Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
File:                     YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft (raw, json)
Hash identifier:          VcCBIaP5++5qoZ/vpOrbKVqLm3n8QxfhaWoiDqBAK4Q=
Subject key identifier:   2A:BE:25:60:A7:3F:41:90:03:17:A3:99:29:EF:32:EA:D5:F8:2B:B2
Authority key identifier: 60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Certificate issuer:       /CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Certificate serial:       01962FAB20F034EAC89C6B9E2616C21EC5B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
Manifest number:          0147
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl (hash: IT/O/r9E5SduI0HNGa+KOQNL/eXo01pEXq3WA7ft110=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:f0:34:ea:c8:9c:6b:9e:26:16:c2:1e:c5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=2abe2560a73f41900317a39929ef32ead5f82bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:a3:b2:c5:09:03:09:93:cb:5a:3c:8d:ab:
                    b3:63:d3:ce:f3:ac:79:a8:cc:65:2b:c3:63:e2:d6:
                    1d:7d:6d:ec:fd:89:2e:4e:e5:68:dc:f6:cb:9a:8e:
                    bd:99:3f:ea:a2:b4:7a:3f:33:1e:1d:74:51:c5:82:
                    e6:01:f4:47:5f:e4:2e:58:66:94:9a:cc:75:d9:b7:
                    e8:5e:5e:06:4b:7f:b4:f8:9d:40:92:4e:cd:a0:59:
                    67:95:b5:5c:7a:5d:ca:d9:68:da:2d:85:26:80:ea:
                    8a:18:bf:8b:85:9b:d6:2f:90:f1:45:0c:d7:b5:4d:
                    24:c5:25:a8:1e:f5:f1:64:23:7c:e3:d9:ae:2c:32:
                    22:94:05:a0:57:ba:2c:85:ec:b6:aa:46:56:a1:34:
                    d8:40:dd:96:46:d1:c6:a1:ca:3b:ca:ec:a8:60:1f:
                    06:c5:ca:45:08:ed:93:15:67:1c:4b:5e:b5:bf:86:
                    9a:41:f3:fb:75:f2:4b:66:52:e8:9b:6b:10:6c:1a:
                    73:25:0f:30:c5:e4:fd:4b:1a:d6:a5:79:3a:a3:4d:
                    62:5c:26:7f:9d:1c:ff:b4:02:b0:f1:19:f4:93:06:
                    ff:87:a6:95:17:ea:3f:19:69:0b:5a:65:55:5d:33:
                    63:c8:ca:1b:27:5c:c1:95:9a:4f:e5:1f:13:28:ff:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:25:60:A7:3F:41:90:03:17:A3:99:29:EF:32:EA:D5:F8:2B:B2
            X509v3 Authority Key Identifier:
                keyid:60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:f1:aa:79:1a:1a:b0:1c:bc:63:5c:75:b8:35:2d:a3:dc:
         f4:d8:73:37:f0:8d:40:cc:5b:f4:45:d8:be:8c:c7:29:d6:29:
         49:11:73:28:be:c9:2b:aa:2b:46:99:35:3e:b1:40:55:ed:b2:
         9a:c0:7a:1a:c4:57:50:da:d4:70:73:64:18:31:1e:4e:d3:af:
         5f:55:e9:b5:c1:2a:d0:91:64:a9:d8:37:e4:49:e6:9f:3b:42:
         d2:e9:4f:bf:cc:dd:b6:5e:b9:f8:90:f2:d1:6f:a2:4c:d8:bc:
         d4:b5:49:24:ce:e7:c3:aa:ef:9e:fa:44:8e:f5:5f:60:dd:54:
         56:79:c5:38:48:c1:e6:2d:1c:f7:70:74:e7:6b:51:9b:c6:cc:
         74:ae:94:b3:d4:ce:ca:ca:f7:42:09:df:53:02:39:29:81:81:
         e9:06:47:51:a8:ab:79:da:91:44:a9:d9:84:22:70:fc:15:00:
         a4:12:4e:55:74:1c:61:64:5e:6d:da:1a:03:e6:f9:35:e9:d0:
         e1:77:cb:19:cc:8c:af:7b:fe:7c:ff:e5:d5:62:a8:58:be:2e:
         8a:d3:65:d6:cb:c8:99:9b:3e:0f:6d:d9:7b:d6:80:93:df:b7:
         a8:cd:be:ee:e2:2c:94:ca:68:6e:58:15:32:2f:9f:7e:6b:5d:
         d1:f4:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----