Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File:                     yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier:          9QuRY+ShLLyaxnzuGaYqe4V054QXRMhct1VghxTlWk4=
Subject key identifier:   38:72:F2:A9:C0:37:EE:E0:14:D3:80:1C:95:95:6C:AA:C3:2D:F8:F0
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer:       /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial:       01962DF393CED346F92B7018A8807C2D19D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number:          09EE
Signing time:             Sun 13 Apr 2025 07:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 07:00:59 +0000
Files and hashes:         1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: eV3JN8shwgnJ1s/LzouKxgo1T38SfvtKHhNjvWk12dU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:93:ce:d3:46:f9:2b:70:18:a8:80:7c:2d:19:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
        Validity
            Not Before: Apr 13 07:00:59 2025 GMT
            Not After : Apr 14 07:00:59 2025 GMT
        Subject: CN=3872f2a9c037eee014d3801c95956caac32df8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f0:34:3c:72:ce:5e:d5:d7:90:ab:0e:71:60:
                    56:d1:f5:05:5e:6e:52:a7:13:0b:56:79:fe:dd:32:
                    db:e8:aa:1a:23:46:40:94:61:fc:6e:7a:d8:aa:3e:
                    50:f3:60:ae:34:18:4b:28:c6:22:44:12:be:63:75:
                    6e:3a:24:f1:8d:51:d7:04:73:32:1f:dd:fc:83:1b:
                    72:fd:a6:07:9e:57:04:d0:eb:10:a8:2d:6d:8b:72:
                    bf:9d:a3:24:ba:6d:55:c5:35:93:bd:df:9b:bf:5d:
                    1c:77:e3:88:09:d3:11:43:7b:e8:58:4a:c0:f0:bf:
                    87:bb:b6:08:91:48:ea:ef:6e:78:06:33:36:0e:79:
                    26:9b:b4:f4:8d:34:e0:c8:a8:75:e9:b6:eb:72:6d:
                    c6:27:1f:09:f9:6f:60:78:17:4f:7f:4f:84:df:7a:
                    ce:7c:e2:83:dc:0b:4a:dc:35:ff:1e:8c:47:b5:d9:
                    45:cb:08:7d:b0:d3:2c:10:df:48:49:da:4e:f2:93:
                    e9:e4:ec:50:70:8f:cd:cf:06:3a:f9:b9:98:80:6f:
                    38:cf:b2:18:5b:50:ad:b7:85:01:89:83:61:58:5b:
                    a0:55:90:d5:af:65:7b:d1:ff:51:28:a4:68:75:3b:
                    72:b3:99:19:f3:54:22:53:61:a1:76:cc:de:09:40:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:72:F2:A9:C0:37:EE:E0:14:D3:80:1C:95:95:6C:AA:C3:2D:F8:F0
            X509v3 Authority Key Identifier:
                keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:9d:a1:78:53:24:fa:15:b3:f4:d9:ea:b9:e3:ee:0d:23:
         e9:d7:6b:22:ea:06:1e:f4:34:4a:5c:d4:6d:88:30:c0:38:5e:
         aa:dd:c2:c7:cc:39:29:0e:88:b6:95:94:75:b9:6d:1f:88:2f:
         ac:62:10:de:03:f0:16:a5:ba:c0:23:ab:95:c7:6f:76:d9:1d:
         e5:eb:42:48:9d:aa:a5:1e:4d:ba:8e:17:bd:53:9e:9e:89:01:
         4f:f3:91:a9:05:6a:61:8b:2a:68:bc:bb:11:92:66:b9:3d:c4:
         46:05:34:01:0a:d6:dd:3d:75:7b:cd:8b:c5:c0:0f:af:a7:39:
         0a:65:4c:a6:d0:52:ed:6e:df:08:89:4e:b2:6d:24:cc:6c:8f:
         6d:fe:58:67:61:ff:79:26:01:2f:50:77:38:ad:49:37:49:c1:
         f3:06:63:bd:94:34:32:fa:6e:ec:3b:06:0c:70:57:fb:28:e4:
         ca:ec:dd:e6:5c:c8:25:df:c8:af:fa:46:ba:e6:42:a6:cb:10:
         6b:60:ce:3b:ad:c0:b1:9b:e2:9f:2d:f6:34:fb:c0:13:d2:cb:
         29:39:20:f5:ca:18:46:a2:f6:d5:b1:8d:5b:68:ad:b2:28:f4:
         39:13:6a:a3:52:c4:8e:5e:39:23:04:b7:09:a8:8b:c6:90:ba:
         a5:c8:2b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt85PO00b5K3AYqIB8LRnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTcxNzk5YmRhODkzYTE4NjBiNGE2MTZjNTYyNzhhZjVl
YzkyYzUwHhcNMjUwNDEzMDcwMDU5WhcNMjUwNDE0MDcwMDU5WjAzMTEwLwYDVQQD
EygzODcyZjJhOWMwMzdlZWUwMTRkMzgwMWM5NTk1NmNhYWMzMmRmOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/A0PHLOXtXXkKsOcWBW0fUFXm5S
pxMLVnn+3TLb6KoaI0ZAlGH8bnrYqj5Q82CuNBhLKMYiRBK+Y3VuOiTxjVHXBHMy
H938gxty/aYHnlcE0OsQqC1ti3K/naMkum1VxTWTvd+bv10cd+OICdMRQ3voWErA
8L+Hu7YIkUjq7254BjM2Dnkmm7T0jTTgyKh16bbrcm3GJx8J+W9geBdPf0+E33rO
fOKD3AtK3DX/HoxHtdlFywh9sNMsEN9ISdpO8pPp5OxQcI/NzwY6+bmYgG84z7IY
W1Ctt4UBiYNhWFugVZDVr2V70f9RKKRodTtys5kZ81QiU2GhdszeCUBxPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhy8qnAN+7gFNOAHJWVbKrDLfjwMB8GA1UdIwQY
MBaAFMlXF5m9qJOhhgtKYWxWJ4r17JLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEt
MDM3NDZkN2JkMjk0LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEtMDM3NDZkN2JkMjk0
LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU02doXhT
JPoVs/TZ6rnj7g0j6ddrIuoGHvQ0SlzUbYgwwDheqt3Cx8w5KQ6ItpWUdbltH4gv
rGIQ3gPwFqW6wCOrlcdvdtkd5etCSJ2qpR5Nuo4XvVOenokBT/ORqQVqYYsqaLy7
EZJmuT3ERgU0AQrW3T11e82LxcAPr6c5CmVMptBS7W7fCIlOsm0kzGyPbf5YZ2H/
eSYBL1B3OK1JN0nB8wZjvZQ0Mvpu7DsGDHBX+yjkyuzd5lzIJd/Ir/pGuuZCpssQ
a2DOO63AsZviny32NPvAE9LLKTkg9coYRqL21bGNW2itsij0ORNqo1LEjl45IwS3
CaiLxpC6pcgrTg==
-----END CERTIFICATE-----