Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File:                     Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier:          QyaE0fVCittJ+S9GMP81zN8gyndcJa2OsN5b2IIpd68=
Subject key identifier:   75:05:CE:12:F2:40:63:7A:25:42:95:0F:C8:8E:86:80:B1:DB:FD:8F
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer:       /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial:       01962F3DB302CB0A17FD3E104D14539DD255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number:          077C
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: dg+VbxCuqZQNPyhhW1pR+zKcxCiui8q8dhFoA1prJwA=)
                          2: empt_DtsxXPAB8Pr68RMQjz57Hk.roa (hash: NP64KpVgnNbjP2xtIMghVQIieRDbN+Hw1J+jKW8Qdjw=)
                          3: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
                          4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
                          5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:02:cb:0a:17:fd:3e:10:4d:14:53:9d:d2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=7505ce12f240637a2542950fc88e8680b1dbfd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:7c:51:89:ad:ac:33:7b:4e:26:17:a6:1c:
                    52:d8:b2:d4:8f:93:5c:f8:64:c9:26:7e:76:0c:4a:
                    1d:7d:7d:8d:28:5a:03:45:c2:c7:01:8a:a3:b7:dc:
                    25:fc:54:8d:28:4f:41:f7:f2:66:ba:b5:e8:4b:5e:
                    29:ba:14:4d:09:27:8c:c8:8d:e4:e4:a7:e1:a2:d3:
                    4f:48:94:ed:ec:91:4f:cb:5c:c7:e0:83:33:a1:02:
                    4b:5b:6b:10:ad:4a:08:03:53:df:e1:52:52:be:ce:
                    6e:1b:5d:21:3e:56:33:94:5e:5b:2f:b7:2d:c7:7b:
                    de:e2:61:3b:ca:66:c4:e4:a2:6d:77:14:2c:dc:ee:
                    aa:67:ad:f4:3b:ad:8a:b6:97:e2:36:44:8f:be:69:
                    83:45:04:99:39:51:94:1c:6d:fa:a3:e0:51:1c:37:
                    a5:61:a0:9b:f2:ff:f6:54:02:71:e7:77:33:d8:62:
                    e3:37:36:f1:2a:36:e6:23:94:2f:d0:d7:c7:98:51:
                    0a:fc:e1:53:d1:e4:c4:00:61:8f:cd:07:24:a4:d1:
                    60:68:93:39:ff:24:c3:cf:bb:d1:da:13:15:4e:19:
                    75:ce:d0:d8:db:8e:0a:a9:db:5a:2d:64:00:55:13:
                    f7:37:af:1a:7d:6f:1d:6d:a3:c4:0f:71:58:00:c2:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:05:CE:12:F2:40:63:7A:25:42:95:0F:C8:8E:86:80:B1:DB:FD:8F
            X509v3 Authority Key Identifier:
                keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:b6:96:15:98:ba:ce:a3:52:16:d2:0e:a3:4f:2a:9d:4b:
         d8:3c:e4:d5:00:0c:b4:25:e8:c0:ef:10:36:09:8b:10:74:71:
         99:2d:21:e9:83:f4:e0:39:91:e2:87:ec:92:5f:06:f3:c8:4f:
         15:18:15:f4:79:34:2e:15:17:a3:1a:00:5f:fa:7b:a5:54:69:
         73:e9:b1:d5:2b:26:eb:e4:7a:65:0b:b7:9e:65:85:d0:20:37:
         18:7a:05:28:3e:ca:9e:98:56:43:b5:70:a9:68:c1:90:ef:05:
         55:15:93:e7:c1:58:a0:a8:4d:d6:10:18:ae:e8:b6:a8:ec:13:
         41:7d:9e:13:0d:d7:31:dd:07:d6:dd:b1:a4:60:c6:8f:1a:01:
         14:a8:2b:e7:7d:ed:33:25:b5:2b:9e:d8:32:c3:16:ae:7e:6a:
         23:5f:a0:50:24:85:2b:82:2a:e4:3c:be:95:c0:2c:93:fc:d8:
         2e:a9:87:9f:5c:f0:0a:85:0e:2c:e1:20:ad:2b:8a:6b:c5:0f:
         66:36:1d:19:af:e7:ab:a5:7a:bf:a8:e0:3e:f0:3a:e9:c1:33:
         4a:be:d3:dc:8d:88:b0:ab:40:64:38:42:11:80:71:5e:3d:98:
         3b:66:2e:bf:d2:70:97:d7:e2:5c:91:2f:6a:1b:78:a6:ca:97:
         e7:b8:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----