Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File:                     JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier:          yBgM8LDBKxnYBSk1FFzpyIVKJuprgwacHk5BfTUH8eE=
Subject key identifier:   A1:2F:17:4E:25:A5:C6:AA:1C:31:CE:3E:FF:B4:68:79:2D:94:17:39
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer:       /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial:       01962DF4157AE6E5D6F0D9801FE31B431183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number:          0DAE
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: eGiVW73rIEucJ8gkfWCuIv7uwGx8VN5CE9sTZlzKEi0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:15:7a:e6:e5:d6:f0:d9:80:1f:e3:1b:43:11:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=a12f174e25a5c6aa1c31ce3effb468792d941739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:d3:6f:bd:7d:10:cf:2c:94:d9:20:02:5e:
                    91:9a:89:88:a4:5c:f7:c0:04:eb:8d:7d:22:0f:0a:
                    b5:fc:71:80:a5:c8:32:bf:98:2a:69:ee:7f:49:e9:
                    41:84:0a:24:fd:a0:cd:dd:34:ab:c0:9c:10:d7:7a:
                    02:b8:61:f4:e7:5c:63:41:fe:55:e8:c0:a3:37:7e:
                    05:36:1d:24:41:52:76:31:a3:c5:d6:8d:8a:7b:be:
                    e2:fe:21:fb:be:ce:ae:d7:b0:a6:99:d2:2b:f7:5c:
                    5b:a2:e2:cb:bf:00:4f:ce:70:0c:6a:ad:83:77:04:
                    70:db:5c:5b:c7:d4:cf:47:fb:06:fe:7e:24:15:04:
                    ac:21:b5:8b:dd:5a:73:0c:28:08:59:5d:58:08:a5:
                    c0:ad:5b:99:05:b5:dd:c6:bb:7c:02:f2:c2:81:7e:
                    4d:e9:91:5d:c8:c4:3b:3b:8f:c5:09:93:26:68:4a:
                    0c:4a:9b:76:16:27:b2:30:e7:80:c7:1f:e5:6b:5e:
                    34:67:75:3e:50:9d:dd:a4:3a:c6:c5:b1:13:07:cd:
                    11:49:1b:33:40:38:4a:42:46:17:fc:0f:eb:0e:30:
                    f4:c5:85:02:c2:d5:c2:dc:e0:1a:41:22:76:d6:9e:
                    a6:bc:7c:d3:68:fd:61:04:dc:77:bd:9f:b1:1b:19:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:17:4E:25:A5:C6:AA:1C:31:CE:3E:FF:B4:68:79:2D:94:17:39
            X509v3 Authority Key Identifier:
                keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:a2:81:dc:58:62:0f:f0:90:d2:4a:ab:ed:dc:10:aa:77:
         d4:61:43:10:7f:40:54:61:ed:01:a5:f3:ef:4a:e2:03:4b:93:
         42:63:e0:b2:d8:71:9c:74:da:a7:0a:1f:bf:f6:0d:92:64:de:
         90:c9:f9:39:57:27:7c:f0:99:80:2b:80:88:2b:96:f2:5a:66:
         4f:4b:9e:60:52:36:73:e9:52:90:9a:79:56:89:f4:ea:8f:9d:
         b7:7f:2a:ba:b7:f3:f4:34:7b:30:a2:4c:88:c8:0f:d2:3a:63:
         52:29:34:f1:ea:27:3d:f8:f3:93:38:f0:b1:bf:de:96:21:22:
         b5:cc:41:53:01:df:c1:68:2e:7e:30:17:54:55:4c:37:90:af:
         37:e4:77:40:4a:04:a8:87:42:ba:68:cf:28:1c:27:a5:53:43:
         47:55:10:51:b3:f4:7c:b0:a9:df:c8:00:1c:c2:66:be:d2:13:
         7f:79:ef:cf:76:f5:4d:7b:9c:2f:97:8f:7b:cc:59:81:99:90:
         66:d3:51:51:9f:0b:8c:96:99:b8:f4:7f:aa:a2:57:c9:c8:25:
         ea:46:fe:9c:cf:1d:8f:5c:52:1a:29:c2:36:8d:1c:34:c4:7f:
         d3:22:9f:9a:bf:72:04:70:f7:e5:8f:48:f9:30:53:b0:74:bd:
         e5:59:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----