Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File:                     Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier:          MpG1cSiVpb2fhdqgiHhNM5WuqMNQ+9TeWokafUuKZ3c=
Subject key identifier:   7D:09:2B:BD:94:25:7F:C6:2B:8C:EC:D3:D4:87:D9:6E:21:86:32:C9
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer:       /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial:       01962ECFACEC1DC9B6A4A5B908114DF2D6C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number:          03C3
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
                          2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: rCOUp/I2MOo+dVX6R+ddFCSV5yx3VadoStrK10Ey2fQ=)
                          3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ac:ec:1d:c9:b6:a4:a5:b9:08:11:4d:f2:d6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=7d092bbd94257fc62b8cecd3d487d96e218632c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:2f:29:3b:3a:63:62:25:55:b8:6b:b0:aa:
                    38:41:75:09:94:dc:ba:6b:91:15:ff:38:8c:9b:fd:
                    85:97:2a:a5:42:31:30:59:ed:5d:c2:a9:1c:89:5a:
                    0d:fc:47:c7:1b:b3:0b:fc:4c:f1:97:9d:4d:1f:a3:
                    8a:e0:f6:44:e7:32:d2:73:a8:07:58:2d:0b:34:9b:
                    5a:c2:8d:ca:15:5e:0b:5b:b8:ea:78:24:46:cc:c0:
                    cb:ae:ac:01:ca:2c:40:4a:99:05:83:60:2a:58:9c:
                    85:67:6f:a9:99:39:b9:83:ec:16:f4:32:b4:95:95:
                    1a:af:b7:14:31:2c:e1:d3:4e:11:1d:bd:b9:4c:7a:
                    ab:5f:d4:93:03:bd:0a:18:98:66:91:38:be:10:d9:
                    4f:ed:92:38:94:4a:70:08:55:bc:16:18:d7:21:d2:
                    7e:46:9e:6c:03:18:39:78:fe:a0:36:e8:3b:8d:00:
                    a3:a1:6f:91:26:88:2d:80:94:49:1b:56:01:cd:a4:
                    5f:02:72:75:b0:c6:41:48:2f:6d:59:b3:9a:ea:8a:
                    3a:ab:6d:f9:1d:89:4a:c3:e6:9e:04:e0:0a:34:96:
                    3e:44:9b:f8:53:d9:f3:80:5f:4d:77:41:ce:47:b1:
                    87:e9:47:55:05:d7:e2:68:03:38:17:6c:08:eb:a5:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:09:2B:BD:94:25:7F:C6:2B:8C:EC:D3:D4:87:D9:6E:21:86:32:C9
            X509v3 Authority Key Identifier:
                keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bc:b1:c9:e5:a4:36:73:58:de:a6:ac:a5:e2:31:e9:48:a1:
         18:ff:f6:bb:ef:02:00:be:79:19:f8:8f:1c:11:75:68:d7:b5:
         1a:94:72:0d:b9:91:ed:4b:94:e9:59:87:ae:4a:cb:f3:0b:f2:
         e0:92:92:6d:5e:76:99:0d:10:5c:79:c9:26:e9:13:af:e4:a4:
         a3:c0:2e:ed:85:ea:27:46:fc:69:9c:cc:53:84:7c:f7:45:29:
         ea:ef:ce:77:02:3e:bc:6f:09:74:78:ac:20:7e:52:f7:b8:95:
         19:05:73:a6:7d:01:56:e8:a9:65:33:0a:4c:1c:29:59:40:56:
         15:70:6e:80:b6:2a:0e:12:f4:50:b8:f0:a8:67:a5:ea:07:29:
         11:7b:55:7b:74:50:ee:ab:43:49:5f:52:d7:f1:bf:30:63:c3:
         69:5b:bd:bd:9f:97:ab:6b:c6:fb:cc:ef:04:e5:b3:58:b3:77:
         ba:81:bc:62:3a:00:63:fb:e8:22:2b:25:a6:34:ed:c6:6b:22:
         c5:c2:9e:f8:1c:f5:e9:fa:2c:a5:1a:2e:1d:dd:43:2f:51:57:
         e3:d5:f0:25:02:34:8c:67:4a:e7:75:55:9e:d0:25:48:9b:48:
         e4:fb:dc:0f:8f:cb:e4:79:7b:24:64:17:44:87:46:72:a2:6d:
         24:5c:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----