Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          Wx7DqADoUn7bZIVPRt7dNa+6RUCKoCiwEzWZsO5rCeE=
Subject key identifier:   7D:93:27:23:C7:B1:4E:27:47:E1:AB:D5:17:9B:40:E5:43:75:78:B5
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       01962F3D720BC4EFB2B735067D19756BB124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          58
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: iCASJufkL7y0bMUvn8IqLTzGPYE.roa (hash: INWHICniz6zWWSqMWPOuPOjMAKv1y3stcVV7r6T0Z4Y=)
                          2: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: iTzV3+LlbkHdeR2Eqx/B2l7ZabOnA/oUXpK4cLdX25o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:72:0b:c4:ef:b2:b7:35:06:7d:19:75:6b:b1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=7d932723c7b14e2747e1abd5179b40e5437578b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:e7:98:df:d1:f1:8a:28:07:c4:b1:b8:f7:
                    d5:24:e0:d8:cc:39:e7:95:a4:23:21:34:98:8e:48:
                    b6:44:d6:d2:ac:e9:e2:7a:1d:e7:68:68:e7:74:6c:
                    0a:c4:52:1a:f1:ce:7c:97:c0:7a:19:58:4c:9c:12:
                    82:a0:4f:87:40:91:69:84:d9:a9:df:41:e0:6d:ac:
                    f3:e8:94:03:e0:c3:c0:16:f3:63:f4:c6:d6:8f:d1:
                    45:11:9f:91:0a:31:ba:62:09:ad:8b:db:31:e1:2e:
                    7e:51:bc:32:01:43:5c:28:f8:b1:6b:23:0a:ff:ac:
                    10:0c:0c:ea:c8:19:cc:11:79:54:4a:a3:3e:70:f2:
                    d2:89:a8:e4:46:45:0c:d3:4c:97:37:75:ec:7b:01:
                    b9:23:c9:31:7b:5a:cc:1e:f3:34:7e:68:68:47:82:
                    1d:a4:92:91:7a:2d:34:26:54:c1:8b:78:f1:e9:20:
                    fa:35:75:83:e7:50:83:1d:e8:4b:4d:fd:7a:da:fc:
                    02:ce:91:6a:4e:e1:0f:aa:0d:cb:c2:f4:7c:15:00:
                    2c:f5:54:1e:7f:8d:58:d5:96:a0:67:94:c2:78:90:
                    c9:62:4f:14:d7:bd:fa:db:83:dc:5d:30:df:1e:13:
                    fc:72:cc:af:fc:de:e0:b4:38:96:d3:47:a6:79:ad:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:93:27:23:C7:B1:4E:27:47:E1:AB:D5:17:9B:40:E5:43:75:78:B5
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:4d:67:71:23:70:a5:69:e0:ca:a8:e7:8f:1e:28:76:8b:
         35:59:aa:9d:b2:cc:41:8c:a5:a5:2c:4b:a5:b4:00:42:c8:98:
         d2:2b:9f:f3:b0:01:52:78:2e:72:f1:e4:d8:6d:61:b5:f9:d9:
         0c:e4:61:fd:d6:43:8f:49:52:c6:1a:e7:dc:ee:44:1d:c1:83:
         e4:7f:95:4c:39:b5:36:6a:7d:ae:8a:a7:e4:fe:3a:dc:4e:7a:
         9a:83:35:45:62:f0:ee:11:48:fe:3c:99:fa:77:f9:57:6d:aa:
         9d:f3:46:bc:1c:99:96:af:99:85:46:ef:48:cf:e6:48:7e:b1:
         3a:ca:d9:23:0e:31:df:57:df:99:02:c6:81:9d:5b:c0:18:e9:
         32:7c:20:32:12:9f:c3:d5:82:77:07:4c:ec:59:bb:2f:0c:ea:
         be:0e:3e:f6:27:d1:60:b3:89:af:c1:02:ce:22:a7:ab:6c:66:
         88:e1:51:54:3b:2e:ce:0a:25:96:e5:38:09:ef:a2:5f:a0:a5:
         9e:99:93:ca:7a:33:dd:4a:df:4d:76:f7:af:f8:36:9f:20:3f:
         7b:56:b4:e5:4e:45:f0:0a:67:34:b8:da:2e:c5:f6:dc:57:26:
         79:f5:85:ee:35:22:a2:21:5c:ba:5e:f9:ff:b6:ae:ce:8d:d2:
         ad:56:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----