Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File:                     y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier:          1+Vu+XaeV+r7yk99sVNF3ET+SHiM68g6KgZob1z5BEE=
Subject key identifier:   D2:B1:FF:4B:83:90:9F:FC:5C:CB:4E:FD:55:4C:2A:A2:94:01:FB:BA
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer:       /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial:       01962E61E701BBD2FA2299FE4DBC5F85FE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number:          05F2
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
                          2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: ZfLP8zRHU6mhpcuBzd5+ugGEyIBKv+NJLfHXzlPQsGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e7:01:bb:d2:fa:22:99:fe:4d:bc:5f:85:fe:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=d2b1ff4b83909ffc5ccb4efd554c2aa29401fbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:bf:49:ca:f9:be:e8:f0:02:fc:ec:29:c3:
                    6f:71:1d:31:0f:af:be:66:c3:e2:90:60:a3:71:b4:
                    cf:b4:76:9d:05:be:f3:e9:e6:be:8d:56:b0:c7:b8:
                    46:d0:30:b8:1f:11:c5:c5:c1:0a:7e:e7:a5:c3:60:
                    94:f9:f1:cf:e8:3b:f7:1b:a8:a3:35:ec:d6:33:35:
                    cc:1c:75:ab:f0:b8:5e:65:7e:90:31:42:49:30:ed:
                    db:e4:be:d1:41:fe:62:73:ed:3f:e5:8f:7e:d4:33:
                    ec:86:df:c7:ec:3b:6e:21:79:51:31:94:ef:ff:ae:
                    c7:0f:b2:bd:da:dc:86:30:99:0d:27:39:9a:a3:18:
                    d4:0f:1e:bf:64:3e:8e:5b:8c:2c:5f:f7:38:ff:de:
                    ce:e2:a0:ef:c8:7f:eb:bc:0e:f5:93:35:3d:85:7e:
                    61:bf:47:57:03:51:68:e5:69:6f:0c:d4:bd:5e:84:
                    d3:19:02:55:58:a9:05:eb:5e:21:40:1d:0f:56:e5:
                    0b:fb:0b:59:00:51:cb:96:24:43:a1:12:dc:81:1a:
                    f3:f4:4b:ef:71:63:3f:53:21:cc:83:7b:6d:7b:01:
                    8b:35:25:ac:24:58:35:3f:33:69:4c:f1:2f:ea:ea:
                    4f:ed:14:6f:19:95:3e:e3:41:32:c7:c9:33:bc:dd:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:FF:4B:83:90:9F:FC:5C:CB:4E:FD:55:4C:2A:A2:94:01:FB:BA
            X509v3 Authority Key Identifier:
                keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:e4:9f:a6:b3:f3:54:8a:24:20:e5:77:02:8d:15:6d:40:
         73:79:0a:04:a6:09:36:8a:a7:79:0a:66:ca:e0:ad:ec:b9:2c:
         af:41:ed:16:0a:e3:66:9a:5f:ce:f3:1a:7f:1f:8d:75:12:e1:
         c5:ff:2d:0f:16:c1:7e:32:ac:c2:89:6f:e7:a7:fe:a6:08:90:
         fc:63:c4:17:2e:58:38:8d:93:75:73:74:10:10:7d:8c:40:9b:
         a9:a9:fb:bd:9b:2b:4f:7d:9f:52:d7:ec:6a:5e:36:a6:22:67:
         72:84:f0:7a:74:e3:3a:a0:ac:9b:70:6a:69:4c:7d:39:a9:cf:
         56:d0:ef:ac:f1:c4:12:d0:1d:a7:e4:2f:5f:06:17:32:53:98:
         0d:64:1e:00:8c:25:9b:50:5c:15:58:d2:c7:c9:8d:48:d2:15:
         25:40:46:4d:4c:81:52:5c:58:f6:53:0e:90:7d:c0:d8:a7:28:
         b7:c8:6a:4d:05:01:71:49:b0:53:7a:e8:8f:18:77:d8:42:20:
         c7:26:2b:06:b4:9c:c1:70:02:63:db:e1:c0:da:3a:82:a3:9e:
         67:42:e3:c1:af:15:73:16:05:44:b3:d4:2d:b5:9d:bd:87:f7:
         d1:68:2a:80:9e:c6:37:7f:e0:1c:72:d1:e5:7b:0d:4b:05:c6:
         97:3b:f3:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYecBu9L6Ipn+Tbxfhf5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNTQyN2ZkNWQyMDU4NWU5N2MyZjI3NzFkNDgwOWJmNjM0
MWRhYTEwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
EyhkMmIxZmY0YjgzOTA5ZmZjNWNjYjRlZmQ1NTRjMmFhMjk0MDFmYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn12/Scr5vujwAvzsKcNvcR0xD6++
ZsPikGCjcbTPtHadBb7z6ea+jVawx7hG0DC4HxHFxcEKfuelw2CU+fHP6Dv3G6ij
NezWMzXMHHWr8LheZX6QMUJJMO3b5L7RQf5ic+0/5Y9+1DPsht/H7DtuIXlRMZTv
/67HD7K92tyGMJkNJzmaoxjUDx6/ZD6OW4wsX/c4/97O4qDvyH/rvA71kzU9hX5h
v0dXA1Fo5WlvDNS9XoTTGQJVWKkF614hQB0PVuUL+wtZAFHLliRDoRLcgRrz9Evv
cWM/UyHMg3ttewGLNSWsJFg1PzNpTPEv6upP7RRvGZU+40Eyx8kzvN3HSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKx/0uDkJ/8XMtO/VVMKqKUAfu6MB8GA1UdIwQY
MBaAFMtUJ/1dIFhel8Lydx1ICb9jQdqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgt
MWYwZGQ5ZmRmNWYzLzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgtMWYwZGQ5ZmRmNWYz
LzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsjkn6az
81SKJCDldwKNFW1Ac3kKBKYJNoqneQpmyuCt7Lksr0HtFgrjZppfzvMafx+NdRLh
xf8tDxbBfjKswolv56f+pgiQ/GPEFy5YOI2TdXN0EBB9jECbqan7vZsrT32fUtfs
al42piJncoTwenTjOqCsm3BqaUx9OanPVtDvrPHEEtAdp+QvXwYXMlOYDWQeAIwl
m1BcFVjSx8mNSNIVJUBGTUyBUlxY9lMOkH3A2Kcot8hqTQUBcUmwU3rojxh32EIg
xyYrBrScwXACY9vhwNo6gqOeZ0Ljwa8VcxYFRLPULbWdvYf30WgqgJ7GN3/gHHLR
5XsNSwXGlzvz6g==
-----END CERTIFICATE-----