Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          C52MvN1Vt+SILHdLcvw1fUOJie3LePc1D8huVVFn7l8=
Subject key identifier:   F5:BB:59:71:19:FD:59:5A:06:27:60:B2:98:A6:05:FC:A0:9D:78:AA
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       01962F7466E9247F51ADCCC32D4201995A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=)
                          2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: 0Y0HUUjHYg3NZ0F3NTRc+zRoCYWgxZCExUzJjkt+31U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:66:e9:24:7f:51:ad:cc:c3:2d:42:01:99:5a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=f5bb597119fd595a062760b298a605fca09d78aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:ff:a1:cd:96:19:21:f5:16:ec:6a:b5:f6:
                    2c:14:6c:50:d7:5d:1f:01:3a:08:37:ab:6c:73:ef:
                    0e:3f:b7:67:70:4c:71:dd:7d:41:89:e5:db:48:a5:
                    43:59:1b:e8:f4:88:78:2a:0e:71:e8:62:ee:ac:d9:
                    fb:e4:61:1d:ed:f8:06:77:9e:3d:1f:13:ed:d7:8a:
                    4d:18:83:0c:38:ff:01:4b:7a:90:82:3d:0f:86:bd:
                    96:81:6e:da:f0:e3:4b:f9:d2:13:96:05:86:e3:4e:
                    73:23:8c:d4:e5:9a:97:c5:99:3f:2f:06:c0:56:56:
                    49:09:91:16:16:f3:79:3f:5d:1b:9e:b7:c6:38:ed:
                    58:09:10:2e:6a:04:87:6b:fa:eb:15:1b:18:d0:33:
                    73:32:fc:92:92:70:cd:1e:47:82:62:ef:63:47:dd:
                    51:e3:af:c0:95:f7:cd:ef:08:d7:3a:73:9b:bb:5c:
                    b2:29:1c:b2:6f:31:97:f9:00:15:89:ba:ff:4e:8f:
                    37:78:3c:15:3b:52:de:ef:9b:fd:e7:c0:bc:8e:9c:
                    36:53:7d:37:1b:6b:84:40:b7:2e:bd:35:a8:1d:bc:
                    0a:45:a3:04:e8:69:37:80:d2:6c:f5:49:a5:af:24:
                    f6:5d:c9:2c:fe:a7:7f:25:c0:8d:f3:35:6a:6a:8a:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BB:59:71:19:FD:59:5A:06:27:60:B2:98:A6:05:FC:A0:9D:78:AA
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:01:15:9c:9a:d8:b9:ae:2c:82:3f:67:7d:35:6b:e9:0f:
         e2:15:fa:5d:bd:10:57:d6:2f:9e:81:bb:35:5d:65:63:ff:1d:
         a4:65:a7:56:bf:b7:45:7b:6d:fe:92:d6:41:76:84:b8:df:c1:
         9f:d6:c9:a0:4b:2e:ef:8f:2b:86:5f:50:9f:af:35:11:d0:57:
         91:1b:0c:ce:6e:3a:9a:1e:3c:7d:bf:72:f7:87:61:85:b4:65:
         95:04:1c:66:35:ff:12:b4:5b:e2:fd:e1:2d:e2:ec:ef:c1:fc:
         10:a1:ea:60:81:8f:ea:44:9f:71:5d:c9:97:f7:12:02:2e:b0:
         c0:9b:e4:89:c2:64:db:70:35:71:5c:f9:dc:23:1d:e9:07:c2:
         69:6d:07:29:1a:c4:67:e8:f8:42:d4:db:dc:0e:51:89:9b:6e:
         85:15:e7:d7:3a:a4:c0:4e:4a:38:16:6f:9e:f9:96:31:d7:6c:
         f9:55:15:50:d8:b8:b9:c5:4c:b4:1c:f6:81:4c:60:a5:55:cc:
         66:21:74:66:9d:0f:b0:35:32:8e:1b:70:3f:32:4a:26:48:79:
         83:65:82:4c:27:02:25:7b:98:8d:56:2d:d6:3c:54:cc:d9:76:
         2d:42:8e:36:c5:f0:55:f4:e6:c9:90:14:70:aa:48:61:2b:27:
         d7:f7:24:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGbpJH9RrczDLUIBmVqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OGUyMDIzODFjMWM4OGQ4MmYzYjcwZjNiZTA2OGExYWEz
NzJiOWQwHhcNMjUwNDEzMTQwMTE5WhcNMjUwNDE0MTQwMTE5WjAzMTEwLwYDVQQD
EyhmNWJiNTk3MTE5ZmQ1OTVhMDYyNzYwYjI5OGE2MDVmY2EwOWQ3OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXH/oc2WGSH1FuxqtfYsFGxQ110f
AToIN6tsc+8OP7dncExx3X1BieXbSKVDWRvo9Ih4Kg5x6GLurNn75GEd7fgGd549
HxPt14pNGIMMOP8BS3qQgj0Phr2WgW7a8ONL+dITlgWG405zI4zU5ZqXxZk/LwbA
VlZJCZEWFvN5P10bnrfGOO1YCRAuagSHa/rrFRsY0DNzMvySknDNHkeCYu9jR91R
46/AlffN7wjXOnObu1yyKRyybzGX+QAVibr/To83eDwVO1Le75v958C8jpw2U303
G2uEQLcuvTWoHbwKRaME6Gk3gNJs9UmlryT2Xcks/qd/JcCN8zVqaooIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW7WXEZ/VlaBidgspimBfygnXiqMB8GA1UdIwQY
MBaAFOmOICOBwciNgvO3DzvgaKGqNyudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQt
YzgzMmVkN2Q1ZmVjLzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQtYzgzMmVkN2Q1ZmVj
LzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAec4BFZya
2LmuLII/Z301a+kP4hX6Xb0QV9YvnoG7NV1lY/8dpGWnVr+3RXtt/pLWQXaEuN/B
n9bJoEsu748rhl9Qn681EdBXkRsMzm46mh48fb9y94dhhbRllQQcZjX/ErRb4v3h
LeLs78H8EKHqYIGP6kSfcV3Jl/cSAi6wwJvkicJk23A1cVz53CMd6QfCaW0HKRrE
Z+j4QtTb3A5RiZtuhRXn1zqkwE5KOBZvnvmWMdds+VUVUNi4ucVMtBz2gUxgpVXM
ZiF0Zp0PsDUyjhtwPzJKJkh5g2WCTCcCJXuYjVYt1jxUzNl2LUKONsXwVfTmyZAU
cKpIYSsn1/ckMw==
-----END CERTIFICATE-----