Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File:                     ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier:          Oc8JxN22R1sr+HQ3N9FuFcUxb7EczXhX/scd2OWBdio=
Subject key identifier:   75:B0:92:EA:8E:57:55:62:85:FE:07:F4:8D:E2:3E:0D:87:FF:77:FF
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer:       /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial:       01962DF3D2B7090109C835D39FCF56722ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: NA5mgzoDK6jbbKh48XeliWtbDYM.roa (hash: 9nIV3wU01lTdftDhSQVjEb+D2h3DXok24aEDQGNAM3o=)
                          2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: vNtxfGm+w0fkukrCZOJ1ZeXdxJEOYuw0YrrNlHpGu5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d2:b7:09:01:09:c8:35:d3:9f:cf:56:72:2e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=75b092ea8e57556285fe07f48de23e0d87ff77ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:c4:c1:0f:23:70:3e:7a:5e:2d:a9:cb:b0:
                    69:14:65:1f:bf:f3:a6:47:0c:59:71:28:24:64:c8:
                    f9:75:34:2b:8c:09:9b:0f:36:2d:a7:12:36:20:71:
                    03:f7:d2:1d:0f:c9:91:67:f7:5a:bb:e4:6f:17:92:
                    80:b0:32:17:75:be:c3:bc:8a:0c:e0:63:48:7c:7b:
                    7e:77:19:44:64:c4:db:9a:44:cc:f4:2f:cd:74:5e:
                    a1:5a:bf:65:6b:62:30:d1:c4:54:46:f4:af:37:39:
                    4c:35:85:53:3a:a2:63:70:ae:5f:c9:0e:1b:80:9b:
                    72:cc:bb:5b:3f:ba:b1:d4:8d:ec:bc:18:7b:60:ed:
                    82:72:3f:6e:c9:c2:5f:6b:94:60:7c:d7:29:e2:02:
                    98:ad:2b:e9:b3:e0:4c:82:fa:fb:d6:4f:26:2b:a3:
                    9d:6b:d2:73:29:98:25:4f:25:e9:aa:13:08:09:83:
                    74:cf:1a:00:bf:46:74:60:4d:a1:79:f3:f2:39:19:
                    e2:9f:c8:f7:8b:dd:16:26:df:9a:af:bc:74:f8:e5:
                    4e:91:82:7f:8e:c0:d3:cf:a5:50:cb:2e:89:d0:0b:
                    fb:60:f9:af:3a:b1:67:94:93:2b:27:ac:d3:84:50:
                    2d:69:eb:21:fe:cc:b2:ce:c9:d2:0e:3e:6f:c5:6a:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:92:EA:8E:57:55:62:85:FE:07:F4:8D:E2:3E:0D:87:FF:77:FF
            X509v3 Authority Key Identifier:
                keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:26:84:c2:e8:43:28:25:8c:43:4c:d7:d4:23:e6:3f:c2:a3:
         65:d7:34:b0:57:66:31:fa:40:89:e7:34:57:0b:10:78:73:d9:
         3a:c8:76:19:63:e0:25:84:54:90:30:55:65:52:4b:8f:89:97:
         54:4f:01:a2:f2:83:79:38:0c:f3:85:43:82:a8:53:28:6f:15:
         d6:8e:0c:7e:c1:1d:30:6c:90:d4:83:9f:4f:29:41:44:d1:c6:
         01:30:8b:8b:05:2c:b4:ad:19:ef:5b:0a:9b:43:e9:cd:45:4b:
         f5:6e:82:c1:2d:89:e2:f5:a4:83:24:26:fc:3d:17:cd:44:48:
         ea:31:63:a0:42:5f:37:c9:c3:1e:1e:4d:64:9b:9c:a4:ea:2a:
         71:9a:9a:c3:17:16:15:35:fe:3f:39:05:0c:73:dd:27:c7:0a:
         f0:87:49:f9:e0:41:89:79:82:d2:96:90:03:1e:88:26:a3:da:
         22:d2:73:10:82:e3:86:e3:17:32:f0:87:3c:ee:5f:68:27:4a:
         52:84:65:58:bf:0f:2e:db:a1:30:91:5b:15:72:41:60:d5:e5:
         fc:85:c9:84:31:40:8e:a4:c0:ea:4b:41:3f:af:c7:5b:b6:28:
         de:01:a8:bc:1e:f7:1a:43:ad:f6:6d:bd:58:3c:5e:eb:a4:5b:
         4b:a9:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----