Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File:                     YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier:          fkdmUXUIiiKFADyM/6wBZ37NDagdlaUzP4sX3TkgZYM=
Subject key identifier:   CD:F0:90:D8:2F:05:B3:B4:BA:20:F5:C6:89:10:5B:1F:1D:A9:0A:43
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer:       /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial:       01962FAB8F72BD1C9BAB3090CBAA1366C3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
                          2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
                          3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: WdzGsNT7uFzD61HfSvEEUgfvOcuSYRYQEXhMTSHDW84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:72:bd:1c:9b:ab:30:90:cb:aa:13:66:c3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=cdf090d82f05b3b4ba20f5c689105b1f1da90a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:62:c1:77:3a:8b:23:20:79:05:9f:68:f9:
                    23:4c:e3:4f:ea:ab:28:30:2b:1c:ec:68:a2:2a:9c:
                    df:ba:4f:1d:ed:a0:34:4f:b1:c1:bb:72:ea:b4:1b:
                    41:f2:61:13:ca:20:a6:c4:05:8b:0e:e9:c5:dc:88:
                    29:33:48:6f:90:76:e3:bf:a8:7d:84:b0:96:e5:1c:
                    7c:3f:ae:3f:18:f8:28:ea:e9:8d:ed:4f:9c:33:7e:
                    21:a9:cf:07:01:90:9f:ad:8b:39:8c:09:09:3b:f0:
                    ab:ec:09:d7:c4:1b:46:dc:3c:6a:b6:25:d1:c9:b6:
                    17:a5:31:6e:8d:d0:a7:ee:cf:f3:92:f9:8f:b0:0d:
                    bf:73:bb:1e:d0:ea:07:32:24:b3:e3:b9:be:88:65:
                    11:fd:54:b1:27:30:45:fa:6b:e2:98:aa:42:ab:a3:
                    cc:9d:52:fa:38:31:f1:f2:7f:2b:a5:e2:88:b0:54:
                    a4:dd:9a:03:d4:8e:c9:b8:b5:33:0e:f2:71:da:62:
                    ec:d0:e7:34:a8:f5:a8:09:a0:48:22:3c:ab:e4:ca:
                    b7:f8:1c:0d:49:28:54:15:91:05:34:10:c4:e9:ff:
                    46:bf:74:30:04:a9:25:8a:3e:26:ce:b6:e7:c5:df:
                    4b:c6:09:17:66:ea:33:8d:24:c1:79:89:68:51:a4:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F0:90:D8:2F:05:B3:B4:BA:20:F5:C6:89:10:5B:1F:1D:A9:0A:43
            X509v3 Authority Key Identifier:
                keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:eb:78:2f:c8:67:e8:3f:8c:95:6f:34:82:db:63:2f:cb:07:
         a8:fc:b9:0a:92:11:8d:a4:53:f9:19:46:49:d9:00:6b:9c:c0:
         bb:88:30:4b:83:23:90:18:6c:cf:80:37:e6:d3:70:4f:54:6d:
         af:3c:7d:cd:ac:69:03:40:07:60:79:f6:4b:83:fb:2a:0a:0d:
         21:1a:c5:64:11:ae:be:19:49:65:45:83:77:4e:c6:52:be:4e:
         f6:94:a2:3e:d0:e8:fd:72:b0:3f:e3:df:bd:cd:58:68:4f:bb:
         09:ea:fc:d2:26:61:d2:f5:af:ed:89:49:e4:d7:15:3e:15:f3:
         78:f4:0c:72:30:31:bd:ed:52:e3:87:91:37:6b:af:88:ec:82:
         b0:a2:bc:78:21:9c:a7:ad:60:9d:af:1d:19:d4:1e:c3:80:d0:
         fe:fb:dd:0c:f7:88:1a:e5:71:74:83:5e:be:cb:08:f5:c8:bf:
         10:98:ef:14:fd:85:60:cc:2a:85:1d:25:34:4b:0d:a2:e5:ed:
         de:48:4b:8d:dd:b6:27:49:c3:9c:88:23:64:7b:83:a1:76:dc:
         da:38:1d:d0:68:4d:5f:2b:c4:e6:6e:3e:fc:3f:ad:70:0d:07:
         96:1e:e5:ec:c7:d2:af:7f:fe:ec:b5:4e:7f:0c:75:dd:13:d2:
         f9:b9:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----