Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File:                     y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier:          PWlCcAE7YUdZaa4nRYZsj2D5vC1xgsSdZiMPrZrLFl4=
Subject key identifier:   C3:51:DA:58:07:44:04:71:80:CB:E6:4F:B0:54:DA:4D:12:69:5B:CA
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer:       /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial:       01962F74A5044C478A022556D7E11DA0031D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number:          0514
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: LerXGp31rW+Ps7/cNl1ZqhoK/DpAM4hoYVfPpQKn/KQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a5:04:4c:47:8a:02:25:56:d7:e1:1d:a0:03:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=c351da580744047180cbe64fb054da4d12695bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:30:4c:a7:ec:57:57:16:ee:d6:dc:34:1a:
                    40:c6:ec:f4:db:f2:8d:e6:d3:8d:cd:e4:41:ae:b2:
                    ec:3c:ec:36:e7:46:eb:a7:73:ec:b2:80:96:99:2d:
                    e2:ee:7e:14:01:71:4b:52:0e:56:09:af:59:19:ea:
                    b3:67:97:18:f2:66:a1:ab:76:5d:17:2b:74:76:ca:
                    f4:17:09:29:a7:a5:c8:ed:5a:7b:c7:89:f6:fd:90:
                    84:0e:bf:86:a4:c1:e3:0d:12:6e:67:3b:8b:76:16:
                    ae:81:a1:b5:19:b8:1b:ed:1a:23:aa:53:c9:c7:53:
                    25:22:32:e2:46:3f:56:5b:ab:a3:4d:ac:51:f5:25:
                    4e:bc:7b:9c:be:06:59:64:66:58:4a:97:73:82:06:
                    79:09:01:a4:18:16:4e:3b:85:f0:da:06:8d:89:04:
                    5a:4f:b6:d2:ac:56:fd:1a:2a:68:df:cf:8c:fe:69:
                    cd:c0:bc:07:1e:82:a3:c3:59:53:6e:96:b2:73:0a:
                    00:65:bc:35:a3:c6:03:14:25:ee:a8:49:9d:fc:64:
                    4d:45:88:57:ca:37:b1:3c:c7:f3:c7:4b:39:e7:0a:
                    84:03:a6:ab:98:6f:7e:60:88:fc:2f:60:a3:f7:d4:
                    01:18:df:41:08:78:d3:c2:c0:38:ea:b5:97:d0:88:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:51:DA:58:07:44:04:71:80:CB:E6:4F:B0:54:DA:4D:12:69:5B:CA
            X509v3 Authority Key Identifier:
                keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b7:f4:83:43:df:7c:a3:c3:d8:dd:6e:08:6b:0b:bd:1a:38:
         6c:9e:8d:8b:f1:bb:6e:d1:92:af:c7:91:df:b5:6b:cb:9f:68:
         01:df:d7:61:52:ad:77:06:e2:76:d5:19:71:90:99:af:3a:13:
         b1:17:65:c1:34:a6:f7:68:fa:35:50:f3:78:5b:19:78:36:c1:
         0e:dd:19:0f:dd:39:85:a5:53:46:c3:95:f4:fe:48:b0:b2:9d:
         e3:96:dc:86:1a:4f:51:c8:1b:7d:c9:4e:1e:1e:21:68:43:b3:
         29:71:0d:41:05:7d:64:26:a9:f4:a7:6a:39:37:b3:b6:67:ef:
         64:b0:2a:a8:41:28:a5:ed:d9:af:f8:ca:0b:6b:0c:d4:38:25:
         0f:df:85:39:f2:b8:15:ec:0b:8d:ac:3f:17:b5:97:0e:ae:4a:
         7e:8e:08:9b:65:7e:5a:97:f7:53:97:a8:a6:21:b0:82:e9:ca:
         69:a2:a5:66:8a:06:a8:0b:f7:34:e2:d0:b4:1a:79:d7:c7:c7:
         0c:96:f5:09:94:b2:5a:77:fb:21:87:86:67:d5:f8:cf:54:85:
         f4:88:39:bf:61:09:b8:cd:c5:5f:5f:23:4f:76:26:c7:22:c6:
         94:4c:21:76:0f:11:c7:b4:79:01:10:09:e7:cd:a0:2f:ac:86:
         ac:51:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----