Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File:                     Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier:          g+R6Vcjo3s/Rnq1tGz0e8LdrAAGZKiU2a5ZrE/RsIeI=
Subject key identifier:   9B:06:1C:11:27:A1:AF:87:E3:A9:C1:15:97:DF:63:65:E9:1A:87:BA
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer:       /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial:       01962F74BD6E7EB164E4134E54BB3EBF6A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number:          04B6
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: SejPV5ueAhrJMktdbflE6KyoluT1ynV1LBAKYqmzrg0=)
                          2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:6e:7e:b1:64:e4:13:4e:54:bb:3e:bf:6a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637115f728f97d16e0d124963764088120205ae0
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=9b061c1127a1af87e3a9c11597df6365e91a87ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:59:b5:94:09:2a:0e:90:35:2e:c2:ad:1c:
                    82:1a:15:9c:f2:b5:d3:5e:5d:75:a2:df:60:aa:38:
                    e8:bc:ea:dc:8a:34:1f:f1:f0:06:83:d6:36:5a:11:
                    71:fe:5b:fc:20:f8:72:97:a9:12:bf:a7:a3:35:1e:
                    fd:ce:34:92:a1:42:43:5c:19:b8:99:8d:0d:cd:9b:
                    e9:da:16:77:66:50:b9:48:bb:97:2c:41:b8:99:9e:
                    4d:b1:40:c9:78:dc:89:88:ab:f2:4b:d4:5d:51:c6:
                    22:61:78:a3:cf:b9:58:d9:77:51:36:73:f8:f8:b5:
                    c5:b6:26:17:d9:49:79:bf:ef:fd:8f:a7:d7:c8:e4:
                    2f:dd:f3:08:4c:70:69:38:6d:16:08:8c:23:c1:f2:
                    59:c8:6a:4a:d6:2b:3b:90:9a:2c:29:00:1f:a5:18:
                    2e:9f:29:69:bc:ca:bf:0a:b2:2f:21:c2:04:d8:7a:
                    25:79:83:95:fe:e4:9b:32:f6:6d:c9:ed:3c:dd:b7:
                    dc:ec:e6:b5:ce:2a:3b:3e:18:8c:be:5b:0e:b8:68:
                    69:f5:5e:a6:e9:1c:70:d9:dc:0a:6a:71:8b:d3:fb:
                    2e:d8:b2:59:5e:24:d8:e6:7c:be:d2:ce:d4:93:17:
                    9e:ae:37:27:a0:bd:a8:fa:32:06:c8:b5:dd:c7:70:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:06:1C:11:27:A1:AF:87:E3:A9:C1:15:97:DF:63:65:E9:1A:87:BA
            X509v3 Authority Key Identifier:
                keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:c1:69:56:4c:c9:e7:4b:03:4d:c1:44:e0:f0:65:ce:93:
         0f:d4:e5:e1:8d:8b:29:66:7f:03:08:d3:2e:29:6f:21:09:75:
         75:cb:7c:af:84:ce:29:81:07:53:c3:21:35:80:34:fb:9e:0b:
         d2:41:9a:72:85:c8:98:89:c6:92:46:f9:ac:9e:f4:26:5d:35:
         58:f8:03:14:13:71:0b:08:cd:7f:be:58:97:13:c3:fc:fd:48:
         82:55:4e:b8:0a:54:95:0a:4d:38:21:70:13:db:6c:c1:d0:59:
         4a:b1:38:f1:dc:37:bf:b1:09:88:ce:b0:35:5a:6a:34:51:63:
         ae:16:4d:4f:9d:f7:a6:e0:fe:f9:e8:47:78:97:fa:14:e1:a1:
         51:46:b6:d5:37:58:1f:78:ff:13:42:d7:29:81:2d:8f:f6:34:
         33:53:a5:ac:73:47:61:2b:74:41:b1:c5:87:4d:c2:67:4c:81:
         08:0d:75:1c:3e:0b:08:e6:9a:96:ee:29:9f:c7:0c:37:bc:28:
         d5:fd:81:a7:46:71:52:b4:38:97:5d:d9:0f:b9:9a:9d:8d:96:
         3c:25:b8:31:45:4c:98:07:b0:e5:fc:59:fd:41:74:8a:1b:66:
         7a:81:52:a9:73:25:69:0a:99:04:74:e1:fe:b3:48:48:67:e0:
         f2:93:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----