Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          305DAVT28ytztlQ4puqodxra/qeLyLi9O8Gwz7jrAUs=
Subject key identifier:   1F:39:BF:4D:6D:C4:55:4F:F7:8E:B1:58:37:E9:84:A2:D7:85:22:F1
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       01962DF42E6DE7570001B9242B463FBCDD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          1528
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: Ere2qliMwsAC5KlCxwkcYGwt5bg.roa (hash: uxdOngJ08K0JSktJRzPCcc2dPJBM0mtYJ7R3h3Dejrk=)
                          2: TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa (hash: xdJre5WYs0QeN/1xP/iEZblWiapiREglW6GQPHWgPiI=)
                          3: Xq12P6tXeEeUMBB6kcjmgXhEej0.roa (hash: jxewTMw/oZOuWYDAJOe88VwsOlwuyR4p20QDx4vY/Ek=)
                          4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: 06baJG3ywxfSdtiCy1xtaZuFR4gU3j0XIKC8SSYzytI=)
                          5: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
                          6: kNG8doC8aOlVcpdzC4H8wIke8-4.roa (hash: RhzxZTrYI5RS5OoyTDGpnX6oHuBHa87akNaFgCcYhjo=)
                          7: qaon0_VUrQ1CtM8ujS3h5z-HyYE.roa (hash: QjdBf8u7Dl0e5x76/XhPz/FbSF5qqjpq22dycf6FL9w=)
                          8: zya-nVnvYDRCe-NCa3yWVbEp98k.roa (hash: YAuOnGIJzSzoCT2LI34mrWSk3/Q4ZvQVKTNwjixKRhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2e:6d:e7:57:00:01:b9:24:2b:46:3f:bc:dd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=1f39bf4d6dc4554ff78eb15837e984a2d78522f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:d3:e8:ab:d4:a9:72:9d:d7:cf:6d:21:b4:
                    bd:bc:af:bb:1d:9c:d8:2b:cf:f1:5e:de:a9:c4:47:
                    cf:65:7d:04:f7:fa:bd:2d:60:cd:da:ed:7a:2f:0f:
                    7d:a1:85:ff:49:c0:17:e6:76:0a:95:9f:58:fd:65:
                    54:ac:cc:ba:01:f6:8b:2a:58:85:87:5a:8a:10:dc:
                    ce:6b:c5:36:65:72:06:3e:2e:50:6b:1b:d2:97:39:
                    25:54:5d:90:22:83:49:07:bc:cd:3a:1c:d2:03:95:
                    4d:ab:ae:7a:4f:f3:a8:91:e0:53:d3:40:c1:86:f8:
                    10:d4:2f:34:2a:a5:85:2c:52:ff:73:d2:8e:c3:cd:
                    4e:4d:03:d5:5c:ab:7f:02:fe:df:c8:0f:2d:a9:4f:
                    49:da:83:a7:4d:f9:2c:7a:b0:93:85:74:03:36:77:
                    0e:6a:35:cf:35:a6:27:5e:27:cf:16:33:7c:76:ae:
                    00:cd:46:cb:44:78:69:79:e5:01:dc:3f:d7:cd:e9:
                    06:4c:cc:82:7f:2c:ab:f7:aa:f5:91:10:24:db:c4:
                    b2:7c:a4:37:d4:9a:3f:41:8a:58:ff:e7:4e:f4:a5:
                    7f:64:a0:18:2d:0e:54:b5:f8:55:30:d9:82:e4:b0:
                    36:bf:d7:32:fe:bb:dc:52:e7:09:46:8c:03:41:d3:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:39:BF:4D:6D:C4:55:4F:F7:8E:B1:58:37:E9:84:A2:D7:85:22:F1
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:19:a1:1f:0b:54:9c:35:0b:6c:6e:96:48:c1:9a:aa:c3:4a:
         35:6d:5b:9f:2a:c3:c9:54:a3:fa:fa:7a:b9:71:d8:d5:ba:27:
         71:4a:40:95:7e:b6:41:8c:26:66:ba:9e:6d:2b:77:ce:7d:a2:
         1a:b9:35:48:d4:e3:a8:d7:6e:bb:d6:09:a0:46:15:f7:26:1a:
         b6:87:27:e4:9b:36:8e:df:ec:17:f7:8a:0b:6a:1b:4a:8a:e5:
         d4:10:ee:56:7b:a1:4c:cb:c2:c3:b4:62:8d:3e:c4:f4:f5:ff:
         8c:58:3f:b5:d3:d1:85:d0:ed:46:c9:ca:ea:a7:50:ba:15:3f:
         04:4c:9b:af:57:b1:96:eb:4c:34:a4:c6:55:16:1f:be:a8:cd:
         2f:5d:03:10:6d:72:e1:79:0b:5c:fa:ba:c4:fb:fd:52:f3:58:
         c7:fe:13:34:e5:b5:b2:30:3e:16:d4:bf:38:fa:65:1f:aa:ef:
         a1:d3:23:c8:47:9f:b0:19:fc:ce:95:34:c0:7c:35:47:af:fc:
         8e:d7:28:3d:48:20:18:7d:25:64:39:07:01:b9:94:20:04:9d:
         b1:ed:21:79:a9:da:84:7f:21:64:ca:db:2f:44:83:60:5d:82:
         89:19:de:e1:8d:1a:47:0c:4f:0c:9b:68:c5:81:ef:da:93:88:
         33:e4:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----