Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
File:                     ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json)
Hash identifier:          kZaHUP3ucDMP8qdAkT80R9MynbgaeDmY4+YzXSxnDJk=
Subject key identifier:   31:09:4C:70:A6:40:45:99:D7:6D:8C:06:B0:47:2A:8C:F2:12:2B:83
Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
Certificate issuer:       /CN=c92a961c87ac90518ea752f185bb65128aba2866
Certificate serial:       01962E99801668A659E3549CF3851C5CEF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
Manifest number:          018E
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: JoV+Jj+2kAVtkrxCzBAdywf7+ysjMdIq280Iab+0lBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:80:16:68:a6:59:e3:54:9c:f3:85:1c:5c:ef:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=31094c70a6404599d76d8c06b0472a8cf2122b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:1d:ad:4d:cd:6b:b9:88:2c:ec:19:05:6b:
                    3c:98:31:95:e4:d0:96:68:3f:74:62:80:36:a4:c7:
                    f4:1a:d6:7e:24:6c:bd:c4:bb:a3:3b:a1:4d:46:09:
                    28:45:b1:64:56:42:f7:9b:a6:11:cb:c2:a1:21:ac:
                    cd:ce:9b:1b:90:a4:f1:ef:61:31:f4:56:43:09:94:
                    1b:4b:9b:fa:c2:9d:a8:b8:41:d1:2c:89:0f:59:b2:
                    56:1b:cc:18:10:5f:7d:f6:83:4f:1a:dd:1c:f0:a3:
                    74:42:8e:93:f9:30:d9:74:3c:a4:45:50:4b:e1:31:
                    b9:dc:2d:c1:dc:ce:8a:27:b3:be:16:3a:97:c4:84:
                    cc:1c:97:e4:c7:0c:00:dd:43:de:d7:cb:06:bf:68:
                    49:46:fd:af:27:49:bd:e1:5d:fc:07:f9:7f:2a:bc:
                    d2:66:ac:45:f5:66:28:42:1e:33:75:f6:b0:d7:a6:
                    65:8f:4b:36:34:f8:96:77:94:ec:78:47:ff:c1:2e:
                    03:5d:ef:a6:d9:b4:99:05:5e:88:28:39:c7:02:63:
                    d5:8a:56:6c:25:07:1d:e9:89:c4:ec:ae:41:10:22:
                    a6:94:bb:3e:46:9d:29:7b:9c:03:c8:f7:4b:62:6b:
                    f2:d0:7e:73:d5:2a:09:1e:6c:44:ea:aa:43:95:20:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:4C:70:A6:40:45:99:D7:6D:8C:06:B0:47:2A:8C:F2:12:2B:83
            X509v3 Authority Key Identifier:
                keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:b6:38:fd:bf:99:aa:a1:f8:53:ad:42:57:41:f8:a0:0a:
         f4:d1:80:19:bf:6c:2f:fb:29:57:bd:85:c7:53:26:32:85:96:
         0d:55:56:98:3c:98:4f:fe:7e:53:60:f6:d5:f5:42:bf:06:56:
         9c:36:37:9a:f3:dd:a7:11:30:f0:de:82:2c:f5:28:3b:a6:6e:
         c9:ea:63:14:a3:4f:63:c1:03:40:ce:04:36:b6:a5:b9:6f:d2:
         7f:cf:94:b5:70:d8:1b:99:b7:42:c6:9e:bc:b1:4a:fd:cf:fe:
         50:8b:91:28:cb:aa:55:01:f0:2c:5d:84:18:3e:21:c8:fa:6e:
         1e:af:cd:e1:3c:e6:ab:a9:69:bf:6a:c4:fb:e8:db:51:e6:fd:
         95:42:43:4a:3c:6a:4d:32:34:9a:07:89:e9:96:fa:0d:39:3c:
         84:02:50:e6:cd:a2:35:7e:27:00:0b:13:b4:7c:4f:0e:28:0a:
         9e:5c:2f:52:d7:fc:26:fa:ee:93:80:fb:cc:df:e8:9c:86:98:
         45:ed:af:b6:c8:cd:88:0f:57:cb:3a:f8:0b:06:5a:24:b6:03:
         9f:1b:b5:d9:63:0b:2b:4e:66:1a:cc:b6:76:f4:b3:86:49:d8:
         bc:8c:75:4d:38:8b:d9:4c:7b:51:48:22:10:32:54:4c:63:6c:
         5b:8e:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----