Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File:                     yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier:          VApeZM241YzjaHDO4O9U2Q6puxKYkMv6XqgGjMV37lg=
Subject key identifier:   B8:EE:3A:9A:21:1E:63:4C:56:21:A8:F9:62:26:4E:39:5C:3E:06:5C
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer:       /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial:       01962E2B4872D1BD584CBEF3EAD18C31F5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
                          2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
                          3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: 7/Rse0Uhy0+LwEoQ9GGo8YuUYOxrDUgocpfDDJPXw9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:48:72:d1:bd:58:4c:be:f3:ea:d1:8c:31:f5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=b8ee3a9a211e634c5621a8f962264e395c3e065c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:3d:22:c3:ce:67:52:47:2c:d1:1b:b0:08:
                    0e:61:0d:05:e5:a4:1d:b2:f4:11:e0:ca:7e:6e:2d:
                    cd:56:af:dd:bf:ff:a6:cd:8e:0a:fe:d1:a9:96:91:
                    80:3c:c6:1b:2a:be:04:64:ac:92:d5:17:89:c6:92:
                    32:6c:f7:fe:32:63:87:59:23:ab:98:f2:d0:d6:27:
                    1e:70:b0:cf:dc:6d:80:d1:5f:b4:7d:cd:b2:e5:12:
                    6a:54:33:63:ba:dd:f3:61:99:24:ff:47:22:61:35:
                    d5:b4:04:cb:cc:58:86:34:ad:a0:ab:af:e4:e8:a1:
                    90:89:cc:f1:28:af:84:38:d5:f7:02:01:f6:8d:66:
                    c1:21:08:80:56:e6:b8:3f:e5:69:62:d0:8e:74:cf:
                    77:44:bd:ac:11:74:2c:c5:53:81:33:15:5c:51:ee:
                    a4:5c:f5:e6:69:66:98:55:a1:22:d1:87:b9:db:13:
                    84:93:14:26:87:8f:a9:03:01:00:e3:76:a7:67:8f:
                    21:2d:a0:fc:12:0b:e7:2f:76:06:42:aa:21:50:5d:
                    7b:1f:f1:5b:90:f6:43:7b:e6:27:20:24:fc:4c:59:
                    1b:19:88:e1:a6:8f:de:75:ce:0a:13:ff:10:ee:59:
                    76:ae:da:3a:2e:a4:c2:68:1d:2c:f8:ad:03:b4:96:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:3A:9A:21:1E:63:4C:56:21:A8:F9:62:26:4E:39:5C:3E:06:5C
            X509v3 Authority Key Identifier:
                keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:30:9a:3b:a6:ce:a4:96:51:52:ee:f5:ab:13:64:eb:de:
         b5:84:90:44:a6:af:bc:74:43:d5:89:dd:ea:c6:03:7b:07:44:
         45:dd:18:82:88:43:6c:b8:51:a2:80:9b:4b:08:5e:0c:37:66:
         0d:08:1a:da:64:67:08:7a:f7:5e:c0:e8:87:13:75:60:43:48:
         fa:af:b5:92:05:63:e7:d0:9c:ba:f5:53:81:37:59:83:a1:21:
         0a:9d:0c:ba:a4:9a:55:6f:0a:61:b5:cc:d6:75:58:87:f8:9f:
         d0:29:6d:b5:d0:6e:4c:83:7e:37:b0:0d:f0:c0:6b:d8:aa:76:
         bc:16:8c:fe:a4:7a:9e:74:6a:68:19:b6:9c:78:5f:de:e9:14:
         06:b4:d7:7d:62:f5:4d:f1:16:29:d8:18:ef:a5:a7:0a:87:10:
         9c:31:d9:42:db:5e:96:f3:8f:56:85:c7:46:2c:c7:48:b1:95:
         b7:dd:29:b9:10:26:41:86:da:ea:9f:a6:42:9f:8b:3d:0e:9b:
         0e:16:df:ab:c3:be:22:c7:45:57:19:1f:5f:5d:83:c5:e3:9f:
         09:97:ed:87:17:4b:f4:79:cd:12:b4:9d:e9:e8:58:98:03:44:
         6d:42:04:24:45:e0:47:7a:e4:4e:e1:29:a2:23:ed:9a:38:f2:
         13:fc:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----