Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File:                     Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier:          SCiNqYOa+ccFVU9zVN4l0jlkbXeYdVsfZcxV0VgYq6o=
Subject key identifier:   B4:B7:91:9C:9A:6D:C2:46:59:6F:A2:0F:28:AB:F9:2E:77:61:19:CA
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer:       /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial:       01962DF429B0963609989989C2FFD25DE3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
                          2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: LJ1gQQRqe2yAAcThVrsr/4BiJB2QMBUiI2i+cVb3hxQ=)
                          3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:29:b0:96:36:09:98:99:89:c2:ff:d2:5d:e3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=b4b7919c9a6dc246596fa20f28abf92e776119ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:88:9f:47:16:23:fc:3e:fb:63:db:af:1a:
                    0a:c6:30:52:f5:17:c6:3a:f5:15:4a:2e:20:52:2d:
                    c5:ef:13:06:cd:50:19:ba:b8:bb:2c:1d:54:69:10:
                    e2:74:12:6f:a8:06:6d:24:42:86:21:0c:41:06:1a:
                    8a:b4:18:ed:7f:eb:f1:e0:45:cf:34:97:69:1b:b2:
                    08:a5:56:fc:14:2b:be:71:6f:df:d6:01:41:14:46:
                    db:fb:c4:03:aa:4c:0d:46:5f:7a:d3:8e:63:3f:9b:
                    10:36:af:22:4c:5c:5d:e7:3a:3b:a7:5e:9e:ec:a0:
                    cb:ee:f2:1f:1b:bf:01:c6:46:5c:d0:b6:c7:20:a5:
                    73:2f:3a:49:3e:c7:77:31:5f:6d:bb:6f:ad:0f:47:
                    fc:fe:70:23:26:14:ac:4b:8e:cb:ea:6a:67:38:21:
                    d2:15:61:f4:8a:7f:53:55:25:8b:73:cb:ec:44:78:
                    49:9b:f8:29:c2:2b:88:f9:6b:18:b7:3a:6e:7c:bb:
                    65:08:8a:6c:4a:d3:8c:c7:10:4e:e7:d1:b5:de:99:
                    4b:55:31:24:ad:f2:30:50:97:a0:6f:79:7e:72:28:
                    b2:bc:a8:64:37:cd:73:06:52:4a:52:f4:ea:ab:fa:
                    14:74:06:40:35:53:40:fa:14:13:72:3b:48:c4:d7:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:91:9C:9A:6D:C2:46:59:6F:A2:0F:28:AB:F9:2E:77:61:19:CA
            X509v3 Authority Key Identifier:
                keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:18:f4:e9:b2:88:90:77:b8:5b:bf:a5:ac:99:05:1a:26:
         95:c4:e3:20:78:52:b6:00:8e:0c:cd:60:6a:9e:f7:3a:24:ee:
         67:d9:f9:72:fd:41:c8:e9:33:e8:81:59:6a:d8:52:d9:7b:27:
         7b:3d:2c:fb:ce:3e:4d:24:e3:7d:c4:e8:92:8a:01:6c:f1:99:
         0b:63:c4:72:23:90:1a:c7:e0:35:d7:c8:75:ab:5e:5c:45:29:
         23:d9:2d:fd:d6:23:e9:bc:d7:25:c1:e4:b8:c3:8f:37:d6:7c:
         7d:07:f1:4d:c9:d9:b8:f7:b3:5a:32:0f:e3:f8:e9:63:1a:89:
         a8:83:2c:3c:cd:6b:43:ba:52:2c:8f:4c:ac:6d:03:32:60:67:
         ad:55:57:c6:c8:46:cb:83:cd:4e:a3:57:fd:13:64:4d:db:63:
         85:26:e3:b8:d6:50:57:9c:d4:b5:e2:60:8c:08:6f:0c:de:fe:
         47:fb:f1:6a:27:f9:ae:c2:89:25:06:92:00:92:b6:14:94:08:
         b5:94:a9:f8:10:5a:9b:5b:e4:e5:b4:51:fc:aa:c9:35:a0:01:
         7e:1f:06:22:bc:9f:ca:2c:66:64:03:ad:d0:1d:b8:eb:bf:d5:
         ba:de:a1:ca:35:06:f7:7e:72:53:ad:8d:73:3d:26:6b:40:2d:
         e2:ad:71:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CmwljYJmJmJwv/SXeO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj
NTVhNGEwHhcNMjUwNDEzMDcwMTM4WhcNMjUwNDE0MDcwMTM4WjAzMTEwLwYDVQQD
EyhiNGI3OTE5YzlhNmRjMjQ2NTk2ZmEyMGYyOGFiZjkyZTc3NjExOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPWIn0cWI/w++2PbrxoKxjBS9RfG
OvUVSi4gUi3F7xMGzVAZuri7LB1UaRDidBJvqAZtJEKGIQxBBhqKtBjtf+vx4EXP
NJdpG7IIpVb8FCu+cW/f1gFBFEbb+8QDqkwNRl96045jP5sQNq8iTFxd5zo7p16e
7KDL7vIfG78BxkZc0LbHIKVzLzpJPsd3MV9tu2+tD0f8/nAjJhSsS47L6mpnOCHS
FWH0in9TVSWLc8vsRHhJm/gpwiuI+WsYtzpufLtlCIpsStOMxxBO59G13plLVTEk
rfIwUJegb3l+ciiyvKhkN81zBlJKUvTqq/oUdAZANVNA+hQTcjtIxNfGnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS3kZyabcJGWW+iDyir+S53YRnKMB8GA1UdIwQY
MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt
YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj
LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVsY9Omy
iJB3uFu/payZBRomlcTjIHhStgCODM1gap73OiTuZ9n5cv1ByOkz6IFZathS2Xsn
ez0s+84+TSTjfcTokooBbPGZC2PEciOQGsfgNdfIdateXEUpI9kt/dYj6bzXJcHk
uMOPN9Z8fQfxTcnZuPezWjIP4/jpYxqJqIMsPM1rQ7pSLI9MrG0DMmBnrVVXxshG
y4PNTqNX/RNkTdtjhSbjuNZQV5zUteJgjAhvDN7+R/vxaif5rsKJJQaSAJK2FJQI
tZSp+BBam1vk5bRR/KrJNaABfh8GIryfyixmZAOt0B2467/Vut6hyjUG935yU62N
cz0ma0At4q1xzg==
-----END CERTIFICATE-----