Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          FPOGicZQT6QoZDNBzJJDsf6/Rdd4qjGokAmVY1eYlEA=
Subject key identifier:   D9:71:A8:A3:FD:B4:7D:A5:5F:47:36:B1:5A:FE:13:3B:B7:68:61:B7
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       01962ECF7F226BA13D0023962E8C8BDF2598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          046E
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
                          2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: s3DLK6SSD0fh4Gy1cTePNJJ5CCk1Tph3wjy2O62eHMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:22:6b:a1:3d:00:23:96:2e:8c:8b:df:25:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=d971a8a3fdb47da55f4736b15afe133bb76861b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:d6:a3:c9:84:8c:25:47:3a:13:bf:56:53:
                    4d:e9:ad:63:b1:83:99:1d:29:0f:e0:d5:c9:75:60:
                    c1:d5:81:72:4f:27:47:1b:dd:67:bc:20:7d:ef:09:
                    d6:30:c8:b2:7f:8f:87:67:de:ea:36:dc:92:a8:7e:
                    b6:81:5e:05:2c:d6:69:81:a2:fc:eb:b8:a4:35:cb:
                    1a:72:c2:76:f2:c2:84:f8:b3:82:27:b3:b1:a5:78:
                    91:27:05:14:f3:2b:ec:2d:4f:c3:a0:63:d3:1b:f7:
                    b2:df:72:02:09:4a:24:e9:d6:65:50:b1:58:b3:4d:
                    cb:2f:d7:08:f4:4b:df:97:84:a9:32:3e:ef:84:b2:
                    67:25:54:53:90:c6:0d:bc:d3:6a:e0:36:f6:c5:59:
                    a7:93:8f:ea:1e:0a:44:15:84:a6:ad:00:ae:85:97:
                    f7:15:37:9a:e5:20:d2:a6:cc:82:b9:ce:da:a2:69:
                    bf:cb:c7:33:80:dc:14:31:c5:d1:04:cf:13:2a:fa:
                    d1:ae:69:94:7c:1b:f5:27:3a:e7:3b:16:73:94:a8:
                    01:8e:51:97:8c:e2:c7:1d:c5:00:b2:41:c3:bb:22:
                    de:e1:23:b0:7f:f7:fa:7e:22:12:50:74:f3:ec:3c:
                    ca:60:47:d9:9d:1b:c2:4e:1f:83:45:11:63:28:95:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:71:A8:A3:FD:B4:7D:A5:5F:47:36:B1:5A:FE:13:3B:B7:68:61:B7
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:22:54:df:8b:c6:c1:65:0d:0b:07:9f:14:3f:f6:2e:28:aa:
         2f:6a:fa:52:ad:0f:a0:29:a3:bb:6e:a4:33:f8:6f:13:44:03:
         36:27:05:b7:04:6b:ff:bf:50:8a:8e:82:94:19:41:95:60:64:
         3d:e7:d8:65:77:04:7c:72:46:3f:01:a0:42:65:b7:5b:25:41:
         1d:99:75:fb:8c:13:f9:39:fc:0b:58:2e:6d:7a:e6:07:3a:3f:
         a1:64:1a:57:51:68:4b:72:56:59:49:45:c5:01:fb:09:a7:09:
         bb:02:a2:26:8a:75:90:97:8a:2d:72:6b:96:4a:57:a0:5f:65:
         60:59:28:d5:74:26:cd:3f:13:64:4c:fb:ba:bf:1d:e9:a5:3c:
         76:5c:e7:dd:53:5a:3a:44:58:29:b2:9d:ed:1e:11:df:03:4e:
         5a:b1:04:d6:29:2d:5e:4b:0a:78:e2:7b:7c:79:9d:6f:7a:3a:
         fe:f2:0a:1a:6c:44:05:d1:b8:7b:71:f2:bf:0e:44:a2:05:bd:
         29:94:73:fa:df:ea:2c:13:59:8c:ff:8b:df:40:8f:17:cb:ab:
         b0:de:70:7f:a3:a5:8b:35:90:a3:b8:fa:01:74:24:34:e5:02:
         84:6f:d6:72:ec:5e:24:7b:68:34:81:28:e8:66:2d:25:94:20:
         1a:e2:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----