Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File:                     yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier:          dRqVdXo/o1b39vGzwCM8xLoJ1mnO/XHeZ6u+pvu+yR4=
Subject key identifier:   29:61:A2:33:C6:FC:30:07:8B:09:C4:C2:A1:97:AE:28:46:80:55:9B
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer:       /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial:       01962E2B03E17374F4C6D8E35C7ACFD0BD61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number:          115C
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
                          2: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
                          3: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: Fkf6WOMXoQevANQfrx7pURszhQ/rho9eFO8vkp4BaGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:03:e1:73:74:f4:c6:d8:e3:5c:7a:cf:d0:bd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=2961a233c6fc30078b09c4c2a197ae284680559b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:5b:c2:53:f8:a3:c4:d9:2f:3e:68:d6:8e:
                    4f:28:e4:8a:03:a8:5c:4d:42:64:33:53:df:e4:41:
                    31:eb:51:c3:5b:0c:75:f9:e7:4c:5e:24:f2:4a:af:
                    e2:00:44:71:32:e3:dc:50:03:11:f2:96:b4:ac:0f:
                    b7:25:4a:19:36:01:21:03:16:f9:45:9e:21:16:71:
                    4d:e4:f5:1d:9c:24:1a:10:bb:6f:8e:93:f4:c3:10:
                    ad:7c:ea:d3:c1:c3:cb:d6:ed:be:b7:37:13:f7:dd:
                    91:bf:80:47:b6:1c:23:23:de:a2:f8:73:38:9c:90:
                    27:f9:c0:9b:fa:90:38:39:71:43:74:0d:d1:b4:d1:
                    28:ff:da:df:c5:05:69:27:5d:8e:e0:f8:5a:45:c0:
                    13:98:e6:a5:64:89:ad:37:fd:24:cc:84:24:2b:86:
                    c3:fc:8b:f8:02:7d:a2:7a:c4:f9:5d:71:d1:1c:d0:
                    95:37:62:c6:a4:22:a1:81:a9:66:f8:1b:57:d8:2e:
                    72:16:69:76:9e:8c:46:a2:a4:f7:b6:16:3c:b3:e8:
                    57:21:18:92:75:91:a9:43:67:f5:b5:7d:6a:76:fe:
                    90:ba:fd:4c:86:70:95:62:70:b2:15:78:32:70:35:
                    61:ad:fa:63:32:af:c4:30:40:77:b8:30:7f:96:0d:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:61:A2:33:C6:FC:30:07:8B:09:C4:C2:A1:97:AE:28:46:80:55:9B
            X509v3 Authority Key Identifier:
                keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:9b:6f:60:e8:0d:dd:ee:54:6a:34:be:2d:df:24:ae:f2:
         d2:90:66:fd:e3:7b:40:c2:78:1d:1e:4f:2e:96:81:b5:85:1f:
         9d:53:68:85:07:c2:2e:a6:5c:32:f4:ce:60:7a:de:5d:3e:78:
         04:ba:13:9c:ef:8c:ad:a0:63:20:9f:43:06:41:1b:62:2b:4f:
         50:60:fc:e5:07:8b:80:13:58:1c:87:4d:d1:62:1c:a6:6e:6c:
         7a:92:26:49:54:26:7c:c3:ef:e7:72:67:7d:a3:be:09:89:73:
         28:1f:a8:87:84:21:8e:30:1f:8f:0b:e6:8e:a1:0c:be:d6:bb:
         76:ff:b5:12:b2:73:32:45:1a:57:6c:d1:ac:39:98:f1:bf:38:
         5c:02:5d:38:03:bb:2b:67:b9:10:ec:86:71:23:a1:46:da:f3:
         d0:bf:a4:f4:38:dd:a5:a4:c1:a1:93:fb:10:e1:08:13:5b:80:
         64:dc:81:cd:96:ae:86:9a:fe:da:ff:34:37:9c:c0:b8:a7:24:
         16:48:f6:ad:bd:16:61:29:e8:b6:6e:37:a4:7a:05:ce:97:d0:
         01:44:2d:da:bc:33:4c:a6:23:4a:a6:d7:62:6f:7f:ac:b0:c9:
         a0:c4:11:fd:39:8a:cd:0e:43:81:38:dc:ea:02:61:c7:a8:23:
         be:59:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----