Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File:                     YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier:          e8hlhfXtDsgl2gRe6jAIo54MwrIFPI5Fj6lqL0eWrus=
Subject key identifier:   CC:33:A7:9F:E7:41:EF:55:4F:35:A6:06:82:36:32:1C:E3:D3:27:4B
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer:       /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial:       01962FAB7F0CA9BC372613B30B6B34D56FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
                          2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: LVycA8K/M1nP+S6Dap2RSrqr0ow7aSeO5LJlUjfr294=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:0c:a9:bc:37:26:13:b3:0b:6b:34:d5:6f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=cc33a79fe741ef554f35a6068236321ce3d3274b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:23:7a:e3:2a:90:5a:c2:76:6a:a3:95:cc:
                    70:b7:7b:96:9e:12:18:0b:95:d6:d1:c8:34:9c:13:
                    95:ea:80:e1:14:95:09:d3:54:f2:58:a0:07:66:0d:
                    21:b0:d4:6e:8a:66:d0:8f:de:0a:32:34:5c:3a:e8:
                    06:c9:df:10:e4:85:9d:f8:49:f7:58:10:a1:34:dc:
                    d9:55:7e:01:9e:30:7c:78:ea:5a:0a:e9:ab:7e:18:
                    44:a4:de:00:08:2b:bc:0e:7d:66:15:8e:af:33:5d:
                    ce:5d:a0:78:1d:86:c9:30:3f:cc:d7:ba:d9:dc:73:
                    eb:6a:40:89:95:00:a8:97:d7:50:4e:dc:04:66:66:
                    8a:ec:d1:b6:e9:4d:25:e3:f1:3e:fd:03:d2:c9:0b:
                    2d:8f:29:ee:1a:cf:b3:ff:8e:2e:ca:a9:48:59:7d:
                    fa:b2:01:f2:42:03:77:a5:ed:71:ea:7a:87:2a:fb:
                    9a:6e:e9:24:42:d6:42:98:2a:2c:fb:08:75:e8:90:
                    82:f4:36:65:c2:3a:82:72:87:e3:2e:85:02:e6:af:
                    f5:dc:44:8b:3b:09:fd:e5:ad:f3:f1:8b:4f:db:ae:
                    78:88:7f:f3:ea:ee:bd:83:1a:d6:27:80:bc:57:01:
                    07:12:91:a4:90:7b:e6:dd:98:cf:8a:43:ec:f9:52:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:33:A7:9F:E7:41:EF:55:4F:35:A6:06:82:36:32:1C:E3:D3:27:4B
            X509v3 Authority Key Identifier:
                keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:57:9e:aa:82:26:17:61:49:88:b0:f6:6d:e5:4f:7b:c7:04:
         c7:c5:25:05:5b:23:ed:e6:0e:fe:31:69:70:34:c1:87:4f:e5:
         6e:6d:f7:47:7c:10:18:75:67:34:be:fd:85:3e:a5:11:27:b2:
         9c:6b:70:ad:77:95:a0:bc:4e:ee:d8:b4:23:8a:33:e6:ba:7a:
         06:ec:5a:5e:99:f7:b5:1a:dd:15:26:eb:8f:0d:14:8b:aa:ce:
         07:d2:c9:0e:96:63:2a:0f:19:49:7b:c1:1b:83:e2:bb:b5:66:
         02:50:ed:6e:4d:4f:c6:88:62:8c:b4:48:b9:85:50:27:ca:19:
         77:b4:0c:9a:d3:43:6b:4f:f7:97:04:de:d0:d3:67:bc:3f:8a:
         12:2b:f6:0f:cb:c2:72:2d:62:f5:ac:aa:74:dd:0d:05:17:2a:
         aa:aa:e1:02:2b:36:6f:d2:bf:65:0e:42:78:fd:e6:15:d1:da:
         5a:19:5d:e5:47:fc:bb:1b:3c:16:0a:5f:9c:16:37:8f:97:f6:
         54:25:c6:06:ae:a9:d8:62:e0:80:a9:01:0a:9e:06:f4:97:f2:
         f8:2c:3d:f0:43:8d:6a:37:16:b9:7a:e4:02:d3:87:9a:12:af:
         c5:1f:03:c3:7d:6b:31:bb:b0:e1:b9:db:fb:5a:97:e5:41:e9:
         8d:30:2f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----