Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File:                     LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier:          N7keMQ8507z3qCE83MCGbQyat4D8/QuPf4d+XMTl6So=
Subject key identifier:   13:E6:87:39:74:3F:85:14:F8:8D:F9:72:F4:9B:9B:47:A0:6C:42:06
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer:       /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial:       01962F06C94D224E95C103E53A3D9356D819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: 6q/8ftTCfs9l62zGHAqDE1IlOoqaxqCxJ60JpSgh7k4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c9:4d:22:4e:95:c1:03:e5:3a:3d:93:56:d8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=13e68739743f8514f88df972f49b9b47a06c4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:26:76:7f:1a:e1:f4:20:f8:7e:b4:84:e0:
                    be:ed:39:eb:d1:82:2d:2d:9e:29:8e:03:50:f9:3b:
                    57:27:c7:d4:90:90:6e:af:75:47:07:f3:75:36:c8:
                    42:b9:88:7f:21:92:c9:97:24:29:b8:01:ec:f8:a9:
                    b3:99:58:90:35:c4:8a:af:6b:18:b8:88:92:72:a5:
                    15:0b:1d:99:cf:5d:cd:06:88:ce:67:ad:01:f2:48:
                    20:55:ac:a0:25:39:70:99:73:ef:20:46:af:06:15:
                    e3:e5:d8:4c:1d:82:a4:76:9f:ff:ef:fc:af:44:a5:
                    5e:d5:15:72:c3:e5:c2:1e:e5:c8:f3:7d:a1:92:b5:
                    d4:40:87:99:61:d2:8c:8d:30:7d:b1:ec:dd:9f:f8:
                    04:e2:75:8a:65:51:d0:02:01:4c:02:25:2a:af:61:
                    5a:02:0f:3f:08:87:37:9a:02:b2:52:ba:c5:0f:cb:
                    0d:5f:50:03:c4:f6:17:c2:90:81:ff:1e:d4:95:5d:
                    13:68:c8:eb:7f:1a:7e:54:e5:69:c2:38:48:fb:9e:
                    e1:1d:e5:1d:21:84:e6:39:0e:86:f3:a6:ae:b0:5a:
                    40:db:27:15:af:fb:52:9c:72:91:e5:47:01:83:c4:
                    44:11:a4:35:d5:c6:d7:11:42:2d:57:97:43:86:79:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E6:87:39:74:3F:85:14:F8:8D:F9:72:F4:9B:9B:47:A0:6C:42:06
            X509v3 Authority Key Identifier:
                keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:ea:64:48:b8:ef:1f:05:12:31:26:63:bb:ce:07:cf:8a:
         03:69:06:c2:27:4a:aa:df:fc:7d:d8:59:f0:b0:fd:b6:10:ef:
         29:47:fb:4b:b3:66:dd:c9:79:52:e8:6c:53:82:4e:f4:02:08:
         66:c2:65:87:45:80:58:da:04:0f:d8:c8:b9:57:0d:b1:b6:cd:
         37:3d:21:06:b0:2c:d7:a4:73:3e:17:a9:e9:16:4d:06:3e:7b:
         77:af:f5:3f:0a:6f:26:bd:ef:f8:ea:38:6c:86:9c:a9:81:af:
         cf:81:9b:c4:d2:88:97:c0:35:e6:65:ce:e0:cc:99:a8:f6:50:
         df:88:34:a0:cc:5a:fe:c5:e7:4f:02:c7:b1:e3:fb:31:d6:1c:
         07:58:37:08:db:f4:4e:37:35:7d:0e:39:cd:c3:84:28:e4:16:
         35:1d:88:a0:8b:1a:45:fc:c7:a0:ec:94:17:05:13:4f:f7:c1:
         10:f7:f2:96:0a:87:a9:33:96:69:dd:45:be:8a:74:0b:3f:df:
         3a:a3:db:60:40:c3:92:68:56:9f:cf:54:96:9c:57:73:53:a9:
         a5:9a:53:cc:6a:5c:e8:c6:05:b7:bc:e1:32:bb:b5:ee:ff:3d:
         4a:80:c3:2a:94:00:92:45:0f:4c:57:df:db:41:94:74:3b:c1:
         de:17:2c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBslNIk6VwQPlOj2TVtgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjA4ZDg5ZDM3NmZjODg4M2I3ZDA3MTMxYmQzNGE3MDU5
YWVmZmEwHhcNMjUwNDEzMTIwMTM1WhcNMjUwNDE0MTIwMTM1WjAzMTEwLwYDVQQD
EygxM2U2ODczOTc0M2Y4NTE0Zjg4ZGY5NzJmNDliOWI0N2EwNmM0MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKEmdn8a4fQg+H60hOC+7Tnr0YIt
LZ4pjgNQ+TtXJ8fUkJBur3VHB/N1NshCuYh/IZLJlyQpuAHs+KmzmViQNcSKr2sY
uIiScqUVCx2Zz13NBojOZ60B8kggVaygJTlwmXPvIEavBhXj5dhMHYKkdp//7/yv
RKVe1RVyw+XCHuXI832hkrXUQIeZYdKMjTB9sezdn/gE4nWKZVHQAgFMAiUqr2Fa
Ag8/CIc3mgKyUrrFD8sNX1ADxPYXwpCB/x7UlV0TaMjrfxp+VOVpwjhI+57hHeUd
IYTmOQ6G86ausFpA2ycVr/tSnHKR5UcBg8REEaQ11cbXEUItV5dDhnk47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPmhzl0P4UU+I35cvSbm0egbEIGMB8GA1UdIwQY
MBaAFC8gjYnTdvyIg7fQcTG9NKcFmu/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzUxM2MtYWEzYS00OGFhLWFjOWMt
MjIyNDJiOWFiMmIzLzEvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yYzUxM2MtYWEzYS00OGFhLWFjOWMtMjIyNDJiOWFiMmIz
LzEvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0DqZEi4
7x8FEjEmY7vOB8+KA2kGwidKqt/8fdhZ8LD9thDvKUf7S7Nm3cl5UuhsU4JO9AII
ZsJlh0WAWNoED9jIuVcNsbbNNz0hBrAs16RzPhep6RZNBj57d6/1PwpvJr3v+Oo4
bIacqYGvz4GbxNKIl8A15mXO4MyZqPZQ34g0oMxa/sXnTwLHseP7MdYcB1g3CNv0
Tjc1fQ45zcOEKOQWNR2IoIsaRfzHoOyUFwUTT/fBEPfylgqHqTOWad1Fvop0Cz/f
OqPbYEDDkmhWn89UlpxXc1OppZpTzGpc6MYFt7zhMru17v89SoDDKpQAkkUPTFff
20GUdDvB3hcsLw==
-----END CERTIFICATE-----