Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File:                     yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier:          LWeWUo+O0tIyjKTtHTFtgraJeh3Pb7CffN0hVHf91G8=
Subject key identifier:   5D:6C:06:6C:80:66:4D:2C:0B:60:9A:14:57:6F:30:3C:9B:86:39:BD
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer:       /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial:       01962E98EED0FA0363DFDC92966F657AFE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
                          2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
                          3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: JFb8qiL3RO+zoZb+7A4mCVS2v7ZlKRNcyJuU9g+CJGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ee:d0:fa:03:63:df:dc:92:96:6f:65:7a:fe:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=5d6c066c80664d2c0b609a14576f303c9b8639bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:bd:06:4c:ee:e9:5a:c5:dc:92:e3:d2:88:
                    a2:55:68:13:be:9e:bc:82:64:6a:10:94:6e:03:23:
                    12:0c:b6:27:e6:75:c0:48:e0:d9:82:85:02:62:83:
                    28:fe:40:26:1c:f7:f9:27:bb:c1:68:fb:30:4c:37:
                    76:69:29:58:81:87:62:82:8f:ae:2a:d8:f2:a1:80:
                    e7:1e:01:91:8e:8f:89:31:d4:4e:1b:33:38:5f:b1:
                    33:e5:04:80:93:22:56:eb:73:29:c9:a4:41:b2:74:
                    83:05:7d:bc:a7:9b:1c:78:b6:43:33:80:ec:19:cf:
                    ad:da:9b:2c:54:4f:7e:25:fb:e3:8d:ce:fc:f1:53:
                    13:a4:4c:02:3d:e4:0f:0b:1f:0d:59:cc:40:ce:ad:
                    c1:84:b7:99:10:84:95:4e:52:f1:f6:49:c3:5c:b3:
                    be:f8:d8:92:12:16:f5:a1:95:64:52:69:39:32:97:
                    0a:5f:c8:7d:be:72:b3:5d:08:89:27:c4:07:08:59:
                    70:30:39:4b:3b:4a:ec:17:d3:e4:02:75:83:93:a9:
                    23:6e:8c:99:9b:68:9e:09:7b:6d:64:6c:9e:d4:81:
                    26:fd:9b:13:0a:2c:4a:2e:88:b5:c8:d4:79:e9:7a:
                    45:b6:8a:45:28:ee:fd:42:9c:bb:69:a9:91:59:ea:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:06:6C:80:66:4D:2C:0B:60:9A:14:57:6F:30:3C:9B:86:39:BD
            X509v3 Authority Key Identifier:
                keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:47:1c:d7:65:50:d7:99:d8:68:a3:5d:4e:4f:1b:23:ac:
         7d:46:86:ff:64:aa:20:b5:fd:b7:9d:18:0c:70:18:cd:07:1e:
         6d:eb:bb:26:b3:29:9b:16:8f:bd:79:3a:a8:af:55:08:c2:fd:
         60:69:ba:e3:75:0a:c1:00:83:a0:63:2c:22:8d:cc:94:b9:0b:
         c3:a5:67:24:7b:b1:f9:0d:06:3e:86:1f:e4:ba:52:62:28:8c:
         4e:8e:12:de:2e:74:5c:b3:b8:6e:d4:42:da:8f:1b:54:f2:b3:
         f5:71:b7:53:49:0a:e4:85:62:1d:32:1c:8d:9b:55:32:7d:bc:
         14:b7:9a:ae:03:01:cf:03:2b:cb:d5:19:a1:99:c5:1f:9a:96:
         11:6b:68:5a:25:ba:07:c7:a7:e3:67:98:e8:d2:a2:ea:9a:e6:
         2b:a9:88:72:7d:cc:a4:47:6e:a3:0d:21:03:0b:16:5b:06:42:
         5d:29:50:a6:2e:c4:a0:8d:1c:3f:43:54:04:0f:2a:f3:75:9d:
         47:6f:1b:23:a3:5a:94:00:64:97:10:d3:ac:c9:d0:76:f3:1d:
         52:ab:23:aa:14:d9:c5:99:84:ed:02:ab:d6:4f:ec:12:54:3c:
         d5:7c:72:f1:cd:60:f8:16:ef:8e:1d:2e:50:40:a1:e7:bd:8f:
         60:65:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----