Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File:                     YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier:          I5rJ2/O1u3ALbP31NS5xPoy9AAJUhgVmjQsHhO00h1I=
Subject key identifier:   08:A3:39:23:A7:94:4F:DF:25:3D:E3:74:60:E3:51:F9:41:45:8F:B0
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer:       /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial:       01962F3DAAB41EBBF38D5C99B10BB418AEFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: td9f5BV7PkzxLNnnqGyUioCPPxhTHQSqHxBiMMIlFmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:b4:1e:bb:f3:8d:5c:99:b1:0b:b4:18:ae:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=08a33923a7944fdf253de37460e351f941458fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:08:5e:91:27:0e:51:d7:78:02:81:87:12:
                    9a:d5:69:82:0f:3e:94:b1:47:34:60:7f:13:e4:74:
                    7a:7b:ef:35:4a:e2:7f:00:e1:6b:0c:75:c2:4a:06:
                    70:83:ec:5b:dd:18:2d:20:e0:fb:a3:9f:bb:e1:e2:
                    60:10:d6:a6:fc:e8:fa:b0:ea:c9:da:91:da:ad:4e:
                    30:16:07:07:49:22:cf:8f:f6:a1:81:8f:e5:37:14:
                    9d:df:93:20:20:84:75:60:01:46:e3:9c:b2:26:cf:
                    86:eb:c4:a9:fe:79:f3:7a:a5:c9:5b:76:be:eb:eb:
                    23:35:25:4f:09:5f:2b:c9:45:05:44:eb:87:2b:2d:
                    df:42:de:b4:cf:19:9d:72:6d:0a:21:73:8e:a5:83:
                    f1:82:b5:d6:fb:29:93:a8:75:1b:ae:41:85:24:e7:
                    25:81:32:b5:61:16:16:4f:c9:88:5a:2b:3f:b2:af:
                    a7:86:79:3c:98:d2:2b:f0:da:f5:b6:0a:ed:59:a9:
                    d4:26:e3:91:3b:ea:5f:fa:c8:0f:f6:be:f0:47:4e:
                    52:0a:de:ea:c2:c7:b4:ff:5a:cd:64:c7:ca:0d:70:
                    2a:c3:99:bb:e2:c1:68:27:45:71:03:02:cd:85:46:
                    d2:2e:2e:d2:48:90:ea:ee:22:0a:bf:ad:43:b1:8f:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:39:23:A7:94:4F:DF:25:3D:E3:74:60:E3:51:F9:41:45:8F:B0
            X509v3 Authority Key Identifier:
                keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:20:40:f9:d0:0e:8d:ab:d9:55:46:c3:24:8a:4f:90:82:1b:
         5e:5a:a0:9a:a5:56:59:51:62:5d:fb:2b:11:48:88:47:8a:45:
         08:ef:49:35:c7:02:bf:45:b1:8d:6a:e7:f4:36:b6:51:a6:1b:
         ae:35:81:96:65:78:b0:e8:b1:68:9a:7d:9f:fa:30:53:19:67:
         62:cf:36:ec:aa:a2:12:04:85:3b:94:ac:bf:5d:c3:f4:95:af:
         37:2a:6e:7d:11:b6:38:f9:8a:4e:88:a3:e6:b7:0e:3c:cd:2f:
         b0:de:8e:35:fb:50:35:a8:20:3b:89:76:5f:2b:2f:05:b2:f5:
         18:57:98:06:60:ab:e3:e9:ec:50:6a:f5:00:bb:5b:ee:8d:1e:
         30:e8:ae:d3:da:51:9f:f0:a8:9d:4d:ff:1d:83:c5:26:83:b4:
         b7:43:eb:16:ed:6f:90:5a:fd:60:7c:96:84:4c:52:6d:88:48:
         1f:54:98:8f:7d:c5:8a:28:e1:a7:cc:83:28:65:75:82:d0:9b:
         63:fc:bc:cf:e3:c6:5b:83:20:8d:33:99:41:4a:e2:ac:8f:2f:
         bb:92:a9:3a:37:71:5a:85:1f:b9:71:ef:85:6b:95:67:ee:4f:
         26:9a:e3:1a:cc:61:7e:d5:71:c3:4a:a2:31:c8:79:b8:ae:27:
         0f:4d:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----