Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File:                     Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier:          UCNOosXKEO53C+Yyptl4gN/n8VFc/9rbFUo+1CFqCgg=
Subject key identifier:   57:B2:8E:55:98:56:F3:BA:D5:41:2C:30:33:76:55:3D:77:51:6A:3E
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer:       /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial:       01962F07212366354D1F26794349AE0E65B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
                          2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: 3GIYha39qi4xYAgBXZcJZH06rVpOs1oHh/xCzwIGS88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:23:66:35:4d:1f:26:79:43:49:ae:0e:65:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=57b28e559856f3bad5412c303376553d77516a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:64:b1:ac:6f:36:65:42:95:8a:7a:9f:ad:
                    05:ee:16:14:ab:3e:67:2d:9e:b6:f2:91:97:14:60:
                    ea:a0:79:a1:3b:d9:01:14:e6:b6:9a:57:13:f1:10:
                    61:74:90:b1:52:64:67:04:a0:5b:c7:4e:3f:d0:d0:
                    05:fe:5a:34:23:01:bf:36:6f:54:52:4e:b8:1a:49:
                    d0:96:10:2d:cd:c0:ac:40:3f:ee:f9:d2:e6:02:08:
                    a3:de:c4:90:db:b0:b6:4e:13:35:6c:8c:53:fc:77:
                    c6:a1:03:20:55:cd:67:72:da:85:24:9f:a0:1d:09:
                    d4:05:42:a1:ba:6e:dc:ca:38:56:55:ee:19:ae:16:
                    0d:20:61:f9:f0:b0:3b:d5:91:ac:bd:2b:f1:73:a4:
                    91:58:61:de:c9:f9:c3:21:01:f7:36:79:8e:14:49:
                    4d:4b:9a:1f:5c:8a:2e:24:83:b7:c8:55:87:3a:09:
                    40:9d:21:3c:2a:50:7b:16:e0:2c:00:9c:45:63:a4:
                    96:74:cd:d5:b0:4d:c3:7f:4a:e3:4a:ff:26:f1:8f:
                    1d:0f:f3:b8:83:39:67:7a:ba:87:f6:e4:90:c2:4f:
                    cc:7e:85:74:d3:2a:cb:6c:66:10:68:ac:6c:72:60:
                    9a:e9:8d:b7:f5:e2:77:5a:ad:86:b1:9e:f5:a5:95:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B2:8E:55:98:56:F3:BA:D5:41:2C:30:33:76:55:3D:77:51:6A:3E
            X509v3 Authority Key Identifier:
                keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:3a:d2:6e:f3:1d:a5:dd:cb:9b:5f:54:6d:6f:ea:3e:14:
         2d:51:4c:59:6a:f2:d7:b8:3f:65:8d:b0:a2:32:64:7d:bb:29:
         b3:84:e3:dd:cf:8f:c7:4e:41:4c:42:e1:b6:60:83:5b:be:2c:
         bc:ff:2b:99:e0:ca:e7:87:7c:ed:16:f2:92:1d:c0:b5:ab:db:
         df:46:db:ea:30:ad:9f:b6:5a:b7:67:29:ee:d8:e8:58:d8:8b:
         a8:b4:71:2c:ab:e8:ec:f8:74:23:e7:f2:b8:46:21:45:b0:3a:
         47:f0:70:ba:29:ba:13:06:bf:0c:e7:9e:e4:f7:aa:0f:b6:e4:
         d9:52:18:33:5f:72:10:3b:59:a4:1f:84:bc:2e:56:c4:fa:34:
         69:e2:f6:39:6c:34:c1:32:f7:10:fa:e5:b4:71:d4:8c:99:0c:
         20:3a:63:86:98:39:15:5d:83:5d:3e:6a:a5:45:cc:3d:09:2f:
         00:34:b1:67:8c:9a:44:46:49:70:dc:48:59:1c:27:ad:2b:9a:
         51:8c:f3:32:f4:bf:45:23:5e:c5:eb:9c:f1:38:dc:07:43:ff:
         77:e8:92:de:ec:1f:f0:d8:e7:98:45:a2:c7:68:19:f3:f4:03:
         84:96:2e:0f:67:dd:fa:c4:96:24:01:a7:de:ca:34:39:d4:4a:
         d6:02:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----