Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File:                     yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier:          tLGMqEn6yuuEOcZ4NGPLFHyG5YzD7ZqeBB85PVgXegE=
Subject key identifier:   90:95:3B:DD:00:8C:15:43:BF:AB:6E:8C:CA:DA:20:08:18:69:2A:BF
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer:       /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial:       01962E9996B6BCE7591E4152C0054DEA1374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number:          0C1F
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: oCuBjNi5W8yEUflt6ag37cKqv13peHgMo+3WVNDZySo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:96:b6:bc:e7:59:1e:41:52:c0:05:4d:ea:13:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=90953bdd008c1543bfab6e8ccada200818692abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:ce:7e:7a:be:63:ec:13:a2:fd:f6:4d:54:
                    0e:08:e8:b8:64:c6:db:c8:f1:12:f9:7c:93:27:e8:
                    2e:b3:14:03:52:22:1d:37:70:90:c1:c8:60:70:49:
                    aa:d9:b3:ab:5c:a8:c1:f2:14:85:1d:3a:b6:06:1f:
                    30:39:83:2a:4e:f5:f4:11:c7:61:b2:e9:35:40:d7:
                    68:df:4e:5e:1d:93:59:f2:ae:b6:cc:64:52:54:76:
                    04:60:bd:9a:68:bd:38:4c:29:2c:a0:d8:35:03:27:
                    ff:fc:ee:ec:28:71:78:9b:af:65:a6:c0:7f:fc:82:
                    fd:00:ba:12:31:ed:0d:61:df:cf:41:00:4d:c8:9b:
                    16:4b:fc:d5:05:f2:73:c4:80:41:7d:5e:be:0f:65:
                    17:01:8b:fa:3d:34:bb:0d:c6:7e:38:60:66:ce:ab:
                    17:b5:13:b5:31:43:3d:60:c4:8d:31:69:ca:27:9b:
                    06:c8:79:bd:fa:83:5d:43:41:06:1a:62:b3:0c:29:
                    16:24:76:e8:b8:ec:e2:4d:dd:45:e1:0b:02:ba:d9:
                    25:5e:ee:53:28:46:ba:c5:d9:87:e8:6a:57:92:c4:
                    67:51:59:cb:a5:d5:91:f1:ed:8e:c7:38:41:14:d8:
                    a0:c1:18:59:7b:8f:10:d4:10:fa:de:2f:e8:d8:d3:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:95:3B:DD:00:8C:15:43:BF:AB:6E:8C:CA:DA:20:08:18:69:2A:BF
            X509v3 Authority Key Identifier:
                keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:62:8c:b7:08:fa:28:23:36:0f:3b:b7:6e:b5:40:5c:f4:de:
         c6:15:11:f4:d3:f1:8b:53:b8:17:89:21:b7:8c:b2:68:8d:8d:
         20:54:de:f2:40:f9:cf:91:e0:74:89:b5:bc:cf:f0:75:bd:54:
         4b:d2:8f:3b:dc:a4:38:26:b5:bc:4d:af:8d:60:b0:a5:2e:b5:
         02:0b:44:02:de:0b:7a:ae:df:20:ad:1b:90:d9:b6:f1:7d:06:
         ce:f8:7a:3d:4a:77:d8:53:43:50:af:be:7c:cb:dc:32:a8:66:
         dc:f4:9a:22:29:27:c3:8f:c3:a7:86:fd:81:27:86:94:04:2b:
         78:c1:c7:f5:e7:17:39:da:1e:d3:bd:e9:98:13:0a:4f:8b:c5:
         ca:9f:94:d4:8d:3b:71:55:6c:7b:d9:95:25:06:25:86:fc:fc:
         af:bd:1c:c1:3c:cf:68:30:8f:56:06:41:03:95:ab:f3:a9:5a:
         86:a5:b9:85:8e:ea:b2:45:d4:92:da:66:e3:18:61:94:97:32:
         d2:6f:85:58:5e:45:eb:c0:a7:ec:fe:bd:1e:28:95:de:b7:18:
         b7:8e:24:f1:43:1b:5f:e7:f0:92:42:09:0d:89:47:09:4e:cc:
         36:d7:0e:ea:53:2a:91:c4:d9:cc:63:b0:57:08:3c:e2:6e:e0:
         50:e0:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----