Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
File:                     y78j_5hnaDYlSUYv4JLGMV6sykA.mft (raw, json)
Hash identifier:          85DX74rVLpqZAX/z2JuL3Q4qo9cL3vL2zEp/09FHakI=
Subject key identifier:   4E:09:B1:36:5E:A4:B2:35:C9:EE:B8:07:E5:27:18:21:E2:9C:BF:C5
Authority key identifier: CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40
Certificate issuer:       /CN=cbbf23ff986768362549462fe092c6315eacca40
Certificate serial:       01962E2AFA1C38D22F2D2B77659B7C2C0C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: a0gi81K4PU-mZZPSh82aNeLjsVI.roa (hash: Id1bqvDurbpWKdNvf29qBzclAu3m5HKcR5Kg3lRHGKE=)
                          2: y78j_5hnaDYlSUYv4JLGMV6sykA.crl (hash: YZp5u8y1oSbGP6Z5KqIm1GiDfjbA4TGUoXy9TTjshUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:1c:38:d2:2f:2d:2b:77:65:9b:7c:2c:0c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbbf23ff986768362549462fe092c6315eacca40
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=4e09b1365ea4b235c9eeb807e5271821e29cbfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:d3:a4:6c:81:25:62:0b:3b:f0:bb:77:82:
                    06:da:9b:b3:47:f1:7f:a2:fe:95:3a:7e:e4:0f:b8:
                    28:4c:a6:90:23:8b:17:ef:eb:72:94:79:e4:ac:04:
                    96:f1:74:3d:dd:1e:8a:ec:e5:ed:00:03:e9:63:d7:
                    90:47:99:58:c2:ce:4a:c0:d0:f6:8d:b0:66:76:1f:
                    5f:36:df:6d:43:f4:46:ff:e8:ea:89:cd:6d:e5:27:
                    d5:31:ad:d8:7a:21:a0:3d:79:75:67:00:a9:14:fa:
                    92:36:21:bb:ff:ea:87:2c:0b:37:5a:59:4a:06:8b:
                    a6:79:f0:96:59:d0:d7:20:84:82:9e:09:46:5e:b7:
                    0a:6b:3b:10:bd:64:72:bd:bd:4e:5d:c2:f9:20:08:
                    7f:c2:e6:fc:b6:88:b2:cf:65:d4:00:2b:fa:2b:4d:
                    c8:e2:14:d3:9e:a9:c6:97:ba:02:d9:98:0b:5b:39:
                    56:83:46:78:8f:50:d7:3a:ec:df:b7:f9:e1:6d:bf:
                    39:a4:88:65:e6:79:75:75:12:06:b7:b4:0c:fa:35:
                    d9:0a:cf:8a:d3:5b:a4:c1:57:c2:df:e1:85:cf:ee:
                    e2:6b:49:e0:c3:00:3b:83:8c:4e:54:2d:ee:72:2f:
                    d2:64:96:39:ee:75:2a:51:f8:86:64:cd:bb:28:3c:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:B1:36:5E:A4:B2:35:C9:EE:B8:07:E5:27:18:21:E2:9C:BF:C5
            X509v3 Authority Key Identifier:
                keyid:CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:25:d7:6f:db:6f:0a:3f:67:9c:64:0f:44:0e:a0:5b:01:
         cf:77:67:55:11:0c:2a:c6:4e:6c:1d:d1:88:8b:10:3b:19:52:
         5c:be:7a:0c:32:48:c5:b5:49:8b:a4:88:17:2c:ca:d6:34:b6:
         43:a9:6e:44:aa:5c:03:83:7a:f0:4f:a7:f1:b5:13:ac:99:37:
         24:62:a1:21:1a:ec:58:85:cc:68:58:53:07:75:29:c3:48:91:
         21:7f:16:b8:3e:8a:0c:83:8c:51:33:24:44:23:8a:d3:f3:47:
         b4:4c:ac:6c:14:43:19:c8:bd:ac:81:b5:d9:7f:f9:53:c0:2a:
         da:f4:17:43:d5:88:27:fb:c7:b0:0e:16:86:73:c8:bd:24:f8:
         ab:b4:de:4a:b9:a1:19:d9:0e:d1:1e:9d:af:8b:a0:a1:a3:e8:
         cf:c5:ff:73:13:6f:1a:44:b1:f0:0f:20:26:0c:ca:89:4c:08:
         79:30:69:58:84:1c:79:80:9b:d2:fe:75:45:91:61:5d:43:83:
         ca:43:a4:ac:2c:e8:f7:9e:f0:da:aa:f4:27:92:c1:a9:4e:9e:
         ae:43:39:68:a2:ab:ec:7f:38:ce:12:2f:68:79:e5:c5:e1:08:
         cd:59:fc:67:bc:37:03:5b:7f:b2:60:be:5b:5e:4d:6a:fb:a9:
         ba:7f:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----