Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File:                     Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier:          arBV7SawDsrMnZL9jgCsuoX8Qp3C5UqmQamKtGNtyOg=
Subject key identifier:   DC:E3:C8:70:D7:40:89:9F:39:4B:CA:C0:76:37:E7:E9:F0:12:68:86
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer:       /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial:       01962E61E51BDC66B6E3127DBCE8B9BE69F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number:          081F
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
                          2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: fyvhQ0SuDnayZ5H63+yF8cRJm5/hf4eqr/0LpPTxxZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:1b:dc:66:b6:e3:12:7d:bc:e8:b9:be:69:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=dce3c870d740899f394bcac07637e7e9f0126886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:3f:52:4b:c3:e4:db:46:f9:7b:f1:fd:44:
                    96:71:fc:64:6b:01:cf:14:20:00:9e:98:7c:75:28:
                    93:0c:46:85:ff:93:c2:2d:fc:e4:f0:1e:5f:ad:a2:
                    14:a8:44:cc:3c:8e:d4:19:67:ce:ac:c1:b8:0c:6b:
                    3c:fc:14:28:97:63:26:9e:a3:73:2d:8d:d6:4b:e6:
                    31:3e:f2:a8:4d:0c:c0:94:07:b2:6a:0c:98:3f:73:
                    42:30:87:1e:4c:4a:b0:6a:8a:4e:f3:55:fc:94:b5:
                    60:73:27:0f:bb:70:81:2a:75:c7:33:e1:d4:e7:74:
                    93:ec:77:02:10:7a:d3:bc:99:0b:72:82:d2:59:55:
                    82:a5:c0:30:1f:99:56:f5:09:2f:6b:66:da:97:f5:
                    04:3a:74:04:9a:e2:2d:0d:31:f1:a6:61:ce:c8:ee:
                    92:08:b6:d6:b6:d5:69:21:b8:6a:4d:80:79:4d:46:
                    e8:09:05:28:43:48:65:d8:0e:14:83:3b:04:e8:fd:
                    a6:fa:fd:b2:ab:b0:09:90:34:2d:a7:0a:d6:cf:6e:
                    65:74:8d:58:66:a3:0f:70:be:0f:a8:98:67:1b:7d:
                    39:58:5c:d0:53:73:ed:0e:2f:c7:e4:f6:7a:b7:8b:
                    1e:92:d1:ad:b7:bf:2d:d3:10:bd:97:09:8e:74:20:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:C8:70:D7:40:89:9F:39:4B:CA:C0:76:37:E7:E9:F0:12:68:86
            X509v3 Authority Key Identifier:
                keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:11:31:91:03:04:6b:72:c0:06:08:39:bb:c3:11:ea:8b:e7:
         eb:84:9f:db:4b:0d:3a:2c:5d:43:fa:05:c1:0e:b6:51:03:f5:
         0c:ae:c1:b0:6b:b6:3d:a4:ef:80:e2:02:a9:c5:76:8e:92:9c:
         8a:7b:0a:56:d6:c1:a8:0a:3a:9e:42:8c:cc:7b:2a:99:a5:49:
         72:e4:26:6b:7f:35:4f:d2:3c:b9:0c:27:8c:ea:2b:4b:88:02:
         25:d0:6a:b7:da:78:15:27:68:69:8f:1d:e0:f4:e1:d1:6a:5a:
         fb:b9:49:8d:0d:4a:d0:4b:d1:4c:a1:21:ea:5a:b4:7f:db:ae:
         ea:32:d9:f3:89:eb:20:a4:04:ce:83:8e:51:08:ac:ec:77:fb:
         47:ec:4e:b8:a2:5c:f7:18:17:c7:92:f5:71:bb:f5:66:2a:02:
         a1:06:cd:07:b1:2a:b8:06:dd:91:36:92:eb:9e:97:e5:3a:69:
         84:72:24:d2:78:0a:da:c8:96:8e:eb:93:17:9e:9a:2e:f6:62:
         87:00:d7:31:69:75:7b:4f:bc:fe:ed:1b:71:12:e5:6d:56:17:
         37:f9:f4:29:72:bb:86:b5:2a:e8:53:ac:f1:e8:5d:77:d1:bb:
         4a:4b:f3:23:ed:6f:73:28:49:d1:cf:2f:11:67:f2:a7:a1:a3:
         00:8a:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----