Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File:                     YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier:          qXWWE6trydTgfNgTEplrIFtRx9ahOhsew+kyVLa2BrI=
Subject key identifier:   58:DE:09:8B:3F:2D:D7:8C:DA:AA:65:F6:70:E3:0D:03:40:C3:D1:D2
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer:       /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial:       01962E98F68398F1C13860C2938BED1DA9E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number:          0C41
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
                          2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: RCb4VbOPQBpfmvTnGXCGfykZnwlvKWarhd6QfX8LDiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f6:83:98:f1:c1:38:60:c2:93:8b:ed:1d:a9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=58de098b3f2dd78cdaaa65f670e30d0340c3d1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:17:22:ee:03:be:a4:ef:cd:e9:51:95:ad:
                    b1:32:80:a5:ab:a1:b5:0f:71:ed:95:aa:2c:7c:8a:
                    6f:bb:93:f0:d1:e7:77:51:33:e3:12:08:06:3e:2c:
                    f7:6e:cd:2b:ff:41:da:c2:83:16:58:58:bb:c4:23:
                    35:e8:e6:e3:85:fa:3f:6f:ff:ef:7e:f5:15:34:38:
                    1a:3e:09:df:84:49:27:71:79:3d:54:18:6d:7a:b0:
                    aa:af:94:c3:c9:88:6b:61:38:25:36:d8:c7:fd:db:
                    85:55:e6:21:79:7d:fb:91:84:ea:52:f4:c5:ae:52:
                    80:b3:56:03:1e:f6:55:56:e9:29:41:3f:1f:3d:90:
                    a7:e1:3c:c1:7a:8a:de:a3:22:bf:af:13:0f:33:8d:
                    42:e3:a4:08:8e:ab:55:6a:7e:51:5c:c1:fc:81:14:
                    23:e6:3b:6c:4a:f7:49:48:80:a1:cd:81:0c:3a:20:
                    0b:ba:a0:a9:7e:6c:70:b9:d9:bb:44:7b:88:03:af:
                    07:01:8e:91:8a:df:2f:3f:a2:d2:be:2f:fa:7e:8e:
                    ae:4f:89:9e:0a:6a:80:d5:12:63:38:c6:f5:48:aa:
                    43:1d:31:32:52:b2:de:3f:a9:c5:18:f7:36:5a:b1:
                    31:9d:26:49:f0:90:e6:30:d6:7c:b3:3c:c1:70:68:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:09:8B:3F:2D:D7:8C:DA:AA:65:F6:70:E3:0D:03:40:C3:D1:D2
            X509v3 Authority Key Identifier:
                keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:43:74:90:77:2b:6f:83:44:8d:f9:88:7a:ff:8f:47:25:
         e2:9c:49:62:e9:12:a2:e6:c9:dc:20:2d:48:b3:f0:83:b5:20:
         b9:c6:84:71:22:e1:4f:33:f4:57:f7:9a:90:50:4b:65:09:07:
         79:98:0c:c3:1c:5a:ab:50:f0:0f:53:20:5a:33:99:1c:1c:91:
         d3:ce:1e:fe:7f:a1:42:a7:ee:ea:74:95:82:1f:0e:2f:08:8b:
         2d:82:b5:39:76:51:cc:98:23:91:d0:65:2b:0d:4e:03:24:9b:
         74:53:5b:6d:bc:6d:35:0b:29:93:19:f1:b4:6c:1a:5e:a4:93:
         c9:16:f1:8c:e6:90:8c:07:bc:b6:3e:d8:ef:fe:01:79:33:64:
         18:49:b8:78:db:3c:2e:dd:7c:1b:d0:d7:17:da:13:20:a6:54:
         d4:29:ae:f6:bf:7d:69:9e:d0:29:37:54:3f:51:42:c3:f6:da:
         d5:e5:a0:04:2c:2c:e9:7c:01:9a:ce:a0:9d:3b:56:87:ba:42:
         2e:f8:8c:d9:b8:6b:8e:cd:8d:25:85:ce:d2:44:13:00:10:be:
         59:d1:d4:c4:4d:7d:57:24:50:a2:bd:6c:55:98:db:fd:e8:70:
         e9:75:c5:4d:1f:67:f5:4b:6f:b7:55:06:77:b6:77:85:ac:e6:
         26:da:0d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----