Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File:                     Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier:          N0nRfpTUiee0xVC+HcD8H/emv2lcmRUDZVebs7LBIfE=
Subject key identifier:   94:7C:AB:CE:AE:39:F9:C3:C8:88:47:D3:71:75:1D:59:42:6E:52:FD
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer:       /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial:       01962DF3B5F89E7E7059D4F54B912DF8CB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: VLWbnm4HFdzuXT54nAW-KLk6RNc.roa (hash: P5V8CUnu9bD0Jv0MPakwPFOEnZtARng4CsZzmamsq/o=)
                          2: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: BcXk0JjhPuwgIwvFwpifQS36Smus4VkEdDQsTLyttik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b5:f8:9e:7e:70:59:d4:f5:4b:91:2d:f8:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=947cabceae39f9c3c88847d371751d59426e52fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:54:1f:a8:88:6b:2c:c7:d0:af:70:c6:a7:
                    04:da:8d:65:ad:3f:df:45:8b:a6:d1:f4:57:97:f4:
                    f3:ee:e2:7e:65:93:a4:24:ce:f2:4c:3d:43:f4:33:
                    75:19:1e:d3:d5:28:9b:47:2f:19:eb:fa:60:86:3f:
                    0c:2c:3b:b2:52:2d:47:c0:4b:b3:8d:ed:55:2a:fe:
                    62:09:b1:30:81:9f:e9:fc:f5:c6:4a:51:3a:58:4a:
                    9f:2c:2f:ad:8b:b7:b0:b9:3c:db:75:0b:0d:6f:14:
                    96:16:10:5e:1c:22:f9:6f:05:e9:28:0b:b5:ea:28:
                    f0:ba:2d:1b:bf:ae:dd:65:cd:a3:67:ba:02:d7:41:
                    8b:93:a6:ab:66:20:81:9b:4b:29:71:50:83:1d:47:
                    aa:83:6a:7e:4e:32:8d:5b:83:a9:04:6c:7d:9f:bb:
                    a6:24:dd:8a:8e:d5:3a:ad:c4:f0:df:bb:2d:c7:e4:
                    6f:6b:d0:67:fc:00:f5:77:9e:59:9d:cc:55:51:58:
                    56:1d:51:84:b4:3c:57:6c:da:20:55:0f:6c:d6:7b:
                    38:18:c8:26:be:19:d5:36:82:bc:ac:52:37:2e:45:
                    8f:da:8d:72:44:bf:f9:87:83:ab:f9:7f:92:46:ce:
                    ef:84:8a:96:a0:6b:c6:bd:80:2b:90:5b:1e:84:90:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7C:AB:CE:AE:39:F9:C3:C8:88:47:D3:71:75:1D:59:42:6E:52:FD
            X509v3 Authority Key Identifier:
                keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:f8:ad:ab:96:f0:36:43:96:d3:96:4b:30:e4:34:bb:73:
         c2:6c:fa:75:62:34:86:11:af:d0:63:9b:b3:b9:33:0b:df:09:
         8d:ca:98:a6:b6:89:cd:b9:21:d6:e4:cb:4b:8d:73:5f:1f:d3:
         8d:b7:5b:3c:18:6e:3c:2b:c7:61:37:9d:07:b9:cc:07:89:a5:
         ae:b3:9e:91:24:a7:e0:62:b1:02:51:9b:d6:2d:59:f6:12:60:
         c5:ec:cc:28:e3:f8:be:43:d7:b4:bc:c8:61:16:9a:81:c8:7d:
         0a:89:89:29:9b:ff:6a:3f:0d:57:79:81:37:06:43:73:2e:4b:
         a1:e3:9f:1f:a0:43:79:43:c1:de:d8:ec:97:52:a9:66:12:3c:
         75:40:e0:0a:f7:ff:ec:9c:dd:eb:03:5b:b5:c0:7f:26:00:c3:
         32:03:85:68:c3:cd:85:9e:33:6a:5e:59:62:6e:87:9d:fd:ae:
         3f:13:1b:ba:25:ba:4b:a0:41:44:49:58:d5:a3:95:76:98:95:
         09:e3:5a:bb:7f:ec:31:46:97:3a:e0:a0:ad:88:5d:31:12:9f:
         a4:d6:19:a0:5c:15:ad:05:7c:5f:86:df:9e:8d:67:a5:10:96:
         23:3d:7d:8f:5a:0a:2a:f4:fc:16:49:68:e9:1e:82:b9:2b:d4:
         8c:73:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----