Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File:                     YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier:          TJ+cqI5EYuqvzRv4Eol7YicoFrYo3UQyNTPwgqzlyTc=
Subject key identifier:   89:A3:33:E6:6D:E6:0E:9E:E4:2D:B0:2D:91:6C:D6:AB:B9:8F:88:B9
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer:       /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial:       01962E987B4DC84E7CC625C98138EDDA553D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
                          2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: T+3Da21ou7dtfcJxU0kLVd1OY/htg+Oz12QzQkcf3WE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:4d:c8:4e:7c:c6:25:c9:81:38:ed:da:55:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=89a333e66de60e9ee42db02d916cd6abb98f88b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:e1:4d:7e:f9:6c:24:ec:92:9b:9d:bc:cc:
                    a8:e2:e2:8f:62:36:0a:41:8b:ba:7a:ee:69:8b:5b:
                    e8:f8:97:f9:70:79:a1:c4:4c:95:0a:01:a2:21:8b:
                    1b:67:30:88:58:a5:3d:65:5e:8d:3e:04:51:ab:94:
                    3b:f6:7b:e5:16:9a:03:cc:c9:3b:e4:41:ce:88:0b:
                    da:dc:40:64:27:15:95:6e:7b:03:0c:ab:87:60:1d:
                    03:53:9f:b8:c2:f5:94:47:1d:5b:39:26:21:9c:3b:
                    5d:c0:b1:70:85:58:b4:b1:6d:17:a4:0f:19:20:7b:
                    50:55:15:82:ae:73:26:d6:93:5c:ef:6c:29:0b:ee:
                    43:b5:00:06:b7:21:28:1e:f9:d5:63:6d:40:aa:84:
                    8b:79:44:f7:2d:53:af:d9:16:08:10:0c:92:43:de:
                    ee:24:65:15:bc:8a:cd:0a:e5:54:b7:e7:c7:c6:02:
                    01:47:b3:a6:b9:54:d0:00:0d:f8:09:d9:99:6e:4c:
                    56:8b:4e:de:cc:48:37:d1:42:ad:c3:08:82:a0:99:
                    38:78:8e:d8:67:94:da:47:80:6d:5b:41:bd:05:8a:
                    4d:37:d2:87:01:89:89:a3:bd:c9:41:87:28:78:6d:
                    1d:3d:a5:66:32:aa:af:2d:f5:bf:b2:dc:e1:42:62:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A3:33:E6:6D:E6:0E:9E:E4:2D:B0:2D:91:6C:D6:AB:B9:8F:88:B9
            X509v3 Authority Key Identifier:
                keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:19:53:71:7b:a5:0a:4e:70:7d:1f:d1:e5:23:3d:8c:1c:c4:
         7a:3a:d9:ae:83:48:67:8f:d0:20:aa:5b:e5:68:95:eb:0f:d9:
         77:dd:14:22:af:a7:ab:f0:c7:78:35:82:3a:9c:27:96:50:4b:
         ed:ab:80:09:20:46:f5:59:e5:92:c8:fe:25:1d:28:7b:59:d7:
         7c:80:e2:47:b4:34:d0:28:a0:8a:b2:7c:f3:8d:25:12:ac:d8:
         ab:bf:01:52:bd:59:2a:50:5a:af:45:4c:00:21:e3:05:f8:e1:
         e4:b6:25:93:ca:ea:6c:97:53:eb:3c:b4:e9:9f:aa:93:9f:89:
         9b:f3:2f:cf:4d:4f:c2:07:16:e5:34:fa:8c:a6:15:60:ba:bb:
         a3:5c:71:e2:84:13:1b:fc:1a:f1:b8:5e:32:b9:4e:29:51:93:
         e9:89:94:8f:97:0d:31:32:28:f9:e1:63:b1:ab:af:48:2b:32:
         ba:20:ae:ab:4d:7c:af:a4:71:93:da:33:e7:73:80:d5:6f:b7:
         09:73:23:67:5b:47:2d:79:d3:0c:13:d4:81:21:a4:41:3a:72:
         bd:25:0e:55:ac:b2:28:6f:54:ba:64:a2:e6:13:39:8c:c7:f6:
         cb:e6:5a:eb:0b:b3:9f:e1:8a:67:5a:71:4e:e5:e6:03:37:81:
         1a:fe:e8:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHtNyE58xiXJgTjt2lU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMjQyMzUzNmU1MWY5NGZhYmZjNTBhY2Y5NDRkNzk4YWFj
ZjQwM2YwHhcNMjUwNDEzMTAwMTA3WhcNMjUwNDE0MTAwMTA3WjAzMTEwLwYDVQQD
Eyg4OWEzMzNlNjZkZTYwZTllZTQyZGIwMmQ5MTZjZDZhYmI5OGY4OGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQDhTX75bCTskpudvMyo4uKPYjYK
QYu6eu5pi1vo+Jf5cHmhxEyVCgGiIYsbZzCIWKU9ZV6NPgRRq5Q79nvlFpoDzMk7
5EHOiAva3EBkJxWVbnsDDKuHYB0DU5+4wvWURx1bOSYhnDtdwLFwhVi0sW0XpA8Z
IHtQVRWCrnMm1pNc72wpC+5DtQAGtyEoHvnVY21AqoSLeUT3LVOv2RYIEAySQ97u
JGUVvIrNCuVUt+fHxgIBR7OmuVTQAA34CdmZbkxWi07ezEg30UKtwwiCoJk4eI7Y
Z5TaR4BtW0G9BYpNN9KHAYmJo73JQYcoeG0dPaVmMqqvLfW/stzhQmIvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImjM+Zt5g6e5C2wLZFs1qu5j4i5MB8GA1UdIwQY
MBaAFGEkI1NuUflPq/xQrPlE15iqz0A/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVNRalUyNVItVS1yX0ZDcy1VVFhtS3JQUUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YjBlYzctOTg0OC00MTYzLWFjMWIt
N2IwNGQzNTk3Mzc4LzEvWVNRalUyNVItVS1yX0ZDcy1VVFhtS3JQUUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83YjBlYzctOTg0OC00MTYzLWFjMWItN2IwNGQzNTk3Mzc4
LzEvWVNRalUyNVItVS1yX0ZDcy1VVFhtS3JQUUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhlTcXul
Ck5wfR/R5SM9jBzEejrZroNIZ4/QIKpb5WiV6w/Zd90UIq+nq/DHeDWCOpwnllBL
7auACSBG9Vnlksj+JR0oe1nXfIDiR7Q00CigirJ8840lEqzYq78BUr1ZKlBar0VM
ACHjBfjh5LYlk8rqbJdT6zy06Z+qk5+Jm/Mvz01PwgcW5TT6jKYVYLq7o1xx4oQT
G/wa8bheMrlOKVGT6YmUj5cNMTIo+eFjsauvSCsyuiCuq018r6Rxk9oz53OA1W+3
CXMjZ1tHLXnTDBPUgSGkQTpyvSUOVayyKG9UumSi5hM5jMf2y+Za6wuzn+GKZ1px
TuXmAzeBGv7oBg==
-----END CERTIFICATE-----