Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File:                     y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier:          PX+qlJAERcRBq144hFlLxQW1PRYELC1NYEtuUT0YTLY=
Subject key identifier:   4B:B8:8C:5B:F7:68:E1:5A:2F:BE:65:BC:51:82:F0:12:C0:B0:8B:EC
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer:       /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial:       01962E2B2124225BEDC8B33BC0C09E776B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number:          0767
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=)
                          2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=)
                          3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=)
                          4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: h4brwFWCYGAkz06Cvy+jK4AEAOy+yxmui6MzlO1wI0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:21:24:22:5b:ed:c8:b3:3b:c0:c0:9e:77:6b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=4bb88c5bf768e15a2fbe65bc5182f012c0b08bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0f:28:ab:6e:84:fd:eb:a9:9b:7a:86:d7:89:
                    85:2b:d4:41:23:e3:75:f2:55:f0:f8:6a:60:46:ff:
                    ff:81:69:71:e2:ef:de:b9:77:2f:32:ea:47:61:20:
                    98:38:ff:6e:e8:f0:aa:c2:24:b3:76:f8:68:4b:04:
                    28:1a:45:37:ab:c3:84:3d:6e:4a:28:61:64:b0:a6:
                    63:a9:30:47:9c:bd:fc:57:fa:eb:7f:ce:10:24:09:
                    cf:5d:3d:49:e7:cd:35:a0:ef:05:70:65:db:83:ac:
                    4e:41:f7:a0:0c:f4:3a:de:7e:7b:a3:3c:1e:51:7b:
                    3e:20:f6:d2:00:f1:ed:82:de:62:d4:99:22:39:ab:
                    e7:e4:03:02:e0:ed:4d:40:99:34:3d:0d:e4:ec:e5:
                    38:a8:23:de:a3:0e:fc:5f:72:0f:7c:7e:eb:7f:c0:
                    9a:db:e8:aa:f2:42:8f:b8:80:01:33:9f:dc:3b:43:
                    1a:72:46:80:54:2f:1e:c5:36:9a:f8:cc:2e:7d:5b:
                    26:96:50:ac:61:ac:8a:9e:f0:74:16:19:51:35:d3:
                    de:89:14:00:a4:04:bc:60:92:f5:be:0c:18:aa:31:
                    70:86:eb:cf:c2:b6:59:6f:a6:a7:0a:11:a7:fb:33:
                    b9:21:a3:40:84:f0:bf:88:d8:ae:53:4c:d5:8f:28:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B8:8C:5B:F7:68:E1:5A:2F:BE:65:BC:51:82:F0:12:C0:B0:8B:EC
            X509v3 Authority Key Identifier:
                keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:ff:6a:63:26:32:6e:91:de:0d:7f:95:47:64:62:b1:6d:
         15:91:ec:ed:6f:ad:14:ea:92:da:32:b9:3b:b8:3f:2e:be:92:
         7e:6a:0b:e9:84:40:b3:4e:15:42:78:fd:0b:95:67:bf:4b:04:
         22:cc:c6:01:cd:34:3e:83:57:e7:e9:29:f8:15:a5:1a:ef:c1:
         3d:3b:c5:65:b9:9c:95:f4:d1:dd:c1:f2:fb:27:56:44:20:d6:
         5f:32:73:29:af:97:7a:11:5a:82:9e:15:89:65:80:4d:a1:13:
         7c:4a:68:66:92:27:35:29:e6:3a:0d:80:00:1b:d3:40:c6:52:
         c9:33:9b:7b:87:9a:84:19:fe:a5:cc:ba:31:53:5d:0d:b1:62:
         31:1d:78:30:9f:aa:94:75:87:7c:88:f2:b8:d6:e8:f7:cb:19:
         7b:bd:6f:1e:6b:e2:42:c2:47:d0:2b:0a:a0:18:b9:d5:ab:4b:
         50:7c:a0:96:6c:1a:bc:e5:f5:68:fe:70:30:c2:c2:cf:82:f3:
         1d:3e:af:66:6e:a5:78:bc:64:b3:17:a0:3b:12:a5:27:d3:ab:
         94:da:fa:38:60:2d:7b:28:cc:e2:dc:67:bd:b1:80:1b:5e:b9:
         86:3a:51:ed:98:c8:bb:ca:2d:67:0f:5f:19:10:3d:2e:a3:5f:
         c7:f7:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----