Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
File:                     yGf0ZiTUgb6p0bqL6wwBicm0S14.mft (raw, json)
Hash identifier:          /ZAUO4yUS3IX32RTTaK1Ko7xiu4bV7ZcBCXU4CuR7Ls=
Subject key identifier:   E2:A6:F7:B0:4B:B9:EE:F0:7E:5E:11:48:CB:63:95:2B:82:22:2B:8B
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Certificate issuer:       /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial:       019546D9D65DA6270A1A28EFB4A828741F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
Manifest number:          07B8
Signing time:             Thu 27 Feb 2025 10:00:36 +0000
Manifest this update:     Thu 27 Feb 2025 10:00:36 +0000
Manifest next update:     Fri 28 Feb 2025 10:00:36 +0000
Files and hashes:         1: 4lb8MH7GOJnctq74IYYrPz2MrXI.roa (hash: j6r/F3I87KdB4Ik/hzhNmN4mf0uzrhpeKqetEtToc9c=)
                          2: yGf0ZiTUgb6p0bqL6wwBicm0S14.crl (hash: O+z/58lOR4J7IYrgSSqg86gsDE7MRDkEicoGwWTFgh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:d9:d6:5d:a6:27:0a:1a:28:ef:b4:a8:28:74:1f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
        Validity
            Not Before: Feb 27 10:00:36 2025 GMT
            Not After : Feb 28 10:00:36 2025 GMT
        Subject: CN=e2a6f7b04bb9eef07e5e1148cb63952b82222b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:85:fa:c3:df:7a:19:0f:c8:48:8b:2a:4b:
                    a6:a6:55:4b:dc:50:4c:7b:16:eb:5c:e5:30:3c:6d:
                    e3:84:db:8e:64:c7:05:57:0b:db:6d:6f:2f:34:2e:
                    ea:a3:6a:29:37:ed:05:63:c5:6d:53:d7:73:7e:3b:
                    50:38:98:2c:cd:d8:56:a5:6e:8b:7d:18:1c:0c:83:
                    c4:b4:11:bb:af:fc:01:c2:a7:1d:34:fb:d5:f3:55:
                    d6:0b:06:3b:22:5a:89:7c:31:0a:87:9c:de:d4:94:
                    3c:f5:38:a8:84:a2:24:c3:f5:4c:69:ba:83:ee:e1:
                    65:de:f1:96:31:84:9c:a9:3f:ec:3e:e5:83:50:48:
                    34:8b:ea:2a:72:38:b5:26:ad:97:b5:c2:da:55:b3:
                    f1:b0:37:b9:d8:84:71:99:31:4c:6c:50:3c:cc:03:
                    94:03:dd:a0:e2:7d:69:1a:b1:78:b9:05:a6:71:80:
                    26:7c:83:30:59:d1:23:11:67:e8:ae:41:8e:4a:15:
                    af:d2:da:a1:05:53:b6:6f:c0:4c:e9:34:e7:4d:c7:
                    7b:6e:be:10:12:0e:cd:06:07:33:5c:bc:29:c3:d4:
                    2e:6a:d7:a1:55:25:97:32:be:7f:9e:ba:ee:a4:4a:
                    bc:22:1f:9f:53:52:37:3e:62:82:ca:af:9d:51:fa:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A6:F7:B0:4B:B9:EE:F0:7E:5E:11:48:CB:63:95:2B:82:22:2B:8B
            X509v3 Authority Key Identifier:
                keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:f8:2c:23:44:eb:62:36:c3:56:52:8c:36:3d:d8:0c:95:
         bc:e8:2c:f5:89:cd:f4:73:ee:2c:12:ce:0d:eb:4e:3f:7a:d5:
         0c:5d:e2:d1:6c:76:0e:e7:3d:6c:f6:70:f8:e9:ad:b8:4c:bf:
         c3:5a:c6:e9:0f:ed:c0:89:b7:82:f2:b3:09:ee:73:1d:95:6d:
         08:92:f1:0e:ed:0a:8a:58:42:61:32:b1:47:28:a0:4e:3b:94:
         8c:03:60:ee:e0:23:12:9f:48:2a:46:35:84:2a:21:c8:25:1f:
         c0:dd:de:03:1f:06:61:9b:83:45:37:00:5f:cb:0d:4d:8a:7f:
         96:74:a2:ec:51:33:a3:28:5b:78:15:8c:fc:53:e7:b2:f6:8b:
         cd:32:16:fc:9a:27:c4:4c:d3:5b:51:73:8a:8a:f2:5e:b6:01:
         8e:5f:96:5f:dc:68:9e:45:53:c8:db:29:87:17:e4:cd:4c:48:
         3b:3a:41:0a:c1:e7:d8:a2:d5:04:bd:7a:ce:60:62:00:65:d0:
         49:33:32:a4:4a:ab:49:10:e2:d7:50:d8:48:ae:1b:43:5c:bb:
         f3:bf:6a:3c:aa:1b:8a:fc:22:6a:c6:44:40:dd:be:12:b9:c2:
         63:08:2a:83:ed:28:4e:62:23:11:1e:be:ef:dc:a0:1b:da:aa:
         36:cc:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----