Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File:                     RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier:          xALCtVCfznePJ7B9xdjFeQvNlgxuYqERHf9GuwD6320=
Subject key identifier:   9C:EB:2C:AD:F1:EC:70:74:C4:47:2B:EC:7B:57:0A:AA:39:85:87:DC
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer:       /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial:       01962F3D45ECC2DEBF7E39EEB8F437D41BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: GkHzcMEknFb4ztFNGWvQTpHIaI3wFVdyyUk4p+ThJe8=)
                          2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
                          3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:45:ec:c2:de:bf:7e:39:ee:b8:f4:37:d4:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=9ceb2cadf1ec7074c4472bec7b570aaa398587dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:ff:df:f9:6f:5d:f4:c7:e8:eb:d4:7b:54:
                    0f:f4:57:16:f7:5c:26:a7:55:1d:b3:c4:2d:81:9d:
                    41:0a:dc:c8:1d:d8:f1:72:76:4d:7e:11:91:29:b2:
                    b0:28:2b:63:3a:e1:25:6c:b5:04:14:f9:44:df:2e:
                    c4:7b:9f:5c:5c:0b:e9:53:f4:08:d5:1c:96:92:b5:
                    f9:b3:91:7d:44:49:a9:98:49:25:d6:a5:77:8d:ff:
                    95:fb:d2:b4:17:0e:c0:5f:e6:27:59:99:0e:43:95:
                    ba:09:37:3d:12:62:ad:80:ca:75:79:55:bc:14:60:
                    3b:b2:2d:a7:0a:8e:39:15:78:13:d9:0c:a1:81:58:
                    3a:06:8d:b5:d1:c3:1c:c9:39:fe:f7:77:af:23:89:
                    50:67:76:3b:88:66:88:d8:19:ee:2d:6d:1f:e2:93:
                    9a:4a:ab:02:88:15:aa:1b:38:da:37:c8:aa:db:3f:
                    d1:86:6e:df:d0:27:d1:58:40:33:84:0e:aa:14:c5:
                    2b:81:f0:c0:e9:f6:49:2d:0a:03:a2:59:a9:02:af:
                    2a:58:c9:74:49:b9:bb:b8:af:40:c6:6c:a7:55:65:
                    03:84:76:02:25:37:e4:88:ba:5a:f1:6d:03:5c:ef:
                    43:6d:15:48:3c:11:69:b2:2f:12:a2:11:79:29:78:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:2C:AD:F1:EC:70:74:C4:47:2B:EC:7B:57:0A:AA:39:85:87:DC
            X509v3 Authority Key Identifier:
                keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:fb:e2:fc:ad:4d:f0:81:e0:25:97:e4:80:b9:2d:04:05:
         c3:c4:7a:6a:86:68:f1:ef:66:db:e1:bc:4d:40:44:99:9f:65:
         36:1f:50:6a:8c:ad:1a:69:62:65:56:eb:0a:b9:d4:39:68:9f:
         70:9c:b3:af:31:9b:4f:54:e8:b9:f4:51:27:18:4b:e5:3c:ea:
         66:96:e8:c1:1b:d3:73:b0:63:d7:b0:72:82:a5:df:6b:d7:27:
         f2:43:14:f1:2b:75:6a:86:f5:19:37:07:74:2a:d7:da:87:ab:
         43:1a:7b:db:7c:6c:37:a0:54:b7:6f:0d:9d:77:38:73:20:72:
         84:3c:5e:31:99:0f:2e:4e:8f:f4:2d:51:7f:f0:c1:4f:43:cd:
         88:98:21:0f:96:8d:41:9c:4f:fd:bb:3a:be:3d:9b:03:c8:94:
         22:77:00:de:c1:9c:82:72:0a:36:9a:31:83:6e:6d:e1:0b:7e:
         54:7e:21:ea:da:54:48:a8:a1:bf:ff:83:21:1f:ec:42:41:8a:
         44:b8:d4:fd:42:e1:fb:08:22:d2:45:5c:79:e1:38:a9:55:27:
         75:05:47:e6:42:e3:90:4f:98:56:a6:d8:dd:aa:29:eb:15:c6:
         0c:ff:d6:9e:c6:d8:09:d6:c4:7f:c1:76:7b:b9:10:15:da:48:
         db:db:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----