Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
File:                     YcGgEMsk-ZbneJixJHJbVbY0OOA.mft (raw, json)
Hash identifier:          to6iNzUlxgLgaS99l8BBHdAinsXT9Hmamln5i1twnsQ=
Subject key identifier:   C1:E4:2D:A5:4E:0E:B4:77:E7:AA:39:FB:7A:8E:7A:A0:2A:05:63:55
Authority key identifier: 61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
Certificate issuer:       /CN=61c1a010cb24f996e77898b124725b55b63438e0
Certificate serial:       01962E99D1E60D86E7AF8693B6A8B00A994C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:34 +0000
Files and hashes:         1: YcGgEMsk-ZbneJixJHJbVbY0OOA.crl (hash: GrImY8n2EI06NjvItT71cQH3PSxLUaM6GUOuwuDOSJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:d1:e6:0d:86:e7:af:86:93:b6:a8:b0:0a:99:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c1a010cb24f996e77898b124725b55b63438e0
        Validity
            Not Before: Apr 13 10:02:34 2025 GMT
            Not After : Apr 14 10:02:34 2025 GMT
        Subject: CN=c1e42da54e0eb477e7aa39fb7a8e7aa02a056355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:22:94:1e:b8:2b:7b:d5:b0:ee:99:b1:b6:
                    40:d2:77:0f:6c:6f:26:3d:91:63:09:29:40:31:0e:
                    2b:c6:33:1f:bb:da:c8:14:0a:40:f2:e8:02:b3:43:
                    72:1b:1b:ff:64:39:2e:bc:31:3f:49:a2:8b:5a:2d:
                    80:1a:61:20:68:e5:81:99:2a:c0:f4:a2:ff:ba:83:
                    69:e5:9b:b4:4a:2c:7c:44:04:95:f2:ac:5c:ed:4b:
                    51:99:27:be:a8:63:bd:f0:f2:88:f1:06:1b:a0:63:
                    c9:ef:c0:47:01:29:bb:08:85:7f:c5:10:67:45:0a:
                    c6:e4:01:27:96:a6:55:58:3e:dd:65:03:77:d1:17:
                    b4:4c:f1:44:e0:e7:1e:ea:bc:21:75:69:8a:13:91:
                    48:c0:d5:82:4a:57:a1:59:a1:35:a8:af:23:73:67:
                    81:58:06:77:3d:95:b8:56:ed:18:cd:cc:b1:ca:f4:
                    12:74:56:5b:b1:d0:bc:19:b3:65:14:a3:91:63:78:
                    9b:b4:21:ad:6e:e8:7f:e2:1a:aa:b3:66:6f:d0:c9:
                    2b:11:f0:e0:6c:20:cc:0f:17:c5:e4:54:13:73:2a:
                    ef:10:cf:95:ce:2c:37:cf:87:02:bc:44:14:6c:ff:
                    9e:15:61:26:f3:ce:10:c1:d9:de:77:6a:12:c0:94:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:2D:A5:4E:0E:B4:77:E7:AA:39:FB:7A:8E:7A:A0:2A:05:63:55
            X509v3 Authority Key Identifier:
                keyid:61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7e:b1:06:12:63:86:3b:e5:18:eb:c0:21:6f:67:cb:36:17:
         ca:3b:cd:27:c3:13:af:30:29:46:9d:22:6a:28:45:36:e9:01:
         b6:74:4f:f8:8d:f7:d6:e3:5f:e4:4c:58:6a:28:0d:e5:73:c5:
         32:9d:ca:7d:d5:a0:04:40:c8:bf:0c:7c:fb:6b:45:8b:f8:60:
         3b:10:cb:09:2c:d5:17:04:88:43:19:ec:62:30:92:a2:0e:53:
         3c:19:19:6b:76:27:c0:d7:ab:1b:19:aa:07:b7:e8:f0:cf:29:
         60:23:b9:1c:cd:08:00:5a:8d:17:e8:71:cf:80:39:ed:9f:80:
         41:68:3b:80:6d:22:ff:37:52:ea:0a:58:29:a4:d6:4d:96:06:
         c2:44:35:cb:2e:62:d6:a0:19:66:8e:8e:fd:98:ff:bd:55:6f:
         e3:c3:03:14:ed:3b:74:25:6c:6a:17:22:43:cb:46:b7:0c:dc:
         09:61:90:bf:51:85:d7:aa:e2:35:cb:86:39:01:49:ad:e6:0b:
         96:e7:9c:d0:73:83:9d:74:e5:a6:98:40:24:3c:e7:16:b1:8f:
         be:f0:06:9d:9e:7e:e3:2f:b5:29:33:70:d6:1b:31:c0:86:30:
         6a:9d:2d:23:6b:43:83:38:57:70:31:e5:ab:96:ae:ea:58:f7:
         a9:19:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----