Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File:                     _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier:          s0K/u/NrAWUcR8OOy2jeP6lgBMNzW3krgLVtmPcSSfE=
Subject key identifier:   43:B0:6A:51:B2:4E:A9:CE:C1:DA:7F:EB:D3:93:4F:9E:B5:AA:C8:CC
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer:       /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial:       01962DF4067ABF870B9E80AEBEF4598C006F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
                          2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: UmYBpDi8q6q+cUy2Po8/ezSV6G0aDmDNsfKamJxpcEc=)
                          3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:06:7a:bf:87:0b:9e:80:ae:be:f4:59:8c:00:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=43b06a51b24ea9cec1da7febd3934f9eb5aac8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:49:0c:78:31:c5:39:18:64:f2:34:a5:42:
                    9f:3c:19:d0:16:91:5c:fc:98:58:58:90:97:f9:ed:
                    dc:f0:ec:fa:86:9e:a7:4f:66:91:bf:15:0f:d3:74:
                    67:3e:74:fd:93:4c:07:44:ba:66:c9:9f:58:91:c1:
                    16:6b:e2:75:b5:5f:f0:af:bc:cc:72:03:c6:af:b4:
                    38:04:34:df:37:9c:ed:b0:3c:ac:3c:3a:50:7e:29:
                    a3:85:9f:74:7f:98:58:e5:c2:52:1d:ee:ff:c0:e7:
                    63:ff:5f:88:ba:31:f1:12:8a:c8:47:66:a0:e3:c2:
                    47:b3:5e:e2:a3:ec:d0:13:c9:70:47:b7:ee:af:48:
                    8a:dd:78:86:70:65:48:73:aa:9a:32:b3:b0:17:16:
                    e6:ee:a3:d6:ef:09:a5:bd:3d:a1:7c:fc:b8:2e:8f:
                    44:fc:ef:04:60:81:9b:85:51:15:b9:0b:46:aa:ef:
                    5b:2a:48:d0:80:65:28:ac:87:02:cb:64:56:71:93:
                    d5:3d:9b:82:f6:80:f0:09:7d:98:95:7e:c6:41:b7:
                    34:f2:87:1b:0e:87:be:40:0d:ea:ed:1a:3a:f2:45:
                    87:be:d2:3b:07:ee:28:14:d5:52:cc:ea:53:3a:f5:
                    c9:9c:73:9c:ad:c8:35:57:7d:79:32:45:36:d8:f3:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B0:6A:51:B2:4E:A9:CE:C1:DA:7F:EB:D3:93:4F:9E:B5:AA:C8:CC
            X509v3 Authority Key Identifier:
                keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5e:6b:82:24:c2:ad:e8:5d:47:c1:73:7f:cc:ed:45:c8:72:
         fd:f0:19:ef:d2:7a:bf:9b:a2:50:df:3a:94:4e:6a:6c:7a:77:
         51:76:d2:a5:e3:5c:f5:c9:ed:dd:60:4a:22:9c:10:39:37:2e:
         17:9e:a8:2b:91:15:27:d5:28:0e:28:cf:7c:73:5b:b9:60:9f:
         e6:f6:40:ad:4d:70:62:9a:01:b8:7e:8c:10:92:af:29:95:90:
         d7:83:3e:98:ea:27:3d:96:15:20:03:f4:e3:21:cd:e9:a7:f9:
         19:4d:ae:6e:66:6f:0d:a5:74:a3:26:2f:fa:a3:1e:c9:6c:f8:
         50:ac:0d:11:29:00:37:76:ae:34:8f:f7:86:4e:56:20:ca:b6:
         4d:64:90:ea:bc:c9:87:a1:c3:34:fb:12:e1:a5:b4:0f:4b:1b:
         c8:35:33:eb:ac:82:02:f1:08:a7:f0:ff:36:52:35:e1:c4:e6:
         7d:9f:f2:0a:c9:cd:50:96:ff:d5:98:9d:75:94:13:69:ee:55:
         6b:75:cf:ec:5c:73:a9:d4:06:8d:e0:3b:c8:ed:4a:ae:c1:d5:
         3f:4d:75:02:e4:2d:a4:39:a2:25:ce:4d:8c:18:92:30:d0:99:
         79:15:f3:ad:79:05:f7:d0:3e:3f:3a:0b:3a:ae:4c:f4:05:b8:
         f6:38:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----