Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File:                     Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier:          g8jrL2v+VYwL15ksWHZb5Gj940Kiy+lHO7JEdG/rF10=
Subject key identifier:   FE:26:EF:10:80:F3:21:51:26:2D:F8:7B:D2:7A:63:3A:E0:55:63:B4
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer:       /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial:       01962E98DE5B04A21781096AC8D45B57CE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: 22LO2qpE5jtLpIBbzKR/yhDGMlYI/wibLYUksh9ixIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:de:5b:04:a2:17:81:09:6a:c8:d4:5b:57:ce:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=fe26ef1080f32151262df87bd27a633ae05563b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:7a:8b:f7:f5:10:af:21:7c:71:57:e8:32:
                    fa:9a:e2:77:29:02:de:c0:c5:df:c5:f2:5f:b4:b8:
                    ff:9f:83:a8:bf:4b:13:82:49:a3:26:0a:ef:e7:cc:
                    41:fe:c8:6c:4c:00:09:58:d4:9d:7e:d3:b4:32:59:
                    e5:d6:1d:55:c3:3a:f7:0f:18:dd:c0:41:84:f0:b2:
                    23:bf:2e:35:b9:c7:21:76:6e:00:c9:3e:f6:ab:a6:
                    49:73:5b:5c:43:9e:33:75:19:5c:af:3a:e1:56:df:
                    17:eb:23:61:cf:75:e3:38:e1:59:1f:7d:02:7d:73:
                    5e:aa:48:16:9f:23:b7:9a:02:35:ab:48:9c:7f:ee:
                    69:fa:a6:d8:43:c3:27:85:f8:f0:c5:b7:f0:1c:fc:
                    46:3c:66:cd:83:14:43:e9:b5:42:46:c7:dc:c0:21:
                    e8:82:59:43:40:ac:e1:a0:37:78:48:9d:aa:aa:8e:
                    40:2d:13:8b:fe:8a:25:1f:b0:b2:ae:69:4f:20:5e:
                    c4:ae:1e:14:4d:c5:09:85:2e:37:12:48:5a:71:0f:
                    97:66:4e:f4:46:00:54:0d:40:2b:8d:84:d6:4c:94:
                    c0:d9:ad:8d:bc:4f:98:ff:f6:39:64:c7:63:b7:69:
                    fb:1b:8d:5f:35:f5:9e:4f:2a:a0:61:1c:5c:cd:80:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:26:EF:10:80:F3:21:51:26:2D:F8:7B:D2:7A:63:3A:E0:55:63:B4
            X509v3 Authority Key Identifier:
                keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:2c:3f:ed:a8:5a:ce:bb:18:ac:7e:33:c5:1d:58:de:15:
         b7:0b:81:61:f3:ed:8d:70:3c:5a:7a:f5:45:90:46:b6:c7:8a:
         60:64:7e:82:97:cd:7a:a4:7b:4d:24:14:d0:22:67:94:ad:bf:
         67:b2:16:25:9e:b0:70:c0:16:c8:3d:0a:ab:8a:33:ed:ee:a0:
         38:d5:ae:40:c6:81:2e:18:1b:a6:88:a5:2b:ab:19:31:fb:4c:
         29:7f:4b:9e:7f:b3:b0:d2:0a:7e:83:54:e5:cd:b7:74:aa:62:
         2f:e4:34:e8:3a:31:e1:f5:64:d3:e0:9b:e3:69:cf:29:35:e0:
         91:36:d7:bf:7f:f0:fe:8f:12:e3:2f:ec:0e:57:d4:72:b0:86:
         70:38:8a:cc:de:6f:6b:0c:fd:46:a6:d3:20:21:f2:7e:b3:6c:
         00:d8:e2:2a:15:e1:90:d8:3c:c7:78:3c:d2:93:b0:2d:df:42:
         79:47:80:b0:fe:aa:cb:7b:8c:da:44:ce:b5:5a:92:2a:ac:56:
         ab:23:bd:00:15:32:ff:d7:7e:c8:bd:20:e3:9b:d9:d9:47:b6:
         ac:dc:c5:02:43:8d:a8:a0:4d:60:bc:08:29:f6:27:ef:48:8e:
         85:1a:29:b9:2a:1c:af:45:19:c5:7c:bd:e8:a0:b0:ed:24:25:
         01:1a:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----