Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File:                     Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier:          05IvrNzwuZi+jA9lGlQGE6CW6cgziMUra89DHmnZd0o=
Subject key identifier:   CF:49:28:FD:30:7A:BD:57:DD:8F:E3:B3:E9:37:45:DC:F4:11:6C:E6
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer:       /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial:       01962F741A5CD6357257BE12F9AC41824A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: p8EsOR4ulh/zSXFBBtPGktw84Hm6xbgRwON8HRhGZAc=)
                          2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:5c:d6:35:72:57:be:12:f9:ac:41:82:4a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=cf4928fd307abd57dd8fe3b3e93745dcf4116ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:37:3e:2b:0b:14:9d:71:8f:50:d5:ca:c1:
                    e6:5b:85:6d:97:a5:34:73:da:39:fe:24:a5:8d:4d:
                    8b:e0:d0:09:32:a9:56:04:67:7d:aa:ca:8c:88:d6:
                    1b:29:0f:69:d8:b3:88:c9:52:8f:3d:e2:15:75:a0:
                    12:04:09:59:47:05:6f:de:be:c6:aa:f5:18:e3:c8:
                    e0:2c:f5:9f:4b:53:fd:51:08:f7:dc:51:b6:db:df:
                    85:2f:f5:33:cb:bf:4a:14:af:fe:99:d7:d1:ad:26:
                    4f:1e:c4:db:54:3b:bf:2b:ec:fe:b3:ed:da:8b:3b:
                    9d:24:78:13:db:6e:96:41:84:b3:f6:42:9a:dc:8f:
                    40:31:de:82:36:a9:6a:3a:59:b0:00:da:df:31:22:
                    2b:7d:d3:b2:c0:7f:b7:84:32:84:42:80:1f:64:4b:
                    4f:52:5a:c9:21:ac:30:0c:15:da:f6:68:2d:dc:28:
                    34:a2:97:ad:a7:13:f5:78:ff:ea:e4:ba:fd:ee:e6:
                    fa:e8:84:29:c0:41:7d:7e:ea:88:9d:c3:29:55:fc:
                    e9:ca:8e:70:43:f6:4e:10:f3:95:a0:25:c2:fd:47:
                    e9:83:c5:44:df:14:00:71:0f:8b:09:2f:1c:00:8a:
                    64:ba:38:d6:9d:a4:55:c5:e0:84:d0:a6:c1:8e:8f:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:49:28:FD:30:7A:BD:57:DD:8F:E3:B3:E9:37:45:DC:F4:11:6C:E6
            X509v3 Authority Key Identifier:
                keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:63:97:87:25:95:3b:c4:66:0f:d3:bf:dc:2a:ab:ea:8c:28:
         d1:b5:40:bb:cb:79:36:bc:3b:f7:e3:71:01:ea:d2:be:1a:c3:
         32:6d:15:14:72:97:3a:cb:c2:57:5b:cb:62:4a:10:eb:0e:4c:
         17:c6:54:ae:ad:77:28:f4:89:8a:04:e4:fd:7f:50:82:92:f7:
         77:78:8d:be:a2:e9:f0:34:1b:cc:b7:9e:f9:ab:34:85:07:e8:
         d7:5d:19:41:0a:94:ea:32:ed:0b:97:82:50:52:03:8a:45:7b:
         6f:ad:c0:72:8b:23:9c:07:d3:7d:d4:a3:2b:42:b7:fc:3c:8e:
         b9:65:06:48:e4:36:c4:39:7d:25:7b:2e:1d:a3:88:24:49:42:
         d1:06:61:57:26:81:f5:0e:42:03:be:0d:0e:af:60:7b:8c:60:
         9d:82:80:f7:af:00:80:e7:bb:ef:e9:19:06:2a:41:8c:be:f5:
         ae:fe:aa:47:46:5b:61:e2:63:79:3b:eb:90:21:5b:a8:d2:1c:
         27:9f:9c:1d:c3:c8:8e:ba:d1:9b:ea:22:8f:bf:02:a0:bd:16:
         5c:56:7d:0f:19:b1:5d:62:3e:15:ba:49:73:b7:47:68:72:8f:
         87:a1:28:82:49:2a:9b:50:23:50:88:62:21:83:d6:d6:55:a9:
         1d:27:b2:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBpc1jVyV74S+axBgkp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjQ5OGI3N2FkOTljZDM2ZTg3NmYwZTJmZWQ2OTk4MTky
YmM2MTIwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EyhjZjQ5MjhmZDMwN2FiZDU3ZGQ4ZmUzYjNlOTM3NDVkY2Y0MTE2Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSc3PisLFJ1xj1DVysHmW4Vtl6U0
c9o5/iSljU2L4NAJMqlWBGd9qsqMiNYbKQ9p2LOIyVKPPeIVdaASBAlZRwVv3r7G
qvUY48jgLPWfS1P9UQj33FG229+FL/Uzy79KFK/+mdfRrSZPHsTbVDu/K+z+s+3a
izudJHgT226WQYSz9kKa3I9AMd6CNqlqOlmwANrfMSIrfdOywH+3hDKEQoAfZEtP
UlrJIawwDBXa9mgt3Cg0opetpxP1eP/q5Lr97ub66IQpwEF9fuqIncMpVfzpyo5w
Q/ZOEPOVoCXC/Ufpg8VE3xQAcQ+LCS8cAIpkujjWnaRVxeCE0KbBjo/C2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9JKP0wer1X3Y/js+k3Rdz0EWzmMB8GA1UdIwQY
MBaAFGO0mLd62ZzTbodvDi/taZgZK8YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2It
OTdkY2RhM2EzY2E1LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2ItOTdkY2RhM2EzY2E1
LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGOXhyWV
O8RmD9O/3Cqr6owo0bVAu8t5Nrw79+NxAerSvhrDMm0VFHKXOsvCV1vLYkoQ6w5M
F8ZUrq13KPSJigTk/X9QgpL3d3iNvqLp8DQbzLee+as0hQfo110ZQQqU6jLtC5eC
UFIDikV7b63AcosjnAfTfdSjK0K3/DyOuWUGSOQ2xDl9JXsuHaOIJElC0QZhVyaB
9Q5CA74NDq9ge4xgnYKA968AgOe77+kZBipBjL71rv6qR0ZbYeJjeTvrkCFbqNIc
J5+cHcPIjrrRm+oij78CoL0WXFZ9DxmxXWI+FbpJc7dHaHKPh6Eogkkqm1AjUIhi
IYPW1lWpHSeyvw==
-----END CERTIFICATE-----