Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File:                     y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier:          mBjEL+I7eizuwvER25e9LyNx71kDLcQLVusWPX2ZAMQ=
Subject key identifier:   A4:F7:7B:1A:F4:08:EF:B0:B6:55:A1:B2:71:19:6E:8C:2C:E7:AE:3D
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer:       /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial:       01962F7477957F7F022AA3B70BAEC818BEE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number:          0358
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
                          2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: HdLcaD1ikmqVFKO3lvhV/0E3L05fByycBUEQDjn2hms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:77:95:7f:7f:02:2a:a3:b7:0b:ae:c8:18:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=a4f77b1af408efb0b655a1b271196e8c2ce7ae3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:42:b6:c3:b4:63:b2:19:64:68:dd:e4:d5:
                    9b:d4:a3:11:8a:f7:56:b5:25:b9:e0:68:bf:63:57:
                    32:fb:6c:e3:95:27:e2:7b:db:45:a0:a0:69:5b:76:
                    58:a4:88:d8:58:dc:e9:48:8c:ec:d7:20:2c:5d:a5:
                    cd:73:70:ab:f9:ce:41:05:04:1a:61:97:42:35:e1:
                    8f:ef:22:b0:79:7c:17:bd:f1:af:82:f4:34:cb:f1:
                    8d:b2:2c:f1:56:21:aa:d2:d4:17:07:20:1d:cd:35:
                    aa:dc:a5:89:84:b7:ac:2c:ac:b2:1b:da:92:89:85:
                    24:86:e6:37:11:8b:a9:f7:8f:a0:ba:36:c3:bc:e1:
                    b7:00:8e:35:82:fa:d6:27:23:ce:2f:bb:fc:00:58:
                    13:a4:de:ab:7a:b2:ac:9c:f2:bb:e8:fb:26:4b:1c:
                    26:8e:e9:64:7f:7b:97:b8:d6:3f:37:09:ac:33:a8:
                    2a:fd:77:12:3a:c3:ce:31:04:fb:aa:fe:c9:6d:79:
                    0e:d1:39:c6:df:5e:d4:20:da:24:84:1c:58:ce:d0:
                    94:09:09:3c:48:2d:76:f1:0a:83:98:40:f7:c5:d1:
                    92:f2:54:0a:33:e0:0c:ab:bb:93:75:9d:7c:1c:8a:
                    d7:39:23:9f:b7:10:0b:67:0c:2a:00:d3:89:5f:49:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:7B:1A:F4:08:EF:B0:B6:55:A1:B2:71:19:6E:8C:2C:E7:AE:3D
            X509v3 Authority Key Identifier:
                keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b2:78:cc:57:87:9c:b9:96:d6:ad:ff:29:2c:5a:0a:a0:33:
         6b:82:fd:73:67:d5:76:0a:f8:fe:b8:59:70:1d:d3:13:58:da:
         22:bc:12:77:41:81:56:eb:fd:51:2d:79:e7:52:97:26:85:ed:
         42:68:24:d9:ba:f8:7d:dd:81:7a:ca:4b:ee:d6:9c:fe:d1:ed:
         bd:55:9a:87:83:1e:26:4a:68:43:5f:3a:7c:5f:27:71:48:3d:
         ff:2b:c7:29:92:41:20:d0:d2:41:ad:ae:05:95:e6:2e:7a:b1:
         55:b9:1f:4b:bd:e7:a1:00:8b:cc:4e:17:ab:6f:3b:fd:24:ee:
         0a:8a:1d:72:27:5d:56:75:ab:9c:18:35:9b:fd:36:e1:0f:6c:
         80:c0:a8:70:eb:2d:08:6a:20:c9:cf:0c:3a:1f:01:79:87:61:
         b7:15:0a:96:d0:b3:97:86:52:67:38:f8:b5:aa:62:13:03:f2:
         67:43:26:7d:3e:a2:ab:84:bf:d0:b5:4f:5c:a6:da:9b:3c:46:
         6d:05:5d:38:a1:ea:bc:8b:3b:41:7a:9a:74:39:40:b8:6f:ff:
         af:d5:36:a2:83:4b:9c:5a:e8:58:80:8c:ac:5e:7b:e1:cb:b5:
         36:ca:3f:7a:91:29:61:2a:b1:60:4c:ca:70:d5:e4:13:db:6c:
         31:6a:34:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHeVf38CKqO3C67IGL7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODFkMWYzYWMxNGFmNTBkYzA2NjU3NDRmOTA3NmI3ZmFk
YjFmOWIwHhcNMjUwNDEzMTQwMTIzWhcNMjUwNDE0MTQwMTIzWjAzMTEwLwYDVQQD
EyhhNGY3N2IxYWY0MDhlZmIwYjY1NWExYjI3MTE5NmU4YzJjZTdhZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21JCtsO0Y7IZZGjd5NWb1KMRivdW
tSW54Gi/Y1cy+2zjlSfie9tFoKBpW3ZYpIjYWNzpSIzs1yAsXaXNc3Cr+c5BBQQa
YZdCNeGP7yKweXwXvfGvgvQ0y/GNsizxViGq0tQXByAdzTWq3KWJhLesLKyyG9qS
iYUkhuY3EYup94+gujbDvOG3AI41gvrWJyPOL7v8AFgTpN6rerKsnPK76PsmSxwm
julkf3uXuNY/NwmsM6gq/XcSOsPOMQT7qv7JbXkO0TnG317UINokhBxYztCUCQk8
SC128QqDmED3xdGS8lQKM+AMq7uTdZ18HIrXOSOftxALZwwqANOJX0ldqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKT3exr0CO+wtlWhsnEZbows5649MB8GA1UdIwQY
MBaAFMuB0fOsFK9Q3AZldE+Qdrf62x+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYt
YjEwODE3NTBjZTE1LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYtYjEwODE3NTBjZTE1
LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7J4zFeH
nLmW1q3/KSxaCqAza4L9c2fVdgr4/rhZcB3TE1jaIrwSd0GBVuv9US1551KXJoXt
Qmgk2br4fd2BespL7tac/tHtvVWah4MeJkpoQ186fF8ncUg9/yvHKZJBINDSQa2u
BZXmLnqxVbkfS73noQCLzE4Xq287/STuCoodciddVnWrnBg1m/024Q9sgMCocOst
CGogyc8MOh8BeYdhtxUKltCzl4ZSZzj4tapiEwPyZ0MmfT6iq4S/0LVPXKbamzxG
bQVdOKHqvIs7QXqadDlAuG//r9U2ooNLnFroWICMrF574cu1Nso/epEpYSqxYEzK
cNXkE9tsMWo0mA==
-----END CERTIFICATE-----