Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File:                     YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier:          ATBurNd4m66KdtI23sLKxV0Td3srC19qIYWFnpf9FcM=
Subject key identifier:   B5:07:47:C7:34:3B:6D:FE:B7:A9:93:63:2D:09:A6:55:25:41:1E:D1
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer:       /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial:       01962E2AF4C98FBBD3F6E7B5E5DB8968F329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number:          1331
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: lwFLEQAan49w4VNhQ5vV3qj3czrzUe0/It4X5BaZLSQ=)
                          2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f4:c9:8f:bb:d3:f6:e7:b5:e5:db:89:68:f3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=b50747c7343b6dfeb7a993632d09a65525411ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:22:8a:8f:c5:d0:9d:ff:05:60:19:30:4a:
                    02:e1:06:c9:57:22:8c:92:13:17:e3:05:d7:8f:f9:
                    6a:64:31:8a:19:70:46:73:52:e0:80:95:5f:7d:cf:
                    ca:ae:73:c5:82:a7:34:93:3f:31:51:f9:98:78:e1:
                    57:53:1e:ca:c3:06:71:76:a8:51:a7:7c:26:fb:fa:
                    6d:06:27:37:52:71:f9:83:1a:f6:96:6b:0a:15:e0:
                    d5:be:c0:51:31:d9:64:62:85:09:ce:8f:9f:01:ff:
                    72:d4:a8:63:80:09:1c:b2:dc:4e:e8:7d:4c:0f:1c:
                    a9:15:6b:77:30:9c:3a:06:26:c2:6a:c8:59:97:0a:
                    39:58:ed:67:56:df:81:ca:e3:1d:bc:4b:b1:2d:1a:
                    63:e0:29:f8:b2:5f:9e:8b:9b:77:b7:20:b0:dd:94:
                    b4:a1:d0:ab:88:0e:3d:8c:e8:8a:dd:8f:0c:70:11:
                    09:a0:b3:9f:d4:d6:61:e7:c0:47:40:d0:a1:41:87:
                    10:2a:05:50:81:95:8f:cd:9a:fb:6a:f5:45:6d:70:
                    ff:5c:04:4d:8d:f1:2a:31:cf:89:c5:fe:54:08:ea:
                    e9:75:28:66:60:e5:4c:b9:f5:9d:1e:6a:4e:3e:1c:
                    96:9d:36:8a:1a:48:3e:6c:1f:bd:69:8d:c9:bd:11:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:47:C7:34:3B:6D:FE:B7:A9:93:63:2D:09:A6:55:25:41:1E:D1
            X509v3 Authority Key Identifier:
                keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:61:ff:b2:9d:fc:a7:75:5e:b4:0a:15:fc:b5:ce:90:5b:e4:
         6f:1f:13:8a:0b:3c:64:a9:8d:e1:0c:79:5a:0a:06:a1:12:c6:
         66:21:b7:8a:0d:18:8a:6f:7e:6d:89:0e:05:92:36:a4:5f:21:
         08:9a:47:75:b2:d9:13:6b:91:be:c0:4f:58:83:49:d7:66:c6:
         f6:e2:ec:aa:52:6d:00:0d:dd:87:3d:fa:fe:4f:6a:0e:fa:36:
         d5:c9:a8:9c:26:9d:ad:0f:05:e3:e0:89:80:81:f3:58:ac:30:
         83:35:5b:29:8d:2d:c9:6b:2b:b0:b2:6e:f6:a6:12:01:23:d8:
         b6:a4:21:81:7e:3b:ca:a3:45:80:ac:c6:fb:f5:9d:7d:c8:88:
         fd:2e:44:e0:07:0b:7e:f6:db:ac:31:50:ad:27:20:a2:c1:3b:
         a8:1e:a3:f2:99:f6:08:00:9f:9d:92:cb:cc:2e:9a:ee:1b:d0:
         24:37:5b:1f:30:3d:e1:01:7f:42:ab:76:3b:63:f7:4d:36:ac:
         97:98:8d:82:5c:2c:d9:e1:23:d4:bb:f0:7a:6a:1e:2a:f5:fb:
         cb:8d:64:70:73:0c:5f:81:32:2d:24:83:49:29:c9:cb:68:05:
         3a:32:4d:78:26:58:06:e3:23:da:b1:8e:95:08:88:a9:9d:1a:
         c6:0d:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----