Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File:                     y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier:          QL5wH2wMZZ9/1nNWNIb+MzO4xsvqhBkV5qC0OYYZim0=
Subject key identifier:   BC:33:B4:22:71:8C:76:63:36:55:32:9E:32:E4:0D:06:18:E5:73:F5
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer:       /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial:       01962DF3EB400508D843077406BA1BE8269C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number:          02BD
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
                          2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: PmUgvNjzS1oJszE2LtKKuqnOtT6TBO/YGISuQ75q5KE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:eb:40:05:08:d8:43:07:74:06:ba:1b:e8:26:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=bc33b422718c76633655329e32e40d0618e573f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:85:0c:0e:26:68:8b:4a:3b:b9:93:78:b3:
                    02:6c:29:8e:17:3f:ea:7f:d7:b2:71:21:5a:ca:b2:
                    d7:82:91:fa:2f:e8:e2:10:fa:58:31:9d:fd:b2:6d:
                    16:ac:2d:28:2e:f4:8c:10:d4:0b:e2:95:89:92:63:
                    ae:b2:aa:de:aa:f9:7c:b1:2f:d3:f1:1c:8b:ae:1a:
                    05:31:cf:5a:4d:c1:fa:e0:87:63:4c:e5:c6:19:7a:
                    fa:18:e3:de:f7:09:35:f2:dc:18:62:79:9d:4b:c8:
                    40:55:55:6e:41:83:23:4d:49:1a:83:67:e7:e6:6c:
                    28:20:91:91:26:08:25:cc:ef:11:fa:47:82:89:c7:
                    99:80:bc:a9:af:d5:0b:1c:5b:c3:6c:36:2b:56:fb:
                    ae:21:98:56:fa:db:b4:de:75:8f:25:ff:1b:d1:7a:
                    c2:63:78:97:c2:3c:45:74:d5:a0:96:f0:d3:28:7f:
                    be:82:1d:00:c2:74:a7:41:e2:11:32:c5:d8:1b:25:
                    17:e4:33:34:00:f5:9b:dc:b2:fe:57:58:ff:91:f9:
                    e7:ac:1d:4f:c9:55:95:87:c7:dc:3c:f6:4d:9a:e2:
                    51:cc:e1:44:0b:f5:73:b4:5f:fd:71:4d:db:fb:f5:
                    ef:45:1f:1e:91:36:5b:cd:d5:d2:51:7e:b3:f4:2f:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:33:B4:22:71:8C:76:63:36:55:32:9E:32:E4:0D:06:18:E5:73:F5
            X509v3 Authority Key Identifier:
                keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:44:60:cf:11:1f:63:55:95:37:e0:8d:bd:1f:71:11:8e:48:
         65:fa:45:63:43:90:ed:fb:ae:06:aa:86:55:50:66:31:4b:0d:
         06:56:b9:c4:9e:1a:43:47:90:ba:7c:ef:64:08:d3:b5:7e:e4:
         3b:61:99:a8:07:63:4c:80:68:0f:6f:ff:43:ec:d3:e3:0a:47:
         46:65:36:d7:03:bf:2d:e1:bd:ce:a3:e6:0d:46:99:e0:e8:ed:
         05:b3:3d:41:5f:c9:49:35:55:14:9b:5e:4f:cc:45:7f:b2:c0:
         af:b3:1d:36:8b:91:bc:a2:11:91:95:36:8a:fb:6f:e1:e5:41:
         91:10:c5:bb:46:a1:50:f1:4e:4e:73:42:a0:13:67:72:0c:e4:
         d3:ab:5f:c8:a5:f3:26:66:48:06:21:af:d7:47:64:fc:86:d5:
         1e:13:ca:04:21:72:62:47:86:54:3b:09:9b:c3:32:fd:53:d0:
         b8:91:4d:1b:50:9f:bf:a1:84:f9:e5:d2:d3:c6:e4:05:c9:45:
         53:6e:ae:71:6c:91:3e:be:fe:9a:3d:90:fc:3d:96:cc:ae:52:
         6a:3f:97:60:70:41:b1:47:68:49:2a:83:5d:22:ab:10:f8:b2:
         81:d5:16:c4:00:9a:b3:dd:34:c7:a6:05:ed:3a:a6:3a:9a:4c:
         a3:45:be:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+tABQjYQwd0Brob6CacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTk3Y2QxNGYzYTZiYzM0NGEyYzkzOGVlMGZkZWI1NGQy
MjEyNDAwHhcNMjUwNDEzMDcwMTIyWhcNMjUwNDE0MDcwMTIyWjAzMTEwLwYDVQQD
EyhiYzMzYjQyMjcxOGM3NjYzMzY1NTMyOWUzMmU0MGQwNjE4ZTU3M2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqSFDA4maItKO7mTeLMCbCmOFz/q
f9eycSFayrLXgpH6L+jiEPpYMZ39sm0WrC0oLvSMENQL4pWJkmOusqreqvl8sS/T
8RyLrhoFMc9aTcH64IdjTOXGGXr6GOPe9wk18twYYnmdS8hAVVVuQYMjTUkag2fn
5mwoIJGRJgglzO8R+keCiceZgLypr9ULHFvDbDYrVvuuIZhW+tu03nWPJf8b0XrC
Y3iXwjxFdNWglvDTKH++gh0AwnSnQeIRMsXYGyUX5DM0APWb3LL+V1j/kfnnrB1P
yVWVh8fcPPZNmuJRzOFEC/VztF/9cU3b+/XvRR8ekTZbzdXSUX6z9C8BcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwztCJxjHZjNlUynjLkDQYY5XP1MB8GA1UdIwQY
MBaAFMuZfNFPOmvDRKLJOO4P3rVNIhJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQt
MTZlOGZlM2M1MDZmLzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQtMTZlOGZlM2M1MDZm
LzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkRgzxEf
Y1WVN+CNvR9xEY5IZfpFY0OQ7fuuBqqGVVBmMUsNBla5xJ4aQ0eQunzvZAjTtX7k
O2GZqAdjTIBoD2//Q+zT4wpHRmU21wO/LeG9zqPmDUaZ4OjtBbM9QV/JSTVVFJte
T8xFf7LAr7MdNouRvKIRkZU2ivtv4eVBkRDFu0ahUPFOTnNCoBNncgzk06tfyKXz
JmZIBiGv10dk/IbVHhPKBCFyYkeGVDsJm8My/VPQuJFNG1Cfv6GE+eXS08bkBclF
U26ucWyRPr7+mj2Q/D2WzK5Saj+XYHBBsUdoSSqDXSKrEPiygdUWxACas900x6YF
7TqmOppMo0W+Kw==
-----END CERTIFICATE-----