Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File:                     YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier:          qQcl0CSNv8L7N4Ggs07ru46W4ReTMJxTEjQtnoKggo8=
Subject key identifier:   F0:2F:19:3D:DF:4A:A3:AF:90:34:D2:0F:1B:7D:A9:42:22:E2:1B:C2
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer:       /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial:       01962F06FD35D0D2CA62F8B932E5436AD100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
                          2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: eT2zH9fE+e054rvT5uxiIvfT9qQ8BSca/diIPxi4bJk=)
                          3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fd:35:d0:d2:ca:62:f8:b9:32:e5:43:6a:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=f02f193ddf4aa3af9034d20f1b7da94222e21bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:76:08:27:06:bc:06:07:92:9a:50:64:89:07:
                    65:02:85:b3:c4:63:9c:1f:05:87:58:e8:f4:d6:f9:
                    fd:be:ac:96:88:28:b8:3d:f1:0e:7c:80:d5:cd:f9:
                    5b:2f:30:86:c2:08:be:ff:f3:39:b7:02:96:17:ee:
                    87:bb:93:91:69:82:58:96:d5:8d:aa:1c:cc:78:ee:
                    43:ed:87:d7:b0:99:fc:e1:ea:71:3f:7b:0a:7c:41:
                    1c:7e:09:05:66:91:81:9d:15:da:f8:f5:57:b0:3e:
                    5c:06:bf:0a:93:90:eb:60:aa:65:11:ed:c9:a8:52:
                    05:1c:98:61:30:05:e3:23:d4:a0:7f:71:fa:25:9c:
                    2d:50:13:20:f2:e2:75:8e:ca:b6:3b:45:e7:f9:af:
                    7c:6d:c6:6a:ea:d1:24:70:11:b4:c9:3f:14:9d:da:
                    81:b0:c0:8b:e0:2f:18:3f:28:66:dc:81:38:ae:23:
                    ed:de:c7:54:bd:74:60:39:d8:5c:bf:4c:5b:99:2e:
                    9a:5e:07:70:09:49:48:bb:b5:cf:d7:29:f2:4f:b6:
                    4f:0f:00:e2:2d:1f:f4:f0:2d:12:b7:86:17:6c:e9:
                    7d:f9:c7:de:dc:8b:fd:46:09:1f:ce:9c:54:47:f8:
                    16:56:60:10:05:54:1f:c8:46:e6:35:75:57:3c:be:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2F:19:3D:DF:4A:A3:AF:90:34:D2:0F:1B:7D:A9:42:22:E2:1B:C2
            X509v3 Authority Key Identifier:
                keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:55:98:32:d8:40:d1:82:fc:6b:48:18:28:4f:02:41:83:bf:
         7e:b3:46:19:0e:d7:89:b0:22:5b:58:ef:50:94:c8:ff:86:0c:
         b8:7a:87:95:79:97:05:75:90:b6:d9:39:d7:44:0d:71:71:bd:
         54:44:0c:73:f4:36:6f:0d:b0:b2:fa:43:50:2c:d5:bd:84:b7:
         dc:5d:1c:72:f7:64:59:47:cd:12:86:f1:27:4a:38:d3:81:2c:
         c5:e9:47:51:69:8a:bd:0f:16:d3:40:bd:ce:49:fc:bc:1e:4e:
         0f:72:44:45:72:f1:ff:46:58:b8:57:26:fd:96:9b:b9:c3:63:
         7e:d9:27:78:09:fc:7c:4b:2a:9b:06:32:e4:34:5c:c7:eb:7c:
         35:ae:a0:83:84:de:83:d1:89:d6:16:60:2f:ea:25:58:44:7a:
         48:6b:1a:5e:64:b6:49:1f:8e:f6:b5:cd:91:1a:95:2f:84:4c:
         07:fe:2b:5b:be:27:96:dc:54:6f:8a:cd:24:b6:d5:9c:24:e7:
         07:2a:25:d0:4a:60:cc:0f:b3:4e:90:52:24:60:af:1c:bd:e3:
         15:37:91:45:14:7f:52:7f:fb:28:b4:a6:92:5d:26:af:e0:f9:
         59:92:f6:2b:83:a8:e5:2e:fc:d5:0b:c7:fd:bb:6e:7f:75:5f:
         c7:0b:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----