Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File:                     YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier:          lhS2VVVhZcHw3NkC84ua2rvxDM7GnhLWrouYBBEYeeQ=
Subject key identifier:   57:DA:3B:48:98:78:AF:E4:95:40:A9:A2:40:62:C6:39:65:8C:08:72
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer:       /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial:       01962DF3DFACF7EE7CB4B870598C6DA594D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number:          1104
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: G9dMFAgvwwROnLeChrDumlCUPd25WUf0KX8Hq0nxAKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:df:ac:f7:ee:7c:b4:b8:70:59:8c:6d:a5:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=57da3b489878afe49540a9a24062c639658c0872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:cb:48:0d:b1:d2:9d:fd:89:3a:90:a4:80:
                    cf:1c:ca:5e:be:ec:d8:7b:b8:1d:49:0e:e4:90:55:
                    91:33:c3:d3:70:d6:03:79:ee:7b:c5:72:b3:43:9e:
                    e4:67:f1:a9:17:57:7d:09:95:84:b9:2a:90:8a:69:
                    5d:66:e5:bf:a1:11:e0:81:ed:db:47:fa:ec:99:04:
                    7f:4c:f1:ef:09:ee:27:ae:5e:5e:b0:a3:c9:99:ef:
                    ae:8d:20:7a:9c:c0:10:82:7d:97:7f:f2:7e:a3:90:
                    73:40:0f:48:8e:80:8f:c6:32:5f:8d:6e:24:dc:d8:
                    4e:01:64:1d:da:2a:59:68:ba:18:e6:09:9a:70:c9:
                    86:8e:3e:a1:cf:c6:17:f9:5b:9b:79:33:e4:0b:ac:
                    af:6e:55:58:a7:b8:48:e5:85:6f:77:09:d8:8f:18:
                    0d:c5:85:09:93:1d:f3:c6:51:fa:d8:50:02:94:58:
                    75:65:d2:f2:af:18:15:e4:a6:50:2e:28:2a:7b:59:
                    79:b7:0c:c3:a5:3f:37:c7:e2:61:d2:5d:c7:79:46:
                    3b:c6:ea:f8:f2:83:cf:ca:72:fe:bd:94:9d:c6:dd:
                    5d:13:1f:83:b4:32:64:3d:df:d9:e2:13:ed:95:29:
                    a4:b3:63:6a:47:8c:2b:01:07:26:76:db:1e:4a:7f:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:3B:48:98:78:AF:E4:95:40:A9:A2:40:62:C6:39:65:8C:08:72
            X509v3 Authority Key Identifier:
                keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f1:ac:1a:78:91:57:4b:c8:09:bd:eb:d2:3b:a4:8d:12:87:
         ee:84:67:e5:22:85:f4:ec:6e:2e:13:c9:fb:2e:10:e1:97:63:
         10:3b:37:fa:23:83:52:b2:99:2c:8e:3c:be:2d:33:b9:e7:84:
         a5:5e:45:d9:81:90:1c:fa:de:57:8d:8a:39:9a:b0:6c:68:46:
         e5:b8:cf:e6:f5:d6:e9:6c:f1:59:6f:ca:f4:a0:21:d0:d1:ad:
         13:73:25:51:8b:37:15:31:c1:2b:5f:55:6f:97:66:83:ca:93:
         f6:01:f5:87:72:a7:51:fa:07:11:07:5e:fc:2f:fa:df:ce:25:
         a8:3e:5d:a7:38:b1:49:c6:72:ca:0c:89:44:46:1d:b4:b8:b0:
         7c:bc:7e:c9:e8:08:52:a5:98:47:66:d0:e3:17:42:81:6e:f1:
         d3:cc:55:0d:5d:1a:7a:89:fe:65:de:1f:16:82:b4:1b:49:6d:
         73:a7:c6:df:ad:5a:db:4a:f7:d8:c8:a4:65:2b:59:4f:7b:ed:
         1d:c5:59:53:9b:92:57:2c:32:b5:d0:84:14:ed:ef:13:9e:e3:
         a5:07:97:80:ae:1f:d9:17:58:64:37:2a:a4:a1:f1:f6:38:bb:
         c2:c6:fd:73:73:ae:63:2c:6f:70:37:03:d4:1c:ff:63:82:ea:
         2a:f9:b6:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89+s9+58tLhwWYxtpZTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOWE3OTQxZTBjMmM4NjEzMjJmODMxZWQwNmYwN2ZiNzA4
NWEzYmIwHhcNMjUwNDEzMDcwMTE5WhcNMjUwNDE0MDcwMTE5WjAzMTEwLwYDVQQD
Eyg1N2RhM2I0ODk4NzhhZmU0OTU0MGE5YTI0MDYyYzYzOTY1OGMwODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUXLSA2x0p39iTqQpIDPHMpevuzY
e7gdSQ7kkFWRM8PTcNYDee57xXKzQ57kZ/GpF1d9CZWEuSqQimldZuW/oRHgge3b
R/rsmQR/TPHvCe4nrl5esKPJme+ujSB6nMAQgn2Xf/J+o5BzQA9IjoCPxjJfjW4k
3NhOAWQd2ipZaLoY5gmacMmGjj6hz8YX+VubeTPkC6yvblVYp7hI5YVvdwnYjxgN
xYUJkx3zxlH62FAClFh1ZdLyrxgV5KZQLigqe1l5twzDpT83x+Jh0l3HeUY7xur4
8oPPynL+vZSdxt1dEx+DtDJkPd/Z4hPtlSmks2NqR4wrAQcmdtseSn/liwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfaO0iYeK/klUCpokBixjlljAhyMB8GA1UdIwQY
MBaAFGGaeUHgwshhMi+DHtBvB/twhaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMDlmZWMtZDg1ZC00YjY0LWE2MTIt
MTFlZWNhMjY2ZDZjLzEvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMDlmZWMtZDg1ZC00YjY0LWE2MTItMTFlZWNhMjY2ZDZj
LzEvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPGsGniR
V0vICb3r0jukjRKH7oRn5SKF9OxuLhPJ+y4Q4ZdjEDs3+iODUrKZLI48vi0zueeE
pV5F2YGQHPreV42KOZqwbGhG5bjP5vXW6WzxWW/K9KAh0NGtE3MlUYs3FTHBK19V
b5dmg8qT9gH1h3KnUfoHEQde/C/6384lqD5dpzixScZyygyJREYdtLiwfLx+yegI
UqWYR2bQ4xdCgW7x08xVDV0aeon+Zd4fFoK0G0ltc6fG361a20r32MikZStZT3vt
HcVZU5uSVywytdCEFO3vE57jpQeXgK4f2RdYZDcqpKHx9ji7wsb9c3OuYyxvcDcD
1Bz/Y4LqKvm2HQ==
-----END CERTIFICATE-----