Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File:                     yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier:          pFysptVPD7+ZqHZh4EniUtqxTJ1ejsif6zaE7PQP4Ds=
Subject key identifier:   29:83:24:0D:75:4F:1C:31:B4:0B:5E:12:68:2A:19:EA:F1:6B:7A:41
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer:       /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial:       01962DF408E4882187C07C89FD97369B7FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
                          2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: Dok3nKNob8JPf7RTRB5o+31hcRvqvAjcI3KnkLP/LnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:e4:88:21:87:c0:7c:89:fd:97:36:9b:7f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=2983240d754f1c31b40b5e12682a19eaf16b7a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:fa:d5:36:38:da:4b:66:86:8c:de:4f:b8:
                    5d:8e:2f:ce:a3:48:5d:33:88:13:b6:65:34:2f:d7:
                    02:d2:3a:e9:4d:fb:93:7b:00:7e:19:c9:1e:39:0e:
                    93:9e:75:64:4a:c2:68:cd:72:2a:28:85:2a:a2:e3:
                    9e:af:c7:a4:84:ca:79:36:87:53:de:03:94:19:9e:
                    71:aa:9b:f7:56:bd:9e:09:a9:a7:24:c7:40:5d:7b:
                    7d:37:3b:c0:49:e8:30:bd:56:f4:76:ac:23:d9:a9:
                    38:00:0b:d9:3d:1c:b9:96:a1:74:ff:b6:c1:15:52:
                    00:ef:02:52:e7:95:f4:fe:ad:37:dc:29:63:32:02:
                    b8:9f:a5:c8:93:71:86:85:fa:f2:86:ef:01:14:cb:
                    67:1c:d7:b1:48:9e:e3:ea:60:42:c0:ae:bd:6d:37:
                    65:c3:e9:fb:b2:ad:54:3a:af:7f:b8:dc:66:66:4e:
                    6e:a9:0e:5c:0d:06:3e:22:48:33:6c:63:29:d3:51:
                    f8:29:2b:9d:da:2e:92:15:4b:18:94:61:66:e4:08:
                    77:d3:30:a2:49:e9:ad:a5:d6:72:38:b3:39:81:a5:
                    10:08:71:82:03:2c:5f:75:cb:b4:68:2c:97:dd:13:
                    f1:77:8c:42:cd:3f:8c:94:8d:9f:3c:ee:dd:6b:c5:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:24:0D:75:4F:1C:31:B4:0B:5E:12:68:2A:19:EA:F1:6B:7A:41
            X509v3 Authority Key Identifier:
                keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:14:9d:45:08:50:b3:83:85:38:bc:e2:11:77:fa:c8:28:ad:
         89:72:a1:33:5d:db:1c:50:39:3f:ac:1f:5c:5a:88:43:e3:a4:
         45:53:21:99:d8:62:6e:20:46:de:22:77:6c:ee:50:10:b7:af:
         c9:08:0f:80:40:90:99:c6:b5:c4:db:a4:86:df:0e:98:85:35:
         7a:b3:d3:25:2f:7d:49:90:23:3f:a2:25:5c:b0:21:ed:2d:f0:
         8a:23:b7:89:ac:32:6c:40:c5:aa:bc:24:10:c7:d5:9b:a1:19:
         eb:59:17:db:b0:7c:5a:12:d5:e6:16:95:c0:d6:00:3f:a9:4a:
         9c:bb:af:97:8d:20:6c:ec:00:fa:f1:cc:eb:06:ce:08:d2:d9:
         e4:cb:f0:4f:25:4e:d6:03:ec:91:f2:f0:0f:b4:4c:38:69:0f:
         df:85:94:93:5b:05:0a:cc:34:f7:80:ad:25:38:af:94:55:91:
         f1:bb:76:b9:4d:ba:6b:72:d4:e3:8f:fa:f7:02:33:87:91:05:
         ac:6a:eb:7d:0f:2a:91:bc:86:b4:86:eb:36:e5:4a:8f:38:f8:
         f0:e8:69:b5:8e:09:26:b0:09:66:0c:39:4b:d6:a9:c8:e4:37:
         ea:93:f6:a5:29:54:88:ce:5f:98:fb:d8:2e:c9:f9:23:79:86:
         cc:86:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----