Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File:                     YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier:          EDy9pnS2XvuZJ4B+aLjFy6pCM4h7xbq0g3ozkCmIbj8=
Subject key identifier:   D5:AF:E3:35:F0:C6:26:C5:5A:55:19:97:5D:F2:11:FE:E2:08:68:8F
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer:       /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial:       01962F3D76DD9B0B869DCB7156FA03743655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
                          2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
                          3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 1gvpavlREOQ3atzIiq55SM6F7lsr7X2mNUZBeD93dQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:dd:9b:0b:86:9d:cb:71:56:fa:03:74:36:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=d5afe335f0c626c55a5519975df211fee208688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:13:db:12:4b:b5:1f:0b:49:ed:08:13:e3:
                    7e:02:21:30:d5:0b:ff:f7:d0:3c:12:5d:af:bb:cc:
                    15:c9:f4:7b:2f:a5:a9:56:04:72:e2:9b:7d:da:33:
                    23:d6:7b:87:63:e1:08:53:72:07:41:7a:7a:23:05:
                    e4:1b:e8:44:61:59:d3:c8:cf:3d:2f:df:0b:82:25:
                    93:d1:e0:d1:4f:93:d5:74:33:ee:d2:5d:c1:08:ce:
                    05:e1:3d:1d:52:25:9c:1b:9b:24:ab:0b:6e:fd:d5:
                    71:b3:15:f3:87:a2:2c:2b:fe:94:ac:82:a8:dc:fb:
                    37:04:52:37:7c:27:03:59:a3:55:19:db:e3:f9:81:
                    c8:14:9d:fd:ef:32:a1:5e:f8:53:fc:b8:c4:68:56:
                    01:e4:8d:21:e8:7f:17:9f:42:88:1c:ef:02:d0:e6:
                    6e:f9:e8:15:8b:19:60:89:82:73:66:60:5a:0d:84:
                    ff:17:a1:9c:f7:99:66:02:02:b4:f3:5c:71:7e:26:
                    c8:80:13:4e:5f:2c:e8:a9:42:1e:95:4b:78:1b:16:
                    b5:6f:56:49:c5:59:ae:38:ed:b0:1a:db:db:4e:4a:
                    a6:f6:b3:ee:c8:40:df:63:5c:ab:bc:fc:ce:cb:69:
                    f7:a1:67:87:1e:cb:f6:c7:ea:5e:20:3e:b2:4d:b4:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AF:E3:35:F0:C6:26:C5:5A:55:19:97:5D:F2:11:FE:E2:08:68:8F
            X509v3 Authority Key Identifier:
                keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:26:05:a5:ed:09:9f:08:73:a8:74:ac:13:b1:60:93:54:d9:
         53:a6:91:fe:08:23:7d:14:c0:37:fa:03:1e:e3:b3:6c:73:e3:
         e5:53:23:a3:02:b1:30:b7:36:a7:0b:1d:b9:19:70:db:dd:70:
         15:ea:e0:42:49:6c:c1:71:a6:8b:f6:13:eb:19:a6:59:ea:5d:
         b6:9e:01:d3:7b:b9:d8:47:f8:57:0a:b3:00:d6:28:56:f0:29:
         ab:da:90:bb:c3:e7:a8:57:27:02:86:7e:c5:c8:80:51:c3:91:
         a9:8a:c3:0a:b2:65:29:31:3d:8b:c8:a5:2e:84:54:1c:58:67:
         87:8b:d6:a9:62:18:db:48:28:51:e8:e0:c7:ff:81:b5:dd:39:
         1a:1f:4f:52:35:fc:fc:34:19:fb:5a:78:8a:56:3a:7f:96:e0:
         5c:d9:94:89:d7:33:26:b2:72:0f:48:2d:c3:64:17:ed:b9:18:
         dd:69:bc:94:bd:01:6c:bb:a7:27:48:42:7c:00:5c:43:88:1e:
         98:04:76:32:f6:57:99:d2:ca:57:ee:6d:04:e2:1a:fd:a4:76:
         70:ea:df:5c:ea:c9:3a:3e:14:a6:a9:de:ef:f1:b4:e4:99:87:
         59:a1:f0:d8:2e:d3:53:32:53:b5:9f:88:0c:82:f1:e5:6a:6a:
         02:41:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----