Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
File:                     YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft (raw, json)
Hash identifier:          kRP6EdXQ7ADbLGO7HlmiHjEMZ0Ab/VaLGn1uWpg+qdc=
Subject key identifier:   53:11:24:34:21:62:B2:ED:DD:5E:EC:0F:C3:F1:46:88:C9:D7:F3:93
Authority key identifier: 61:17:D6:15:80:43:15:0B:0A:D2:24:A0:64:8D:F0:18:57:06:01:9C
Certificate issuer:       /CN=6117d6158043150b0ad224a0648df0185706019c
Certificate serial:       01962E9946E1460B2ECFA88E1D668F913332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRfWFYBDFQsK0iSgZI3wGFcGAZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
Manifest number:          0F78
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: YRfWFYBDFQsK0iSgZI3wGFcGAZw.crl (hash: 1vFBBq4oCWfyCiafC9Yep8ZbyrA03Bt8Emsm/twPMnc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:e1:46:0b:2e:cf:a8:8e:1d:66:8f:91:33:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6117d6158043150b0ad224a0648df0185706019c
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=531124342162b2eddd5eec0fc3f14688c9d7f393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:88:01:84:da:84:db:5b:bd:9f:da:ec:6e:
                    35:65:4e:0c:4d:c9:4f:9f:c9:e5:c0:03:37:87:26:
                    f9:86:0d:3e:59:ee:52:8f:a8:7b:bc:7b:eb:93:d6:
                    0b:ef:03:f4:51:43:a2:99:95:55:a1:76:05:9b:ad:
                    ef:74:2a:89:bd:62:5f:63:87:96:1f:cb:2a:ce:c9:
                    85:cc:73:95:c9:03:1e:92:c6:85:e2:ac:f2:25:92:
                    34:e0:72:af:07:8a:71:29:e8:cf:2a:2d:80:f2:79:
                    bc:f2:48:a8:54:89:47:a9:a1:0f:5b:a3:67:a5:a3:
                    8f:a3:90:69:21:52:d7:78:c5:b3:34:8c:94:10:da:
                    43:d0:26:39:f7:7a:2a:05:61:5d:b0:38:ba:52:44:
                    23:e4:2c:0e:4f:7a:1c:38:2e:d8:eb:43:c3:df:1e:
                    8a:9d:79:b7:b3:42:df:b5:19:3a:79:6e:dd:f8:61:
                    5f:40:ff:87:d8:e7:3d:3b:ec:f9:11:b3:ab:62:6f:
                    e8:08:1b:01:2d:af:7b:2c:8c:26:91:1f:33:2c:73:
                    87:a4:a3:07:7b:55:95:3c:a5:ab:74:8d:29:9a:d1:
                    97:d4:6a:d3:e7:f9:2b:2d:36:e1:ce:92:f7:a9:ad:
                    ca:1d:60:8c:8a:23:f2:3f:ab:bf:b0:6c:44:11:34:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:11:24:34:21:62:B2:ED:DD:5E:EC:0F:C3:F1:46:88:C9:D7:F3:93
            X509v3 Authority Key Identifier:
                keyid:61:17:D6:15:80:43:15:0B:0A:D2:24:A0:64:8D:F0:18:57:06:01:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRfWFYBDFQsK0iSgZI3wGFcGAZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:37:88:72:9d:7f:b3:c9:3d:74:71:4c:bf:a2:78:3e:68:e6:
         4b:7b:6d:85:f6:98:a0:34:6f:3e:28:4b:b4:e0:ff:23:f5:42:
         a8:19:4d:d4:e2:3f:73:d2:37:d3:05:4f:98:af:78:ea:81:68:
         23:6f:a2:ee:80:8a:16:a8:77:a8:1f:d2:87:54:cb:f1:b3:04:
         38:0c:09:fa:73:52:59:d2:b3:86:da:f7:a7:15:2d:6b:bf:87:
         ef:3d:79:ba:d5:53:6a:9d:0b:cc:7e:21:af:ef:39:43:2d:5d:
         7c:c0:74:d9:2a:8d:a7:08:30:c5:51:1b:37:2e:4e:33:12:a5:
         7b:f2:be:6b:85:3b:53:7e:78:79:7a:d4:6c:8d:c3:ff:77:d7:
         2b:d7:28:eb:87:33:1b:54:4a:3e:65:31:f2:74:ef:4b:4c:69:
         0c:1d:76:92:9f:eb:85:a6:7b:43:d8:54:bb:0b:76:60:08:af:
         6b:de:20:5b:ed:15:3f:94:ac:ee:5e:cf:4f:ce:b0:09:5e:56:
         be:3b:65:99:7c:4b:eb:43:84:d0:6b:f2:c0:20:96:ef:15:81:
         69:bd:eb:a6:82:2f:dd:9e:75:da:08:79:56:ac:d6:f6:2f:c6:
         32:9c:61:55:3a:82:8a:35:77:81:1e:5a:7f:1c:87:72:ac:9c:
         6b:a4:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----