Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File:                     Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier:          OUWhcDqDAR+RNUzCqxsIVS19RoC/XJyiF+eX5lh1Tco=
Subject key identifier:   43:F1:C1:DF:E0:D5:DF:C6:45:43:10:C7:08:41:AD:7A:B9:4F:09:16
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer:       /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial:       01962DF43FCC409989FFA9741DA7B8A2E841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number:          08B2
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: v2t3xkPiCU6BjxYnhweHZ/y5t3D9vhNNQZmdQbHNFqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:cc:40:99:89:ff:a9:74:1d:a7:b8:a2:e8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=43f1c1dfe0d5dfc6454310c70841ad7ab94f0916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:d4:61:0d:83:23:12:38:54:30:46:8f:3f:
                    46:eb:78:7d:a2:5f:33:ff:73:0d:81:59:0e:45:0e:
                    20:46:6e:c4:70:f3:b7:ec:bd:72:0e:42:72:5b:76:
                    14:f9:58:01:48:83:2e:15:90:cd:9c:90:5f:a6:c9:
                    cd:a2:85:f3:a6:00:74:ce:0a:29:fd:a4:e1:f7:7c:
                    44:e6:84:3a:69:f6:58:70:8b:51:28:54:d6:c8:db:
                    c1:f9:22:b4:ae:ab:bc:b3:d1:ff:eb:9d:4a:c7:fd:
                    b5:f0:1f:f8:5e:d1:67:74:0b:90:bf:a0:4b:69:a7:
                    64:c8:af:0a:ba:65:dd:0c:6b:58:fc:69:bc:19:20:
                    60:f5:47:4e:fc:ea:1d:cf:a1:09:b9:82:03:a3:75:
                    58:3e:bc:3a:50:93:31:d2:69:0d:e6:c5:ed:ef:38:
                    c0:a5:e0:a2:4b:5d:74:2f:a8:c2:72:5e:b3:38:8f:
                    20:ab:15:c9:ab:b5:ae:a2:5c:3f:7e:77:e8:e9:d9:
                    da:d8:8b:0c:3b:b8:39:96:5c:22:1b:80:00:ab:f2:
                    b0:5c:fd:bb:5c:02:d5:5b:c4:f1:72:c5:28:47:ff:
                    9e:4c:3c:32:bb:15:62:89:41:06:d0:81:b2:03:7a:
                    bb:b0:82:6c:6a:2b:bb:7f:8f:af:8a:c9:37:f1:ae:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F1:C1:DF:E0:D5:DF:C6:45:43:10:C7:08:41:AD:7A:B9:4F:09:16
            X509v3 Authority Key Identifier:
                keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8c:66:3e:57:26:8d:f3:64:05:fe:f0:2c:00:42:4d:30:7c:
         ba:7f:5a:3e:d0:73:d0:a1:25:36:57:91:de:e0:cd:58:54:80:
         e5:74:8e:60:3f:9d:1f:74:4b:e1:77:bb:92:9d:f6:b6:f4:18:
         2b:c9:a6:ce:12:1d:4b:1f:21:7d:75:07:8f:1d:fc:3a:90:ef:
         47:8c:a5:6f:14:bb:7e:c3:97:19:e9:d8:df:72:7c:72:47:58:
         26:bc:d8:bf:e5:3f:60:f7:25:96:7a:b0:d6:ba:48:74:6b:47:
         06:2a:e8:32:bd:91:c3:ad:99:82:d9:6f:cb:8f:89:b1:8f:99:
         bc:c8:c2:14:23:69:3b:4e:a7:7c:43:31:0d:ed:00:30:c9:8b:
         f9:99:c3:7e:7e:c9:4a:24:10:ad:0f:69:0e:85:62:ea:37:66:
         51:ef:57:95:c2:96:e9:ca:c3:21:cf:40:24:b3:19:4f:50:5a:
         1b:99:ef:cf:fb:80:57:a7:20:12:51:da:a1:f9:06:7c:34:69:
         c6:74:22:bc:bf:4d:94:4a:27:63:17:a7:5c:4b:6c:1a:ae:3d:
         a9:66:16:8f:f7:e0:4b:16:52:a6:e3:12:c9:82:25:78:c2:b1:
         42:0a:ca:a4:a9:31:7e:de:e3:e3:48:4b:d4:31:59:f6:f2:73:
         ce:80:51:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D/MQJmJ/6l0Hae4ouhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMGQwZmNiNGI5NGU0MTFhOGRlMjYyMDlkYzE1ZTMyZGZh
ODlhYTAwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg0M2YxYzFkZmUwZDVkZmM2NDU0MzEwYzcwODQxYWQ3YWI5NGYwOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIfUYQ2DIxI4VDBGjz9G63h9ol8z
/3MNgVkORQ4gRm7EcPO37L1yDkJyW3YU+VgBSIMuFZDNnJBfpsnNooXzpgB0zgop
/aTh93xE5oQ6afZYcItRKFTWyNvB+SK0rqu8s9H/651Kx/218B/4XtFndAuQv6BL
aadkyK8KumXdDGtY/Gm8GSBg9UdO/Oodz6EJuYIDo3VYPrw6UJMx0mkN5sXt7zjA
peCiS110L6jCcl6zOI8gqxXJq7Wuolw/fnfo6dna2IsMO7g5llwiG4AAq/KwXP27
XALVW8TxcsUoR/+eTDwyuxViiUEG0IGyA3q7sIJsaiu7f4+visk38a7zbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPxwd/g1d/GRUMQxwhBrXq5TwkWMB8GA1UdIwQY
MBaAFGIND8tLlOQRqN4mIJ3BXjLfqJqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWcwUHkwdVU1QkdvM2lZZ25jRmVNdC1vbXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZTEyYzgtOWRkNy00NzhiLTkwNzEt
MTQyM2U0YTA3Mjk2LzEvWWcwUHkwdVU1QkdvM2lZZ25jRmVNdC1vbXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZTEyYzgtOWRkNy00NzhiLTkwNzEtMTQyM2U0YTA3Mjk2
LzEvWWcwUHkwdVU1QkdvM2lZZ25jRmVNdC1vbXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYxmPlcm
jfNkBf7wLABCTTB8un9aPtBz0KElNleR3uDNWFSA5XSOYD+dH3RL4Xe7kp32tvQY
K8mmzhIdSx8hfXUHjx38OpDvR4ylbxS7fsOXGenY33J8ckdYJrzYv+U/YPcllnqw
1rpIdGtHBiroMr2Rw62Zgtlvy4+JsY+ZvMjCFCNpO06nfEMxDe0AMMmL+ZnDfn7J
SiQQrQ9pDoVi6jdmUe9XlcKW6crDIc9AJLMZT1BaG5nvz/uAV6cgElHaofkGfDRp
xnQivL9NlEonYxenXEtsGq49qWYWj/fgSxZSpuMSyYIleMKxQgrKpKkxft7j40hL
1DFZ9vJzzoBRVg==
-----END CERTIFICATE-----