Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
File:                     Yv8lPFoTQ6JWma4I51dnrya52-U.mft (raw, json)
Hash identifier:          3jTEYKJ3D+CIDKffDjCobMurApzTtlBgkWPdWTGt3Aw=
Subject key identifier:   E7:B8:07:52:5D:24:DF:A6:28:C5:FA:38:24:4C:C6:D8:6B:35:D1:20
Authority key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Certificate issuer:       /CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Certificate serial:       01962DF4205C99CC7CC160C7E3249EC1ED36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: Yv8lPFoTQ6JWma4I51dnrya52-U.crl (hash: zPhXK5NIcQLHKE4JrdPGHcJcxyfaaTIwjB/lruSug8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:20:5c:99:cc:7c:c1:60:c7:e3:24:9e:c1:ed:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=e7b807525d24dfa628c5fa38244cc6d86b35d120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:36:7c:6b:a3:f2:4b:ec:50:81:97:85:79:
                    19:ea:84:47:ea:48:6e:96:e6:4f:05:95:6e:a5:d6:
                    6f:e3:d1:df:6b:e0:fb:31:6d:3f:9e:b4:f6:7d:25:
                    4c:79:04:4d:c6:b1:22:9d:c1:28:f4:04:57:f0:9b:
                    e7:aa:dd:84:e2:e7:ac:b1:35:6b:b9:e5:92:fc:a3:
                    92:44:5f:1f:48:04:b5:12:b1:2c:1b:00:0f:87:55:
                    a7:89:a2:6c:32:81:ab:b0:7b:6e:2d:34:cc:95:ba:
                    58:7e:e5:f8:3d:14:04:0f:b2:81:7b:a9:a4:f4:74:
                    01:ba:be:cd:94:bc:7d:24:be:9e:80:7e:f6:99:39:
                    f4:a7:52:83:af:e7:12:d3:62:ac:ca:9a:85:5b:eb:
                    ce:1c:3d:6a:4b:fc:39:a8:4e:d4:93:6f:dc:f8:f2:
                    27:95:87:86:79:21:43:9f:65:1e:93:14:ee:22:67:
                    0c:d2:5c:23:62:e0:a0:e1:18:ec:7e:ac:09:8e:2c:
                    4d:1a:f2:7e:51:a1:03:02:2a:75:e4:b4:c2:dd:db:
                    9a:08:c4:52:8a:c0:e2:2a:a8:d7:2b:63:43:7b:42:
                    82:f6:6a:5d:e1:a3:0d:26:0a:70:d1:88:3b:84:56:
                    5a:42:fd:2f:58:a7:83:2a:41:32:65:85:f6:ea:8f:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:07:52:5D:24:DF:A6:28:C5:FA:38:24:4C:C6:D8:6B:35:D1:20
            X509v3 Authority Key Identifier:
                keyid:62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:13:51:4e:cd:5f:4e:d0:a2:4f:dd:9c:da:5d:d8:4b:38:63:
         00:8c:bf:4a:71:e1:d6:2b:e1:9d:bc:02:0a:7c:07:fc:1d:74:
         d0:c0:bd:a1:a0:5e:a2:f8:22:61:af:3b:36:ac:6b:42:74:16:
         06:bb:64:61:9b:8c:2a:7d:41:1c:d8:29:fb:42:7f:c2:90:ee:
         75:2f:0f:57:8b:6d:25:31:dc:ea:4f:e9:9d:81:94:ae:da:ee:
         8a:a3:c4:ba:b9:82:b6:b4:03:d6:80:98:1c:07:16:b2:aa:74:
         5d:d2:8e:e2:81:3a:0b:1a:8e:e3:28:8b:81:d6:45:db:24:9b:
         7e:32:51:7c:f7:ff:1d:af:84:a1:e3:e0:93:8c:cc:c1:35:ee:
         4f:5b:8c:c1:23:bb:41:09:e1:ad:b3:f7:f6:75:6f:eb:fc:08:
         b3:af:5d:be:f5:0d:dc:0d:8f:6f:be:23:1f:b6:ba:c3:d3:5d:
         1a:03:91:08:3f:aa:83:20:86:19:0b:d9:86:20:a6:e8:d2:bc:
         3d:27:06:e0:93:b9:31:de:4e:e3:8a:dc:84:ae:c2:a2:be:bf:
         17:da:83:f1:71:86:ed:4c:7d:16:aa:ca:aa:4d:0e:af:20:c4:
         ca:8e:74:48:e9:68:81:45:1e:7b:44:13:87:cd:99:8b:33:46:
         5f:8b:ec:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CBcmcx8wWDH4ySewe02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmYyNTNjNWExMzQzYTI1Njk5YWUwOGU3NTc2N2FmMjZi
OWRiZTUwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
EyhlN2I4MDc1MjVkMjRkZmE2MjhjNWZhMzgyNDRjYzZkODZiMzVkMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkE2fGuj8kvsUIGXhXkZ6oRH6khu
luZPBZVupdZv49Hfa+D7MW0/nrT2fSVMeQRNxrEincEo9ARX8Jvnqt2E4uessTVr
ueWS/KOSRF8fSAS1ErEsGwAPh1WniaJsMoGrsHtuLTTMlbpYfuX4PRQED7KBe6mk
9HQBur7NlLx9JL6egH72mTn0p1KDr+cS02KsypqFW+vOHD1qS/w5qE7Uk2/c+PIn
lYeGeSFDn2UekxTuImcM0lwjYuCg4RjsfqwJjixNGvJ+UaEDAip15LTC3duaCMRS
isDiKqjXK2NDe0KC9mpd4aMNJgpw0Yg7hFZaQv0vWKeDKkEyZYX26o95gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe4B1JdJN+mKMX6OCRMxthrNdEgMB8GA1UdIwQY
MBaAFGL/JTxaE0OiVpmuCOdXZ68mudvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXY4bFBGb1RRNkpXbWE0STUxZG5yeWE1Mi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mNzZhOGUtMTg4NC00MWJiLTgxMTMt
ZjhkNzU1YjNkMmE3LzEvWXY4bFBGb1RRNkpXbWE0STUxZG5yeWE1Mi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mNzZhOGUtMTg4NC00MWJiLTgxMTMtZjhkNzU1YjNkMmE3
LzEvWXY4bFBGb1RRNkpXbWE0STUxZG5yeWE1Mi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRNRTs1f
TtCiT92c2l3YSzhjAIy/SnHh1ivhnbwCCnwH/B100MC9oaBeovgiYa87NqxrQnQW
BrtkYZuMKn1BHNgp+0J/wpDudS8PV4ttJTHc6k/pnYGUrtruiqPEurmCtrQD1oCY
HAcWsqp0XdKO4oE6CxqO4yiLgdZF2ySbfjJRfPf/Ha+EoePgk4zMwTXuT1uMwSO7
QQnhrbP39nVv6/wIs69dvvUN3A2Pb74jH7a6w9NdGgORCD+qgyCGGQvZhiCm6NK8
PScG4JO5Md5O44rchK7Cor6/F9qD8XGG7Ux9FqrKqk0OryDEyo50SOlogUUee0QT
h82ZizNGX4vsJQ==
-----END CERTIFICATE-----