Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File:                     Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier:          R+VnfmKzdYHFFpxBpvGxurUt4eqWjDA6O+CzrJnW9dQ=
Subject key identifier:   09:CE:F1:CD:02:74:88:F2:86:CB:13:56:AA:7D:22:6B:60:86:0C:CA
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer:       /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial:       01962F744A32A51E7EABE9CDA48C4CAC248F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: nlbdgt+SJ8l5sGB5BByDlkazdpE6WF3glX9SKuaJO7w=)
                          2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4a:32:a5:1e:7e:ab:e9:cd:a4:8c:4c:ac:24:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6376c252db09be817b872a717a959edcac44266b
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=09cef1cd027488f286cb1356aa7d226b60860cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:85:f3:b2:a0:5e:02:5c:a3:0f:4b:5d:48:
                    e3:66:42:c4:8b:37:af:a6:6d:90:e5:6f:e2:ef:2c:
                    4b:5f:8a:ef:43:3f:cd:c9:ec:07:a0:e6:f8:76:f5:
                    41:8c:44:62:66:3a:e4:25:39:d9:80:8e:51:f5:9b:
                    94:22:8b:48:01:d9:cd:b1:a6:43:21:c4:3b:ed:8a:
                    56:ab:3b:46:0a:98:f0:97:6f:66:b3:14:24:a8:4d:
                    4e:3d:db:82:d7:3c:9c:d0:b4:3b:19:5f:cf:33:93:
                    84:46:95:d4:d2:82:7f:e8:e1:80:c4:68:b5:ea:a2:
                    fb:02:f3:c6:e3:ec:28:e3:61:1b:42:1c:05:ed:07:
                    dc:3e:07:d9:ba:47:98:a8:4e:87:5a:6e:0d:d3:e6:
                    42:bc:f6:05:a1:d8:18:45:88:ef:7a:3d:e5:8a:8a:
                    f0:c3:ca:0b:7c:f9:bf:76:88:9f:59:80:6b:86:e7:
                    6c:d6:ff:a2:45:ec:96:cf:f7:57:21:37:26:ed:a8:
                    2f:ca:a5:a5:68:80:83:be:02:87:4c:6b:40:c9:de:
                    72:f7:5d:1a:f6:00:97:5d:70:41:1f:5d:25:d8:27:
                    69:1c:97:b9:60:45:bc:ff:77:82:80:49:cc:38:85:
                    4c:05:d7:5a:2c:6f:bc:32:ff:8d:3c:6c:31:50:27:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CE:F1:CD:02:74:88:F2:86:CB:13:56:AA:7D:22:6B:60:86:0C:CA
            X509v3 Authority Key Identifier:
                keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:04:16:7d:e6:36:1e:56:27:ba:57:82:6d:90:19:ee:1e:
         56:e7:8e:29:11:3d:76:4f:42:a9:f5:b5:7c:3f:fa:ad:99:f0:
         c6:5b:9c:d2:07:0b:74:38:d9:49:95:59:e2:9a:59:9a:48:11:
         cd:4a:1d:e6:b7:80:0e:8a:3c:41:ba:eb:6f:95:fc:73:e9:f7:
         d7:3d:bd:6a:48:69:7e:99:97:5b:b3:46:52:58:97:dd:e8:56:
         5a:d6:a6:33:81:eb:a3:26:d0:8b:bd:b6:32:fc:2b:9c:31:a9:
         dd:7a:8b:8f:04:b4:98:f9:b1:10:fc:ef:12:34:b4:4b:a1:9d:
         f9:36:9d:55:ad:11:45:0d:90:02:22:7d:56:d7:fc:23:ed:45:
         ac:63:a3:75:5e:a9:53:12:7e:12:f8:50:d8:16:2c:1f:07:2e:
         01:c6:3d:de:2e:08:4b:9e:2e:ca:3a:e7:1f:de:ee:e0:0e:12:
         ec:42:59:a7:ca:90:90:71:81:9c:a3:a5:cb:fe:e9:a6:02:9a:
         a6:37:a0:1a:5a:bb:d2:e7:2f:73:20:50:97:12:e2:3d:14:0d:
         2a:f8:2c:e1:6e:b3:4f:da:5f:e3:fd:f9:6d:17:7d:9f:0e:b5:
         55:68:f4:0f:95:c6:65:36:72:c3:b3:40:89:02:85:29:9d:ba:
         7e:d7:9f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEoypR5+q+nNpIxMrCSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzZjMjUyZGIwOWJlODE3Yjg3MmE3MTdhOTU5ZWRjYWM0
NDI2NmIwHhcNMjUwNDEzMTQwMTEyWhcNMjUwNDE0MTQwMTEyWjAzMTEwLwYDVQQD
EygwOWNlZjFjZDAyNzQ4OGYyODZjYjEzNTZhYTdkMjI2YjYwODYwY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpuF87KgXgJcow9LXUjjZkLEizev
pm2Q5W/i7yxLX4rvQz/NyewHoOb4dvVBjERiZjrkJTnZgI5R9ZuUIotIAdnNsaZD
IcQ77YpWqztGCpjwl29msxQkqE1OPduC1zyc0LQ7GV/PM5OERpXU0oJ/6OGAxGi1
6qL7AvPG4+wo42EbQhwF7QfcPgfZukeYqE6HWm4N0+ZCvPYFodgYRYjvej3liorw
w8oLfPm/doifWYBrhuds1v+iReyWz/dXITcm7agvyqWlaICDvgKHTGtAyd5y910a
9gCXXXBBH10l2CdpHJe5YEW8/3eCgEnMOIVMBddaLG+8Mv+NPGwxUCcA9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnO8c0CdIjyhssTVqp9ImtghgzKMB8GA1UdIwQY
MBaAFGN2wlLbCb6Be4cqcXqVntysRCZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAt
ZGNhMGZkNTA5ZmI2LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAtZGNhMGZkNTA5ZmI2
LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfoEFn3m
Nh5WJ7pXgm2QGe4eVueOKRE9dk9CqfW1fD/6rZnwxluc0gcLdDjZSZVZ4ppZmkgR
zUod5reADoo8Qbrrb5X8c+n31z29akhpfpmXW7NGUliX3ehWWtamM4HroybQi722
MvwrnDGp3XqLjwS0mPmxEPzvEjS0S6Gd+TadVa0RRQ2QAiJ9Vtf8I+1FrGOjdV6p
UxJ+EvhQ2BYsHwcuAcY93i4IS54uyjrnH97u4A4S7EJZp8qQkHGBnKOly/7ppgKa
pjegGlq70ucvcyBQlxLiPRQNKvgs4W6zT9pf4/35bRd9nw61VWj0D5XGZTZyw7NA
iQKFKZ26fteflw==
-----END CERTIFICATE-----