Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File:                     YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier:          CYO7qh6zyTB5YwvkMmA4dnjVBLF6riZIrYUoy+DHypc=
Subject key identifier:   EC:66:80:DB:AE:5C:27:AE:7A:2C:EB:F3:38:5A:29:5B:14:19:30:5F
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer:       /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial:       01962F749233BEF0D522335F842B429B0FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number:          0E0A
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: bgxSZ9ilKWbnDoSeSERhCWe/Dqo2brKktCNsDv7BvEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:92:33:be:f0:d5:22:33:5f:84:2b:42:9b:0f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=ec6680dbae5c27ae7a2cebf3385a295b1419305f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:45:3f:71:98:8c:8f:7e:91:4f:5a:a3:eb:85:
                    d0:a4:0f:91:3f:b7:36:67:33:9a:9f:17:77:f6:5b:
                    86:a9:99:7e:62:86:5e:98:58:46:32:ab:31:c8:7e:
                    2f:d8:87:81:91:f4:92:9f:14:06:7c:eb:7d:96:a1:
                    83:2f:bc:ab:d2:05:de:a6:d0:9a:a3:32:fc:e9:09:
                    34:a2:98:de:fb:24:6f:a5:c4:06:de:9c:22:41:33:
                    fa:5d:a2:ab:9f:a3:01:61:6d:b7:8d:d9:f8:c3:f6:
                    cb:14:68:76:36:f8:c1:ce:9b:f9:63:3b:fa:4f:a7:
                    3f:b8:35:5b:3c:ff:88:2d:5f:af:51:db:5f:5d:17:
                    2d:7e:99:e6:fb:c8:be:2e:fc:e3:a9:f1:e2:df:92:
                    a8:d3:00:0f:ff:43:9e:e2:9b:a5:4a:45:36:65:51:
                    6b:b6:d9:27:28:43:e7:ae:a3:ae:81:c5:f5:d9:30:
                    bb:d5:9f:f7:3d:80:be:b4:61:29:1f:85:77:cd:96:
                    3b:55:5f:41:d3:d3:e3:d9:ad:2a:23:58:ad:4e:d9:
                    c5:9a:1e:61:59:59:19:43:78:87:16:06:e3:46:12:
                    54:c6:1c:d3:ec:d3:f9:98:3e:b1:0b:06:f5:c2:ce:
                    20:81:51:7d:f4:85:6a:db:dc:d3:8a:4c:49:44:72:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:66:80:DB:AE:5C:27:AE:7A:2C:EB:F3:38:5A:29:5B:14:19:30:5F
            X509v3 Authority Key Identifier:
                keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:ef:a6:ee:db:0d:f4:66:e6:94:da:0f:94:5d:a7:6c:89:
         0d:84:a2:63:ba:d6:ff:aa:2c:8f:ff:be:a5:6a:e5:75:9f:eb:
         64:05:03:e9:69:4b:17:5b:cf:22:2b:9b:2e:a4:c0:ee:9e:3e:
         a5:60:c2:c8:9d:9e:ec:72:ef:b7:a5:33:13:55:93:e5:2d:55:
         57:7f:c0:20:9a:05:6c:01:00:00:83:64:af:b4:c6:6c:c7:31:
         ac:d4:78:da:a4:1d:63:4d:98:7d:96:e4:51:1c:81:46:22:46:
         90:ab:13:e2:05:e1:f3:6b:7d:f2:43:89:7a:98:ab:56:ae:70:
         74:31:67:07:fc:fd:07:1c:0f:ce:71:03:2f:59:bd:cc:91:89:
         7a:7f:eb:49:02:31:5c:76:44:ab:27:b7:77:94:e8:d2:e9:db:
         1c:af:55:7a:29:84:c6:de:3f:39:38:dd:49:5f:26:57:fc:00:
         4e:bc:82:ba:83:b2:7a:d0:20:f2:70:85:24:cc:65:0d:05:d3:
         cc:3f:27:00:9d:81:fb:36:76:f2:04:f7:bc:62:0e:65:a3:1f:
         d0:50:2e:75:e1:b0:50:42:42:a4:d4:81:24:27:16:2d:dc:ee:
         4b:8b:20:28:23:95:5f:9e:0c:5c:9f:a1:78:dd:85:29:cc:8d:
         03:a3:5d:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJIzvvDVIjNfhCtCmw/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzJiNDVhNjVjMTliNjhhYmIwNTE2YzljY2FmNDU0N2E1
Y2MzMTIwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
EyhlYzY2ODBkYmFlNWMyN2FlN2EyY2ViZjMzODVhMjk1YjE0MTkzMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/UU/cZiMj36RT1qj64XQpA+RP7c2
ZzOanxd39luGqZl+YoZemFhGMqsxyH4v2IeBkfSSnxQGfOt9lqGDL7yr0gXeptCa
ozL86Qk0opje+yRvpcQG3pwiQTP6XaKrn6MBYW23jdn4w/bLFGh2NvjBzpv5Yzv6
T6c/uDVbPP+ILV+vUdtfXRctfpnm+8i+LvzjqfHi35Ko0wAP/0Oe4pulSkU2ZVFr
ttknKEPnrqOugcX12TC71Z/3PYC+tGEpH4V3zZY7VV9B09Pj2a0qI1itTtnFmh5h
WVkZQ3iHFgbjRhJUxhzT7NP5mD6xCwb1ws4ggVF99IVq29zTikxJRHLJ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxmgNuuXCeueizr8zhaKVsUGTBfMB8GA1UdIwQY
MBaAFGHCtFplwZtoq7BRbJzK9FR6XMMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjIt
MjJjMjdiOTkzYWUyLzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjItMjJjMjdiOTkzYWUy
LzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfXvpu7b
DfRm5pTaD5Rdp2yJDYSiY7rW/6osj/++pWrldZ/rZAUD6WlLF1vPIiubLqTA7p4+
pWDCyJ2e7HLvt6UzE1WT5S1VV3/AIJoFbAEAAINkr7TGbMcxrNR42qQdY02YfZbk
URyBRiJGkKsT4gXh82t98kOJepirVq5wdDFnB/z9BxwPznEDL1m9zJGJen/rSQIx
XHZEqye3d5To0unbHK9VeimExt4/OTjdSV8mV/wATryCuoOyetAg8nCFJMxlDQXT
zD8nAJ2B+zZ28gT3vGIOZaMf0FAudeGwUEJCpNSBJCcWLdzuS4sgKCOVX54MXJ+h
eN2FKcyNA6NdOg==
-----END CERTIFICATE-----