Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          hrWurO1cAGR0XSfsFa5p0G5yxMNF9VySfROpC9XUO9o=
Subject key identifier:   17:CC:AC:F5:13:01:3D:6F:57:06:77:62:95:11:CF:2B:11:F7:E8:12
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       01962E99637862CB48A4A4F1AE63CBB79E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
                          2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
                          3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
                          4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: BOsianp32PFoWeqTJBvSnTutKd6GMVK9ITA3pSVO7Tc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:63:78:62:cb:48:a4:a4:f1:ae:63:cb:b7:9e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=17ccacf513013d6f570677629511cf2b11f7e812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:cd:69:9b:ef:d6:a4:75:42:18:93:e3:ea:
                    85:e4:37:d0:ff:57:6a:de:06:94:c9:4f:e6:9a:69:
                    42:79:df:c2:bb:02:43:02:d4:e0:26:8e:9a:2e:8f:
                    9a:21:a5:bd:6e:48:cc:1c:57:46:f3:d1:64:70:6b:
                    33:6c:33:1b:d1:a8:5e:3b:07:17:02:d4:aa:cf:0b:
                    57:e7:73:9b:46:c1:a3:5b:32:f5:fb:11:cf:59:b6:
                    28:97:b5:14:86:31:e9:41:63:1c:52:5b:d3:fd:bc:
                    61:8f:1e:fa:56:e2:76:28:9e:4b:05:0a:7d:77:2a:
                    85:65:5a:6d:b4:e0:0d:de:38:da:09:02:4d:d2:86:
                    6c:82:a3:79:fa:b5:2b:5c:aa:6d:ae:41:52:63:15:
                    18:c4:db:0c:b0:a1:e9:94:e8:4a:6f:6a:94:64:d5:
                    5f:d6:3e:3f:fb:bf:d9:f8:12:c8:3a:52:96:83:5b:
                    7c:f1:4d:eb:78:44:b8:b6:5c:c8:85:12:73:3d:99:
                    98:85:0d:25:0d:5d:e2:0d:ce:9c:24:2d:1a:ff:7c:
                    f4:10:2b:8b:d2:58:d1:7c:db:e5:da:51:fb:92:aa:
                    ed:9b:aa:12:aa:22:5d:52:ff:8d:73:70:1e:08:b0:
                    a4:95:5d:f3:fd:f2:e3:fd:ed:65:00:89:d0:eb:29:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CC:AC:F5:13:01:3D:6F:57:06:77:62:95:11:CF:2B:11:F7:E8:12
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:18:02:49:56:30:74:f1:6e:05:5c:9b:45:60:58:f3:6d:
         8e:7f:ca:38:85:43:ee:48:68:af:b4:3b:26:84:dc:74:62:f3:
         bd:c3:09:b4:ba:32:ba:5e:f6:8c:3f:a4:46:25:07:70:44:1b:
         a3:d0:61:d5:0a:2e:a5:c7:11:58:ab:09:47:ee:81:66:f5:00:
         7d:3f:54:fd:fa:49:56:25:54:d4:48:1a:92:55:11:bb:9d:42:
         10:26:5f:72:3c:21:9c:39:62:80:50:27:9f:fc:4e:3e:e6:e3:
         5c:16:30:37:84:e1:03:07:3e:05:1e:df:5f:77:7e:d3:da:fe:
         46:1c:8f:db:d2:3e:b6:16:16:3b:1f:b9:35:7f:b2:ae:af:bb:
         4c:e9:57:62:7e:41:6a:3d:67:c7:ac:26:30:9d:55:4e:92:2b:
         c5:f7:fa:c1:13:80:72:34:8d:55:f6:c5:40:1b:9e:7a:ea:61:
         b6:50:2d:25:a9:3f:02:20:24:73:49:8b:d3:22:90:14:aa:67:
         df:fa:88:7e:cd:f3:98:9b:bb:cd:09:68:f4:2a:09:7e:1c:3d:
         46:eb:4f:18:38:19:0b:08:39:6b:42:22:9a:86:55:1d:bf:cb:
         b8:b5:8a:d8:94:fd:d9:0e:67:34:b1:21:9c:f1:20:bf:c2:78:
         50:dd:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----