Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          t/mgT8rTpjmrd0jkOINbByB8dxP0/oiBzubzblBa5VQ=
Subject key identifier:   7E:0A:A9:F6:80:A5:BA:83:72:6C:0D:29:6C:4B:9C:A0:33:20:8E:AA
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       01962E98C28E3F6D6CE95BAC3877A13561EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0943
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
                          2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
                          3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: EjXISdm3QCUXTozHRDdkg59kqdOkIv47UCLxbk+Txwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:8e:3f:6d:6c:e9:5b:ac:38:77:a1:35:61:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=7e0aa9f680a5ba83726c0d296c4b9ca033208eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c2:9a:e8:cc:44:6d:cd:83:0f:c6:ce:de:31:
                    32:de:56:d2:f0:39:37:55:ab:75:74:e4:0e:8f:6f:
                    3c:c6:34:9c:ff:3a:37:0f:a9:0a:2e:37:93:bd:99:
                    e6:82:87:a6:c6:10:72:25:6e:41:4c:8b:7d:ba:65:
                    02:79:4f:31:65:e6:30:a7:68:d7:ad:97:aa:f8:e4:
                    d4:f6:30:d8:1f:98:b0:36:3c:da:d4:17:d3:8c:b5:
                    38:0a:a4:84:18:b7:f6:8b:c9:25:ee:74:40:a8:72:
                    fa:0e:f4:24:45:86:b4:84:75:a6:c4:b8:54:65:74:
                    cb:ef:3c:88:4f:89:e8:45:13:9c:55:e2:63:90:b4:
                    b9:05:58:2b:fd:de:a6:c0:23:51:65:03:3d:7b:97:
                    65:c0:2f:12:cd:b2:64:d2:3a:74:5d:cd:48:39:64:
                    22:f7:a0:45:05:40:7b:0d:55:89:b0:34:07:5f:02:
                    ff:2f:bd:47:8e:ca:50:a1:39:3f:78:91:08:8a:d4:
                    f6:3d:2d:f8:da:16:31:ec:e3:51:a9:de:b3:53:c1:
                    d9:b6:74:1e:62:fe:17:d6:23:f2:9a:cd:2e:21:74:
                    c3:1f:54:9b:93:0c:e3:a4:6b:67:41:7f:1a:11:a6:
                    80:04:20:b9:bc:69:3d:83:88:41:e0:96:79:f7:9a:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0A:A9:F6:80:A5:BA:83:72:6C:0D:29:6C:4B:9C:A0:33:20:8E:AA
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bf:ec:b8:06:32:ec:8f:ac:b1:9e:3f:b0:0a:22:e8:12:6f:
         c5:cc:cb:cd:5a:db:57:b7:79:2b:91:83:c7:f3:b9:0e:fc:fe:
         1b:e2:a6:81:0f:7d:73:12:4b:77:93:6c:43:f5:5a:97:16:c3:
         33:33:6c:0f:7e:69:cf:0c:d1:d3:48:7d:78:24:75:c4:98:46:
         93:6e:34:0f:14:e5:c5:34:02:c3:ab:1a:7a:3b:8d:ce:fe:7c:
         24:65:98:08:a5:b7:bc:60:12:ae:cf:fa:6f:14:01:e7:49:6f:
         85:0f:80:93:0c:5b:fb:d7:00:75:0e:28:fe:c0:ca:93:ed:c9:
         e9:73:08:95:c7:aa:06:95:e2:9f:42:a7:27:ee:f2:42:05:5d:
         db:e2:1e:97:7a:78:93:c0:da:06:a6:87:3f:86:60:14:c0:bd:
         3d:a8:91:42:0e:8b:ac:02:22:4a:9e:38:fe:f7:2f:94:b1:d1:
         e8:c1:0b:60:dd:6a:3c:5f:9b:90:f8:e0:08:5a:59:dc:f7:2c:
         e4:29:02:39:bf:b5:e7:d2:55:2f:d8:3f:70:ee:ad:70:5f:30:
         f7:42:df:0e:04:6b:02:3a:86:b5:fe:52:db:d7:94:a9:82:92:
         2f:5c:36:fd:49:61:60:c4:d8:af:42:37:0c:72:c4:2d:90:f5:
         cc:b3:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----