:80:84:47:e1:bc:b9:6f:
                    c5:c2:7e:f0:67:9c:40:99:ed:b8:6f:f3:33:e3:ae:
                    b6:45:7b:99:4e:99:94:f7:88:29:52:a4:d3:0a:90:
                    09:83:f2:cf:52:11:4b:44:ef:f4:8e:83:c9:4f:db:
                    fc:1b:d2:bc:4b:1c:1b:09:3a:1b:6b:25:09:91:08:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:AE:DE:58:B5:4F:CA:93:BD:87:CF:E5:F0:38:71:5F:CF:7A:2F
            X509v3 Authority Key Identifier:
                keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:24:f7:6f:50:75:96:31:ce:03:80:97:d4:b5:d0:95:55:
         cb:70:ba:b6:90:72:3f:fe:04:0a:df:95:b7:68:92:07:27:89:
         40:84:62:08:aa:47:46:d4:ea:00:ad:af:62:4e:bf:d5:fb:c9:
         91:85:d0:1a:21:92:82:5e:a1:05:75:d4:c0:03:28:a5:ae:5f:
         ed:37:80:cf:f3:c4:ef:e9:8b:7e:fa:bc:20:a3:15:e2:75:52:
         99:03:ee:3e:54:55:30:13:f6:06:9f:7d:fe:1a:28:a0:3c:b2:
         1c:68:83:f3:10:ee:05:cf:d1:57:a8:c0:81:38:fd:0b:89:15:
         f1:19:4d:3c:58:60:4e:e8:43:db:c2:84:97:9b:68:25:9f:a6:
         dd:a6:a5:6c:e8:c8:ee:11:97:a1:f0:e6:b1:b6:37:40:c5:0a:
         66:08:2b:77:93:0b:62:57:fc:a2:31:c8:a8:8c:43:5f:83:95:
         7c:87:b3:be:38:e4:bb:3f:f8:5d:2b:60:c2:f0:89:7c:da:63:
         bc:98:2a:4a:e5:a8:51:b9:2c:67:6c:84:78:c9:46:46:36:87:
         63:ba:83:ff:03:76:30:76:f6:01:91:c7:83:87:f8:b4:30:da:
         55:3c:06:84:8b:d4:ae:85:4b:92:b5:a4:31:1c:6c:a3:73:cd:
         50:b5:da:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPc5UPgdTXu4q4cHA7xKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYmZmOTQ3MDRlNGE0NzUzNzRlMTcwY2JlMTczNjVmYTg5
ZmUwN2IwHhcNMjUwNDEzMTAwMTM4WhcNMjUwNDE0MTAwMTM4WjAzMTEwLwYDVQQD
EyhmNGVjYWVkZTU4YjU0ZmNhOTNiZDg3Y2ZlNWYwMzg3MTVmY2Y3YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqClgNkAOPduYE4oRsM6S5P1rG8C
r/qR6n4UpGUYFHAzNe14LP48wrHhlpzLgCBZyJJv4+ayHjk0rNeSZkCud+u2PDq7
pbpd1J1qoMfQarpNRfBpARrHvm+9X6DWf2CHoMUsmkCyomrvj43jwved1h2fZZGC
vYR0bg3aLTVPFi8x6g4ktVkNWHLGGIgBrF7YnVGaHyc5P4QREc9Qy7lb5v3/W6zE
WZQY5ELX/6R9zL8oQ/zgLC96br4vkICER+G8uW/Fwn7wZ5xAme24b/Mz4662RXuZ
TpmU94gpUqTTCpAJg/LPUhFLRO/0joPJT9v8G9K8SxwbCTobayUJkQgp1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTsrt5YtU/Kk72Hz+XwOHFfz3ovMB8GA1UdIwQY
MBaAFGC/+UcE5KR1N04XDL4XNl+on+B7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUt
MDIzOTk1OTA2YzQ2LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUtMDIzOTk1OTA2YzQ2
LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmAk929Q
dZYxzgOAl9S10JVVy3C6tpByP/4ECt+Vt2iSByeJQIRiCKpHRtTqAK2vYk6/1fvJ
kYXQGiGSgl6hBXXUwAMopa5f7TeAz/PE7+mLfvq8IKMV4nVSmQPuPlRVMBP2Bp99
/hoooDyyHGiD8xDuBc/RV6jAgTj9C4kV8RlNPFhgTuhD28KEl5toJZ+m3aalbOjI
7hGXofDmsbY3QMUKZggrd5MLYlf8ojHIqIxDX4OVfIezvjjkuz/4XStgwvCJfNpj
vJgqSuWoUbksZ2yEeMlGRjaHY7qD/wN2MHb2AZHHg4f4tDDaVTwGhIvUroVLkrWk
MRxso3PNULXa2w==
-----END CERTIFICATE-----