Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File:                     YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier:          2g3Rx+mYGvwobuwedoRq+MRsXD8EraJwaE1hjutD1Nc=
Subject key identifier:   B6:D6:C5:CE:71:B5:06:D9:5A:02:ED:2B:26:8D:9C:F9:92:48:40:48
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer:       /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial:       01962E98FEFC9AD4DF49C0E7F4F2F391549E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number:          0506
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
                          2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: WfCWvVekjvWV6bl/MjkzOEAoOiPtcFXTGiudjKJeVIA=)
                          3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fe:fc:9a:d4:df:49:c0:e7:f4:f2:f3:91:54:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=b6d6c5ce71b506d95a02ed2b268d9cf992484048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:c2:7b:67:10:f9:07:5c:8f:42:b7:7f:02:
                    c3:6b:bb:49:da:c0:47:48:24:26:3e:5a:d2:16:96:
                    03:ce:68:c4:17:fd:81:57:92:72:96:95:3e:df:f1:
                    cb:f1:b1:d1:b9:53:13:08:df:8d:14:62:3a:9b:75:
                    68:e0:41:47:1e:6c:e2:d0:23:51:07:f8:86:b4:7c:
                    a2:4a:80:84:67:6f:ce:5a:cd:ca:9d:0c:20:0e:bd:
                    23:75:96:03:55:28:77:8a:27:bd:79:9a:61:bd:1a:
                    77:20:7d:8b:f9:a2:17:cc:db:6e:95:8c:da:7d:25:
                    6d:e5:74:7d:39:72:95:c0:f7:7d:79:69:30:72:78:
                    d5:62:de:cb:2a:04:88:23:bb:27:6d:3a:0b:a6:14:
                    bb:bb:92:c0:40:32:19:fe:c8:67:88:78:fe:56:b2:
                    f0:68:54:5b:e6:ad:b0:02:06:9a:69:f3:5c:e3:33:
                    73:51:63:c1:cc:38:a8:ef:e6:3e:e7:ac:50:0a:58:
                    c9:37:88:4c:a2:63:aa:73:26:2a:79:d0:79:9b:a5:
                    34:ce:eb:ca:7a:05:af:16:00:2d:4e:df:17:86:73:
                    65:79:68:ba:f5:d5:03:30:21:0c:54:97:23:f9:1e:
                    0d:18:7a:39:3d:01:f9:74:3c:23:64:a8:f1:9b:00:
                    c0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D6:C5:CE:71:B5:06:D9:5A:02:ED:2B:26:8D:9C:F9:92:48:40:48
            X509v3 Authority Key Identifier:
                keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:c6:97:5a:6c:2c:12:8b:48:ed:81:3f:90:4a:26:f2:53:
         b4:48:a7:f6:3d:7e:f7:29:0d:16:2f:26:02:92:f3:c6:bb:41:
         6d:a9:91:63:01:dc:bb:12:a1:ae:c5:f7:8c:e8:52:44:d1:a7:
         86:3e:3f:49:31:52:51:62:6b:de:11:90:f8:d7:82:16:4a:69:
         3c:c7:54:b6:9b:bf:d9:80:30:ef:f2:e3:64:92:83:99:cb:fe:
         32:92:6d:d4:38:cf:d2:79:25:01:8e:73:20:31:9e:6d:68:62:
         85:03:06:52:b1:b0:b7:3d:71:58:d4:4f:b1:e1:55:5b:2e:94:
         3c:2c:a5:44:5f:23:c8:6f:83:34:bb:a9:e6:96:e9:12:44:f4:
         d7:46:1c:38:94:9d:5c:23:9b:0e:40:13:1e:7d:98:15:36:b6:
         6a:12:1d:1b:30:4f:41:2a:2f:55:dd:83:90:f5:8a:1d:de:6d:
         ac:0f:73:c3:fc:f3:19:5a:5e:ba:37:ab:d9:14:4d:36:4d:f2:
         b5:1f:98:32:1f:e6:70:37:f8:e9:1a:c3:68:36:38:fe:ca:87:
         48:53:18:dc:02:08:b2:13:06:30:6c:de:9a:5e:36:67:af:67:
         f9:b2:cc:bf:ca:fc:c0:9b:c0:d8:cc:40:ee:6f:9a:b2:ef:f1:
         b1:6f:1e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----