Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File:                     Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier:          bCiZ9kLLFut9zfsvJLEpVG96PVf5RjXjnzhjTqkHm4c=
Subject key identifier:   55:D2:F3:B4:DC:0C:F6:D6:6A:D7:57:EE:01:14:85:95:76:6E:BB:F9
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer:       /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial:       01962E2AEB9CC30E77505AD4104111F63DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number:          10A6
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 3ir5WkvJIRxtwZei2sctSN0sCz0.roa (hash: kbUd9aHqn6kQ8QUhYDDaCsn+6zI4AKFQfFGDo83vd6o=)
                          2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: OwirCXselJ4QqHE15Fc9+nBNiu66b/TmOkE9p69rA/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:eb:9c:c3:0e:77:50:5a:d4:10:41:11:f6:3d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=55d2f3b4dc0cf6d66ad757ee01148595766ebbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:68:f1:62:9f:1e:a1:2c:21:ab:7b:0a:df:
                    73:ee:dc:c0:ce:31:78:10:3d:ad:b0:ad:97:2b:d8:
                    5f:4c:82:88:dd:a1:ed:e6:11:15:74:ad:40:9c:05:
                    8a:b6:94:2a:95:f7:59:92:a7:8f:78:88:2b:60:74:
                    29:82:1f:82:ce:0c:69:53:45:51:2c:c6:3d:91:de:
                    42:42:8c:d2:18:34:eb:0e:f5:78:d2:20:2d:e0:91:
                    d0:c6:2a:c9:b3:63:a5:b0:db:18:35:0e:a9:42:bb:
                    64:67:b3:9c:42:80:1d:0c:3f:e6:82:f4:48:a6:be:
                    aa:f6:52:fa:bf:97:98:48:06:ad:75:68:30:8a:03:
                    a0:1e:7e:4a:4b:2c:84:3a:66:5c:26:f8:30:2f:a0:
                    6f:1e:57:66:1a:d2:82:77:8a:86:2c:40:97:6a:e8:
                    f1:f9:13:ae:ec:fb:6a:2b:a5:df:b4:dd:4d:22:b7:
                    5e:a1:0e:36:58:55:b3:42:b1:6b:91:1a:a5:6b:a6:
                    fc:e3:85:b8:57:9f:85:0a:6f:f0:91:53:a7:bf:b0:
                    5b:40:30:c8:c0:b9:7e:fd:d6:ba:af:c4:2d:82:42:
                    8a:a0:34:25:81:9b:4e:19:b0:12:31:6d:c3:ec:a3:
                    99:96:5d:9f:45:d5:f8:73:6c:50:91:95:06:d3:8f:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D2:F3:B4:DC:0C:F6:D6:6A:D7:57:EE:01:14:85:95:76:6E:BB:F9
            X509v3 Authority Key Identifier:
                keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:d9:fc:10:16:e2:57:30:e2:d7:dc:ad:f7:83:ec:9e:2e:
         f7:24:bc:1f:08:b7:b9:1d:85:b9:9a:3a:0b:19:46:d9:fa:fb:
         28:ef:cf:81:23:2e:38:28:79:bf:e7:15:c4:af:79:fd:78:68:
         c0:17:d3:bf:3a:36:e1:07:f0:7e:8e:b0:fd:e5:78:a6:36:ff:
         c5:74:5e:f1:4d:75:9b:e7:fa:3a:49:b3:1b:51:62:65:3c:75:
         94:df:89:e0:4f:18:94:e9:c9:cf:14:6b:d5:ab:f6:83:5b:31:
         8b:6f:dc:cb:b3:7b:cf:e3:74:6e:47:0c:2e:a9:45:f9:95:d1:
         1b:74:ba:c8:b7:40:2e:50:2b:c7:f6:80:26:25:9a:4a:2d:d3:
         69:28:6c:15:db:48:e8:62:71:7c:9e:cd:e4:0f:e2:7e:dd:54:
         7f:22:bf:f2:a9:e7:0f:64:c2:7a:a6:90:b8:fd:49:64:14:5a:
         bf:90:54:b9:4d:74:17:c6:8c:c5:5e:b9:38:43:fe:cc:45:3a:
         77:16:ff:c0:32:de:d4:80:dc:a7:ec:f6:1a:8f:78:d7:25:ac:
         01:9d:3a:bf:7c:b0:e8:fa:04:f0:07:8e:a5:0a:dc:68:c3:3e:
         4c:a9:7b:b5:a9:4a:d0:68:3e:16:ea:4e:4a:18:30:76:41:3e:
         04:17:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----