Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.mft
File:                     Yu__iL9mXshqnjVredBrpZQMODw.mft (raw, json)
Hash identifier:          UPfmjheiAAdFWoaoprMBBWqr3CD/uknzfaLDEwzJ/ss=
Subject key identifier:   AB:9E:CA:A0:0D:1B:79:AC:E1:50:79:6A:0B:96:D4:15:89:A0:80:AB
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Certificate issuer:       /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial:       0192AF985998310C8E8308E8A47A7D83E8F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.mft
Manifest number:          01AE
Signing time:             Mon 21 Oct 2024 15:00:50 +0000
Manifest this update:     Mon 21 Oct 2024 15:00:50 +0000
Manifest next update:     Tue 22 Oct 2024 15:00:50 +0000
Files and hashes:         1: JPbYpVVvt6_OnKY20cBbuqGBbps.roa (hash: 3w/GP5WBeX3WZHDJf98lrfnncx6C7+FNfPwTfQ1yMZE=)
                          2: OY1xnvRUe2F6zgLvMIv4a33I4Mc.roa (hash: 6nyDXB5KOfAHCWHg4IC2zVw+7pK16zUE2YjJHz5KwOk=)
                          3: Yu__iL9mXshqnjVredBrpZQMODw.crl (hash: +WTY/ivZAPeJw1U/X21jrl2/ilTtd8zusIs+U71U8LU=)
                          4: _f-M3wjp2OAtEhojC2jPKtm5ijY.roa (hash: NXH8n5fyatqmK2HZTorNFOu8pjtSULjrl9lA7kEwrCc=)
                          5: j1_Go95PJaOBBw7Mm_PARw_mMtE.roa (hash: DnU2WyFU99svLQiMwixAZ0F3vP3hRQS+TaRWl71OmFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:98:59:98:31:0c:8e:83:08:e8:a4:7a:7d:83:e8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
        Validity
            Not Before: Oct 21 15:00:50 2024 GMT
            Not After : Oct 22 15:00:50 2024 GMT
        Subject: CN=ab9ecaa00d1b79ace150796a0b96d41589a080ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:ca:ea:7c:7f:ae:91:c5:c8:b4:15:b2:bc:
                    c9:6a:34:91:cd:0a:52:51:f6:7c:2d:24:8c:e6:30:
                    90:05:65:38:4c:11:2e:02:e1:69:ad:06:d1:70:24:
                    62:4e:bb:93:9c:a9:61:26:71:c9:92:9d:22:25:0a:
                    a6:13:eb:22:14:92:75:9c:5f:ce:70:30:34:5a:83:
                    aa:d9:ec:20:a1:99:28:50:75:1a:d9:71:01:c9:bc:
                    ca:db:2b:25:0c:a3:4d:1b:9e:66:e5:79:db:99:61:
                    81:5e:f2:01:6d:89:8a:a4:9b:82:9a:91:6c:1c:a8:
                    29:6d:e9:0c:30:5d:c5:c4:ee:4e:dd:8e:51:d6:14:
                    d6:bf:ef:29:2a:07:97:df:5e:36:2d:e8:28:28:b1:
                    d8:7e:e4:f6:92:f1:6c:e2:46:35:55:6e:42:6d:47:
                    85:84:6a:be:8b:8e:4f:55:8d:7f:37:c3:ce:09:65:
                    9a:e7:79:2d:45:89:4c:58:3b:4f:02:03:f5:10:41:
                    1f:49:86:81:88:10:29:5f:f0:05:c8:bc:56:38:f4:
                    f1:e7:5e:c7:dc:29:1b:c5:47:d8:80:b0:db:75:07:
                    c5:4b:bf:11:c7:1a:60:61:e0:8b:1f:46:e7:b6:11:
                    6c:04:3d:60:cd:24:df:d3:88:ec:25:b3:9b:41:38:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9E:CA:A0:0D:1B:79:AC:E1:50:79:6A:0B:96:D4:15:89:A0:80:AB
            X509v3 Authority Key Identifier:
                keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:af:fd:d0:bb:c5:be:f0:8b:b7:50:3b:ae:07:89:a4:84:
         fd:e8:67:cb:db:7a:75:2e:1a:a3:bc:7a:b5:ac:24:3b:9e:54:
         01:97:73:25:ae:cb:8c:30:78:07:15:78:a1:da:fd:93:42:52:
         b4:8f:e0:2d:22:87:b6:f8:6a:9e:68:e1:d8:d1:b4:73:db:91:
         3a:cc:39:70:a2:c4:f1:99:53:9e:33:4a:b6:e3:2a:c2:cd:af:
         b6:cb:98:a5:9a:02:38:53:0a:5d:a9:de:07:ed:7f:03:7c:da:
         b0:7c:11:6f:75:cc:78:82:48:f6:b0:e1:25:27:db:12:a5:a6:
         14:3d:bf:a9:92:60:63:27:fe:b5:4c:f5:35:c0:25:6c:69:7d:
         a0:ca:17:24:f1:2e:54:a8:34:ce:dc:4c:08:cc:b4:e0:13:13:
         f9:db:08:74:1f:87:07:f4:84:32:20:63:2c:ec:ca:35:54:41:
         7f:e2:e2:1f:4b:f0:bc:2c:b6:4f:b3:15:6e:8d:f2:73:e9:54:
         bd:86:0a:04:ab:41:68:e1:8b:64:86:0c:78:d6:76:f7:13:e2:
         96:00:3b:fe:28:d6:1d:0c:c8:26:df:5c:fa:c9:3a:de:da:bc:
         e0:9e:9f:da:67:ea:6b:5f:2c:01:76:3b:42:f0:64:a6:18:50:
         4a:40:fb:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKvmFmYMQyOgwjopHp9g+jxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZWZmZjg4YmY2NjVlYzg2YTllMzU2Yjc5ZDA2YmE1OTQw
YzM4M2MwHhcNMjQxMDIxMTUwMDUwWhcNMjQxMDIyMTUwMDUwWjAzMTEwLwYDVQQD
EyhhYjllY2FhMDBkMWI3OWFjZTE1MDc5NmEwYjk2ZDQxNTg5YTA4MGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BnK6nx/rpHFyLQVsrzJajSRzQpS
UfZ8LSSM5jCQBWU4TBEuAuFprQbRcCRiTruTnKlhJnHJkp0iJQqmE+siFJJ1nF/O
cDA0WoOq2ewgoZkoUHUa2XEBybzK2yslDKNNG55m5XnbmWGBXvIBbYmKpJuCmpFs
HKgpbekMMF3FxO5O3Y5R1hTWv+8pKgeX3142LegoKLHYfuT2kvFs4kY1VW5CbUeF
hGq+i45PVY1/N8POCWWa53ktRYlMWDtPAgP1EEEfSYaBiBApX/AFyLxWOPTx517H
3CkbxUfYgLDbdQfFS78RxxpgYeCLH0bnthFsBD1gzSTf04jsJbObQTjFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKueyqANG3ms4VB5aguW1BWJoICrMB8GA1UdIwQY
MBaAFGLv/4i/Zl7Iap41a3nQa6WUDDg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVfX2lMOW1Yc2hxbmpWcmVkQnJwWlFNT0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zMTIzYjAtOTNlMy00NjVkLTgwZTQt
MDQwNDA3YTI5MGQ5LzEvWXVfX2lMOW1Yc2hxbmpWcmVkQnJwWlFNT0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zMTIzYjAtOTNlMy00NjVkLTgwZTQtMDQwNDA3YTI5MGQ5
LzEvWXVfX2lMOW1Yc2hxbmpWcmVkQnJwWlFNT0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJyv/dC7
xb7wi7dQO64HiaSE/ehny9t6dS4ao7x6tawkO55UAZdzJa7LjDB4BxV4odr9k0JS
tI/gLSKHtvhqnmjh2NG0c9uROsw5cKLE8ZlTnjNKtuMqws2vtsuYpZoCOFMKXane
B+1/A3zasHwRb3XMeIJI9rDhJSfbEqWmFD2/qZJgYyf+tUz1NcAlbGl9oMoXJPEu
VKg0ztxMCMy04BMT+dsIdB+HB/SEMiBjLOzKNVRBf+LiH0vwvCy2T7MVbo3yc+lU
vYYKBKtBaOGLZIYMeNZ29xPilgA7/ijWHQzIJt9c+sk63tq84J6f2mfqa18sAXY7
QvBkphhQSkD7Dw==
-----END CERTIFICATE-----