Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File:                     ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier:          t5V4Hm8ODEc131OkboxkKQE0wTXjA+jKpT6mmnR9qB8=
Subject key identifier:   72:0A:C6:D3:43:AF:A8:C1:FD:C5:98:48:89:46:E2:45:7A:BF:41:47
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer:       /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial:       01962E61B1CD8BD9147FC074E452CE9C4CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=)
                          2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=)
                          3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: kUmIJx5+UzqAt7WkOCVF//tZvg5CCDdl7w0baGFlLnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:cd:8b:d9:14:7f:c0:74:e4:52:ce:9c:4c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=720ac6d343afa8c1fdc598488946e2457abf4147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:5d:fa:66:60:41:a6:b1:8c:11:4f:fd:f6:
                    34:d1:ad:6a:37:f0:ce:99:00:85:b6:24:6a:d9:03:
                    64:56:7c:58:bd:34:87:3c:7e:48:44:7f:7a:58:e2:
                    65:34:fc:1e:97:a8:ca:8e:45:8e:21:e7:7b:cc:57:
                    6c:57:32:92:1c:f2:cd:d9:04:6d:9c:6b:57:41:0f:
                    97:69:53:ab:6f:aa:e4:6c:e5:66:dd:0a:90:45:d8:
                    5e:9b:55:28:b9:e2:54:78:7d:61:9a:62:46:02:6b:
                    11:92:ed:97:60:99:a7:92:c3:07:73:35:b8:95:eb:
                    51:1c:40:a6:74:f0:05:1d:39:46:e7:77:33:f9:43:
                    f1:ff:8c:58:65:7b:fb:c4:a3:a8:b6:b1:23:45:08:
                    c4:bd:31:c7:61:1c:dd:be:18:fa:ca:80:f6:08:b6:
                    42:bd:18:83:07:2d:08:27:0f:de:07:67:0a:ef:3e:
                    46:fb:b0:de:6a:15:4e:ec:f4:59:6b:c2:a8:74:3d:
                    16:9f:59:e8:7d:41:81:b2:64:30:f3:35:36:55:c3:
                    55:14:8b:3e:f9:ba:75:ee:6f:3d:60:8f:bf:88:fb:
                    98:03:d4:4b:16:46:f5:25:be:e4:db:67:f5:6f:bf:
                    0c:dd:2c:3d:00:c7:21:48:04:44:29:60:a8:15:ef:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:C6:D3:43:AF:A8:C1:FD:C5:98:48:89:46:E2:45:7A:BF:41:47
            X509v3 Authority Key Identifier:
                keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c2:2e:67:9d:fa:fa:e8:a4:41:07:91:b7:5d:f2:0c:7e:5a:
         d4:67:3c:f9:98:8f:67:32:dc:38:2d:82:e2:34:a5:57:8e:b4:
         26:a5:4b:f0:1c:6f:81:36:34:e9:71:54:07:b2:77:90:59:8c:
         4f:25:59:a4:b2:f5:43:6c:cf:da:31:63:9f:f4:f5:01:35:49:
         d6:66:e7:45:84:40:93:ce:9e:9e:9c:e6:af:ba:3a:15:c0:7d:
         84:c0:d6:73:c3:ba:2c:a3:12:9a:bf:1b:bf:02:2c:ee:00:5e:
         ef:46:7f:27:cd:6d:e9:3a:c0:e3:3c:3a:cb:6e:57:74:e9:3a:
         d4:de:72:67:73:a5:19:48:23:c8:b6:ef:3b:3e:2e:cf:6a:31:
         24:fe:80:09:75:9e:ad:4a:58:e6:90:eb:fe:53:80:6c:54:e8:
         20:60:73:5a:00:f0:4f:83:da:38:de:de:8c:f6:6f:32:df:60:
         70:48:54:6b:2d:e2:b4:46:2e:e0:24:87:24:ba:9d:f1:53:bb:
         33:0b:68:1f:f2:8f:63:85:a6:93:f3:b3:25:7d:3d:aa:70:58:
         ae:5b:e2:6e:93:1d:b3:8f:51:12:93:2d:76:36:ee:04:57:d3:
         3f:c5:0f:50:74:ab:aa:da:83:3e:fa:b1:30:16:fa:5a:68:26:
         6b:3d:ed:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbHNi9kUf8B05FLOnEysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjU5ZjQxNzc5ZTZmMjQzNWY1OWYxYTE3MWMwODBhNWE3
YTQ0ZDIwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
Eyg3MjBhYzZkMzQzYWZhOGMxZmRjNTk4NDg4OTQ2ZTI0NTdhYmY0MTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg5d+mZgQaaxjBFP/fY00a1qN/DO
mQCFtiRq2QNkVnxYvTSHPH5IRH96WOJlNPwel6jKjkWOIed7zFdsVzKSHPLN2QRt
nGtXQQ+XaVOrb6rkbOVm3QqQRdhem1UoueJUeH1hmmJGAmsRku2XYJmnksMHczW4
letRHECmdPAFHTlG53cz+UPx/4xYZXv7xKOotrEjRQjEvTHHYRzdvhj6yoD2CLZC
vRiDBy0IJw/eB2cK7z5G+7DeahVO7PRZa8KodD0Wn1nofUGBsmQw8zU2VcNVFIs+
+bp17m89YI+/iPuYA9RLFkb1Jb7k22f1b78M3Sw9AMchSAREKWCoFe/oLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIKxtNDr6jB/cWYSIlG4kV6v0FHMB8GA1UdIwQY
MBaAFMm1n0F3nm8kNfWfGhccCApaekTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTct
NzIzNjdjYmIxOWVmLzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTctNzIzNjdjYmIxOWVm
LzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMIuZ536
+uikQQeRt13yDH5a1Gc8+ZiPZzLcOC2C4jSlV460JqVL8BxvgTY06XFUB7J3kFmM
TyVZpLL1Q2zP2jFjn/T1ATVJ1mbnRYRAk86enpzmr7o6FcB9hMDWc8O6LKMSmr8b
vwIs7gBe70Z/J81t6TrA4zw6y25XdOk61N5yZ3OlGUgjyLbvOz4uz2oxJP6ACXWe
rUpY5pDr/lOAbFToIGBzWgDwT4PaON7ejPZvMt9gcEhUay3itEYu4CSHJLqd8VO7
MwtoH/KPY4Wmk/OzJX09qnBYrlvibpMds49REpMtdjbuBFfTP8UPUHSrqtqDPvqx
MBb6Wmgmaz3t5Q==
-----END CERTIFICATE-----