Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File:                     YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier:          cEIrjkypyMFa7j3vR9Ypy8u6Z25reCMJrU73D6ZLTII=
Subject key identifier:   7B:B5:63:AF:0D:37:90:24:2A:92:8B:C9:6D:52:94:9A:40:B7:50:E3
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer:       /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial:       01962F744F0C07F9845D6692204924E21FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number:          0DCE
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
                          2: Uj5VQZ6b6oKxwVvDN0EBZ4rsNGw.roa (hash: 8PKTi26pIQ4VombiOrobgWJT6wPpzYb/vk0bG6N7UuM=)
                          3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: lJxwo5CBAZ3PUFDgWFiCpwdPbk6ZkUO5q4t5MJe6qjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4f:0c:07:f9:84:5d:66:92:20:49:24:e2:1f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=7bb563af0d3790242a928bc96d52949a40b750e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:21:90:0c:4d:61:49:52:d1:66:f3:5f:34:
                    5b:16:eb:53:8c:58:22:31:bf:c6:c3:4c:8e:fc:01:
                    55:9e:2f:03:23:0e:aa:73:a7:bd:a0:2d:c9:d7:8b:
                    29:b4:7a:02:7b:48:25:c2:a0:65:b0:05:4e:e5:f8:
                    8c:fd:59:b4:a8:c5:21:b8:6c:f5:0c:08:09:21:52:
                    b9:09:79:a5:6c:31:39:6f:a3:60:0c:84:25:4a:70:
                    93:10:c7:0c:e7:22:bc:e3:ce:75:99:bb:fc:42:3d:
                    ca:28:53:24:1b:28:81:ac:07:64:c5:de:2f:d3:07:
                    78:bc:47:5e:fb:46:44:ea:38:7e:80:8e:9b:96:95:
                    25:1f:cb:55:fd:5c:84:6f:0c:e3:6e:fc:ef:c8:32:
                    96:e2:f8:d2:3e:18:a3:af:96:8e:9c:a0:4c:3c:6c:
                    a1:7c:07:06:6d:33:f8:bb:ef:d1:09:27:c9:c6:66:
                    cc:cf:b5:33:27:30:b7:f6:7d:e9:77:98:69:60:45:
                    81:97:7f:5f:1e:d4:95:63:d0:28:93:c3:e7:95:1f:
                    91:c9:e2:7c:00:1c:6b:7e:57:c3:56:16:ad:3a:2f:
                    c2:e8:38:46:51:9f:1d:f9:93:69:51:ed:f7:cf:64:
                    57:6b:9e:54:6c:a8:7e:41:c5:ac:88:8d:6c:db:58:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:63:AF:0D:37:90:24:2A:92:8B:C9:6D:52:94:9A:40:B7:50:E3
            X509v3 Authority Key Identifier:
                keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:d8:1f:5f:da:3c:24:17:4b:ce:94:0a:d8:f4:a6:70:4a:
         39:ee:2c:5a:27:3f:65:9d:c4:6a:81:b2:74:d5:b8:6d:1f:ac:
         f1:18:41:df:11:04:2c:76:16:8e:cf:ac:d3:dd:b4:6d:c9:8a:
         e3:cc:91:ab:f6:97:98:8c:d6:ac:31:d6:dc:08:0d:d0:78:33:
         a5:cf:1f:e4:b9:ec:95:14:38:ae:62:37:ec:84:aa:77:aa:9a:
         c3:de:04:cb:05:c3:9a:61:f0:48:62:3e:ad:ab:65:fa:ce:7c:
         22:28:ae:f1:fc:36:da:aa:37:e9:e0:71:bd:1f:f7:9d:17:ca:
         03:46:2b:a2:ab:b8:3f:a2:fc:c9:01:32:dd:e4:7f:ee:f9:96:
         6b:42:e6:45:90:7e:24:d7:e5:90:3b:20:ab:6e:90:ce:d1:9b:
         07:6d:1d:6e:22:fd:61:7f:5f:74:69:71:1f:81:2a:6c:97:c3:
         26:a8:78:73:56:21:88:82:f0:1f:5b:69:23:f8:a5:a5:c3:09:
         53:3c:e3:d6:c8:6e:5d:ac:82:83:97:2a:92:40:43:b8:55:46:
         e2:2b:3c:0f:e6:12:59:e9:16:bd:64:5d:fc:5a:cc:bc:cc:6a:
         63:9e:85:a2:49:8e:c6:1f:6a:1e:7f:81:fe:2e:f2:95:29:66:
         f6:10:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----