Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File:                     YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier:          ui43cGw/0dGWLA5EVwjIMMbA8nzJyCZb9RQbyzYrmm8=
Subject key identifier:   29:69:05:C4:1C:49:E8:08:69:36:50:20:7E:15:7C:27:D2:74:25:C8
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer:       /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial:       01962E2B04C3B2EB06C45891AB1F544E16BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
                          2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: pjgZw6UGDD+NwfoWdcYcpBwTJ53kodnVUX8m9B2tUzg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:04:c3:b2:eb:06:c4:58:91:ab:1f:54:4e:16:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=296905c41c49e808693650207e157c27d27425c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:e7:b7:3d:19:6b:67:0e:31:60:4e:71:0b:
                    c1:ce:6f:7a:1c:c1:5f:01:45:92:5d:49:92:96:45:
                    0c:1d:6d:73:3a:44:d9:12:b4:a0:7a:42:2f:b8:09:
                    83:aa:0e:e5:ba:03:42:28:f1:dc:ea:56:d8:17:63:
                    22:f6:b5:4b:0f:ed:39:95:76:af:51:31:5e:dd:97:
                    38:bb:08:b8:53:ab:2e:6d:3a:bd:5b:dc:da:c1:63:
                    5a:1e:68:9e:03:f1:e3:1e:28:1f:4f:62:92:b4:66:
                    98:ad:80:f0:5a:7f:38:d1:25:de:11:f7:b8:3d:f5:
                    9d:b4:39:72:3c:1e:c7:30:18:d2:f3:d4:d4:0c:0c:
                    f9:38:33:b3:3a:43:f0:4e:cf:15:15:ca:9c:a3:ed:
                    39:f2:21:9e:90:47:09:b2:e4:c2:c3:d7:a7:06:47:
                    6e:49:8f:5f:2c:ad:d1:41:db:ac:bb:2c:7d:2f:f7:
                    0b:d6:fe:f5:70:67:10:75:bf:5f:62:4f:6b:68:73:
                    5c:a7:39:0f:af:df:af:b9:95:14:c5:dd:e9:2e:31:
                    f3:67:9c:6b:df:17:1a:33:be:c5:1a:39:00:49:ad:
                    68:ee:87:e0:02:2f:2a:2c:ec:63:35:73:ff:79:61:
                    dd:a0:a8:18:eb:ba:ca:be:7e:70:7b:64:7e:4a:e7:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:69:05:C4:1C:49:E8:08:69:36:50:20:7E:15:7C:27:D2:74:25:C8
            X509v3 Authority Key Identifier:
                keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:25:7a:b3:00:47:0d:f2:c5:d6:9d:05:98:e8:e2:ca:19:
         2b:a6:5f:85:7a:b0:c6:85:86:c0:0e:ae:07:70:dd:f7:16:26:
         03:bb:8d:d1:99:d9:43:56:d9:92:04:11:da:7f:d4:c2:ad:99:
         00:e4:4a:60:eb:65:89:37:ed:82:a7:37:d9:e0:8b:fd:f0:66:
         77:e7:ed:ab:81:5b:5a:7e:13:3e:8b:4d:a9:f0:3a:62:08:aa:
         b1:d0:59:f9:f9:5b:bc:8f:6b:e5:95:02:3b:40:9d:d0:a5:77:
         e0:ae:ce:75:b0:31:ed:72:df:5c:51:cf:47:49:75:52:24:8f:
         19:26:16:8b:e8:b5:d3:07:2e:73:ce:e3:3c:e9:cc:84:31:f0:
         cd:da:0a:90:23:30:ee:33:30:14:46:92:e9:e1:6a:8f:bd:f1:
         e8:9f:f7:c5:5e:e8:34:2a:bb:2f:55:cd:14:98:40:aa:6c:05:
         d0:24:ba:f6:7a:80:24:ef:1a:76:3e:eb:d7:11:40:d3:70:95:
         f2:68:9e:85:91:60:7d:bf:83:3d:6d:20:c9:87:00:63:5f:ad:
         38:a9:12:53:24:5e:5a:6c:7e:ea:c7:67:5c:18:27:1a:27:11:
         78:33:5d:2f:d4:ad:43:0f:15:24:a1:dc:95:22:d2:3a:79:60:
         5b:41:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----