Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File:                     Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier:          PZKCv52g1gk7EQ+bZBLFBqliQL0bozGruLjPohz+qXk=
Subject key identifier:   84:BA:5D:4D:57:C2:8F:04:BD:6F:B1:33:E6:CF:48:61:5B:74:B6:A2
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer:       /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial:       01962F0728F51883C551BEC57EE24275744D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number:          08FA
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
                          2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: JIBq1yok8JqrIWGecccdmF74AHsQro1//AlC8XOr1H0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:f5:18:83:c5:51:be:c5:7e:e2:42:75:74:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=84ba5d4d57c28f04bd6fb133e6cf48615b74b6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:76:e0:ee:67:ff:96:48:f5:af:59:67:53:
                    20:4c:e5:dd:58:b7:3a:79:35:15:1b:c7:7a:60:1e:
                    b6:5b:d1:c9:00:7d:23:6a:b9:1a:68:bc:ec:1b:86:
                    26:f6:a4:7d:17:3a:4c:dd:64:3f:b6:da:88:60:be:
                    9d:76:66:77:c6:32:e2:33:2d:f9:75:d2:0f:76:91:
                    8a:a1:b4:f2:f8:ba:fa:4d:4d:78:e7:c8:66:62:a5:
                    0c:8a:7e:24:4f:8e:29:23:78:b2:71:04:54:7b:2a:
                    b0:54:de:00:4a:55:0b:7b:2b:0c:eb:e0:5b:1f:79:
                    dd:d1:f9:bd:82:1e:79:c7:2e:e8:f7:67:a6:28:8b:
                    e3:35:c9:30:af:56:35:84:0b:90:50:0e:0c:31:72:
                    ca:59:7b:84:19:17:2e:c9:4c:71:f8:0f:84:8d:38:
                    65:09:d2:f9:e0:cc:b2:70:ee:8b:3f:9e:f5:c6:34:
                    c1:56:1b:2e:0d:25:ad:8f:26:08:4d:93:d2:7c:05:
                    bf:83:ce:5c:db:54:3f:6b:38:91:ff:de:0c:03:79:
                    e4:49:d7:ad:9f:8d:69:84:7c:55:d9:bf:86:7a:9d:
                    b3:b2:6c:c7:09:ea:0b:0e:21:ca:b0:01:f0:62:71:
                    77:14:6a:fb:05:b3:63:0c:56:b1:26:ae:ae:d4:85:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:5D:4D:57:C2:8F:04:BD:6F:B1:33:E6:CF:48:61:5B:74:B6:A2
            X509v3 Authority Key Identifier:
                keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:84:b0:5d:3f:9d:0d:e7:d5:bb:da:ce:0f:56:96:3a:a7:43:
         b0:b3:ae:58:fd:85:92:84:11:7c:a7:90:ef:bf:04:14:a6:0a:
         9a:43:92:78:f5:42:c0:fd:92:3f:96:46:7c:56:bf:3e:7d:75:
         93:b5:8f:f6:d1:16:e5:be:f5:ae:5b:3a:fe:66:1a:a0:9c:ec:
         41:46:ee:ef:31:45:8b:d6:47:a9:a9:1f:de:95:a0:7e:bb:e4:
         e9:af:a5:43:fc:96:18:dc:e5:76:4f:10:3c:a7:74:d4:98:c4:
         5e:8f:e3:39:dc:c9:95:75:06:bc:f6:0c:59:0f:6c:91:cc:af:
         fb:f7:69:9d:c8:2e:65:a0:6f:d2:d1:8e:75:6b:c8:87:7f:b5:
         c2:a0:94:ae:3e:b2:cd:87:eb:8b:2f:37:22:17:c0:c1:a1:67:
         b8:6e:70:a8:b8:06:13:22:c6:51:b9:15:77:53:b8:34:2f:e0:
         3d:7a:9e:86:ab:81:ef:d7:ff:1f:2d:e0:9a:a6:01:73:55:5f:
         07:aa:11:31:3e:cb:3f:5f:1c:13:c8:09:3b:14:00:dc:fe:9c:
         48:2e:f7:c4:16:7c:12:4f:b1:fe:3e:dc:90:7a:da:3a:79:24:
         81:7f:21:3c:ff:a9:41:61:b9:e4:65:3b:6d:2d:c0:ed:11:49:
         fe:90:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----