Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File:                     t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier:          UlIXMSHHmkrt6VVoGPraX7Z5x/90t5+roYKmRGB8rnE=
Subject key identifier:   2F:4D:AF:F5:E9:A5:CF:E6:13:71:22:72:5A:88:E5:D4:D7:51:8E:43
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer:       /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial:       01962E98A1691D29F43069D361FC08577BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: ZyVItWiDsMUZjcBEunLXeKY8dd9BqfM2nmVLkfImwac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:69:1d:29:f4:30:69:d3:61:fc:08:57:7b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=2f4daff5e9a5cfe6137122725a88e5d4d7518e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:f9:e6:31:24:5a:d9:1b:55:cd:51:cf:2f:
                    45:e7:1c:5b:43:3e:c5:b4:d0:3a:1c:50:ec:fb:ba:
                    26:f4:3f:33:17:af:ad:9f:aa:4b:79:d3:33:8c:41:
                    14:4b:49:7a:6f:00:48:f6:8d:28:0c:16:3f:b1:d5:
                    39:2c:63:ed:73:b9:a6:6a:e7:8d:e8:bc:c8:fd:17:
                    81:85:1e:f2:c2:b9:9c:29:3c:95:6d:2e:83:ad:09:
                    1f:61:33:d8:0b:d4:d8:bf:5f:3c:60:1d:85:79:46:
                    58:75:57:e8:c1:d8:d3:99:1c:62:0c:64:e2:29:9d:
                    f8:5c:65:7f:b7:9f:f3:69:7b:c9:14:cd:e2:3d:dd:
                    2a:ba:1f:ac:e8:89:82:c5:5d:58:ed:e3:47:24:db:
                    60:5f:ba:2d:cf:14:da:ec:ed:01:6f:91:57:c3:0c:
                    de:1d:0c:a1:cf:b5:0e:9f:47:59:00:15:30:09:d4:
                    d8:54:6f:0c:80:b8:d2:d5:ff:fe:c6:b1:5f:86:23:
                    69:e7:ff:af:3f:d8:94:f5:81:cc:cc:96:d6:3b:60:
                    f8:95:80:58:95:f3:3c:81:ae:44:ca:44:36:f7:82:
                    94:72:fa:d0:63:ae:3e:d0:47:dc:9d:b4:22:ee:10:
                    ce:2c:3f:45:03:3c:28:08:4d:f2:c0:33:96:ec:90:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4D:AF:F5:E9:A5:CF:E6:13:71:22:72:5A:88:E5:D4:D7:51:8E:43
            X509v3 Authority Key Identifier:
                keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:89:4c:a6:38:84:b0:71:0a:89:e8:4c:99:3a:37:b2:b9:2f:
         d1:2d:31:c3:ab:66:e5:5f:88:2f:45:b8:03:d4:44:6b:f9:39:
         79:dc:b9:6e:44:ff:f4:2a:f4:05:b9:cb:e7:a7:bb:79:57:d1:
         00:f2:37:bd:b8:0e:0d:33:af:01:2b:d5:12:55:0c:8e:e4:68:
         b8:4b:88:7e:70:09:57:e1:00:8d:13:c9:f7:95:4a:91:b7:59:
         2c:11:53:01:2b:39:d0:d5:80:aa:b5:23:e9:41:80:41:4f:2a:
         ab:a4:b3:5c:a2:37:32:bd:64:de:a0:fe:8d:53:a7:b5:a5:a1:
         88:e4:57:7c:1a:6d:e4:b4:b8:a2:56:4b:04:79:06:22:7f:86:
         bd:49:d5:31:a6:3e:21:5e:f1:1a:97:e2:1e:dd:26:cd:67:d0:
         11:dc:d3:3f:9a:ba:50:90:7a:89:97:5e:1e:23:dd:07:2c:54:
         21:e7:34:0b:81:b1:04:25:e7:94:ab:83:b3:60:f9:35:bf:59:
         9e:1b:94:8a:93:0b:35:61:53:70:8d:8c:b1:84:c5:f9:d4:0f:
         15:b8:5b:ff:ab:a2:59:d6:c7:e2:da:78:d0:a3:2c:b2:7e:c3:
         af:33:bf:bb:78:12:e7:83:26:3a:c4:10:de:e3:01:e2:c0:a6:
         3d:79:1a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKFpHSn0MGnTYfwIV3v6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NmNiZjU5MjdjNDc2OTA1ZmVkYTM0ZTExNDAxNDhiZjgw
NWQ5YjAwHhcNMjUwNDEzMTAwMTE2WhcNMjUwNDE0MTAwMTE2WjAzMTEwLwYDVQQD
EygyZjRkYWZmNWU5YTVjZmU2MTM3MTIyNzI1YTg4ZTVkNGQ3NTE4ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRf55jEkWtkbVc1Rzy9F5xxbQz7F
tNA6HFDs+7om9D8zF6+tn6pLedMzjEEUS0l6bwBI9o0oDBY/sdU5LGPtc7mmaueN
6LzI/ReBhR7ywrmcKTyVbS6DrQkfYTPYC9TYv188YB2FeUZYdVfowdjTmRxiDGTi
KZ34XGV/t5/zaXvJFM3iPd0quh+s6ImCxV1Y7eNHJNtgX7otzxTa7O0Bb5FXwwze
HQyhz7UOn0dZABUwCdTYVG8MgLjS1f/+xrFfhiNp5/+vP9iU9YHMzJbWO2D4lYBY
lfM8ga5EykQ294KUcvrQY64+0EfcnbQi7hDOLD9FAzwoCE3ywDOW7JC9MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9Nr/Xppc/mE3EiclqI5dTXUY5DMB8GA1UdIwQY
MBaAFLdsv1knxHaQX+2jThFAFIv4BdmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQt
MGFlMmI5ZDlkNDQ3LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQtMGFlMmI5ZDlkNDQ3
LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIolMpjiE
sHEKiehMmTo3srkv0S0xw6tm5V+IL0W4A9REa/k5edy5bkT/9Cr0BbnL56e7eVfR
API3vbgODTOvASvVElUMjuRouEuIfnAJV+EAjRPJ95VKkbdZLBFTASs50NWAqrUj
6UGAQU8qq6SzXKI3Mr1k3qD+jVOntaWhiORXfBpt5LS4olZLBHkGIn+GvUnVMaY+
IV7xGpfiHt0mzWfQEdzTP5q6UJB6iZdeHiPdByxUIec0C4GxBCXnlKuDs2D5Nb9Z
nhuUipMLNWFTcI2MsYTF+dQPFbhb/6uiWdbH4tp40KMssn7DrzO/u3gS54MmOsQQ
3uMB4sCmPXka2g==
-----END CERTIFICATE-----