Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File:                     yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier:          SakfxZuHGlnlvKcR7yon04BUWYU3pzjozWONk4Ii4ZM=
Subject key identifier:   13:79:E5:8B:C5:D1:FF:E3:0E:0D:F5:8E:45:9D:8E:71:06:AA:45:C4
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer:       /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial:       01962E998D6436FFD7CDE1EDEFC88D2FB420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number:          07F1
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: B2qngy9ne7rTPOWafWcsXCRtjJUawtm12K1+FQ8BjwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8d:64:36:ff:d7:cd:e1:ed:ef:c8:8d:2f:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=1379e58bc5d1ffe30e0df58e459d8e7106aa45c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:90:27:5d:a2:8d:15:42:c6:71:f4:bb:d7:
                    0e:dd:34:11:99:3f:4a:69:e2:c3:d7:18:70:cc:5d:
                    c0:7e:d5:d1:6d:30:12:38:4d:00:2d:82:72:5d:fa:
                    5e:fa:e2:d7:c5:81:f3:da:45:6b:77:d2:52:40:07:
                    b6:56:77:be:d6:2f:cf:c6:71:85:0b:b5:e2:3c:50:
                    49:23:54:65:ea:f1:c1:a2:b8:4c:b3:c2:c0:bb:f8:
                    b1:c0:22:ba:7f:0d:d4:34:82:3b:ae:b1:d8:c2:df:
                    74:5d:66:76:a0:85:b2:8e:01:41:82:45:d3:88:14:
                    ea:87:10:e2:d7:8a:0b:fc:ff:6a:e4:2f:14:0e:4c:
                    97:c8:b0:12:39:14:19:fb:7d:b6:a9:dc:4c:f7:50:
                    00:d6:c3:f6:f7:af:2a:0b:0e:3b:0e:ff:58:9a:57:
                    03:f5:d2:12:8b:21:3f:8f:06:19:b2:19:c7:34:04:
                    93:2a:85:aa:b8:26:ad:18:4c:64:b8:aa:d7:26:49:
                    2d:27:60:a8:9c:35:95:09:6e:70:31:f2:94:7b:70:
                    d8:ec:f5:cb:84:d9:f5:3a:95:b5:b8:22:19:eb:19:
                    58:1d:cf:08:1b:3a:45:95:89:44:1e:2f:2c:d4:08:
                    0b:28:f9:e9:c0:72:11:c6:b2:92:0b:09:25:8d:23:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:E5:8B:C5:D1:FF:E3:0E:0D:F5:8E:45:9D:8E:71:06:AA:45:C4
            X509v3 Authority Key Identifier:
                keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:32:e9:22:05:7b:2c:20:3d:34:e9:3d:13:67:6d:56:23:
         9a:90:4f:69:77:cd:b6:44:9c:aa:6f:3c:ff:73:db:ce:1d:44:
         69:1c:74:7d:bb:a3:f2:f5:99:9f:5d:15:50:f5:96:54:a8:11:
         19:3e:92:86:5d:69:53:cd:f5:e3:58:69:05:6b:1b:0c:97:58:
         2f:e2:bf:61:44:de:37:df:d0:4c:d6:e3:40:a6:ba:6c:04:09:
         39:55:50:58:7f:a9:4f:13:af:72:d4:c8:ea:bd:ad:47:bf:ba:
         cd:3d:9a:59:1c:b2:7e:07:1d:e5:54:dc:b8:17:2a:ab:4b:4f:
         3e:44:65:e1:fe:ae:7f:4f:76:5c:9c:bd:88:f7:b4:af:c6:92:
         d7:2c:a1:52:72:75:a0:e9:5e:8f:85:ac:b5:58:9a:8b:f3:18:
         dd:a1:fc:64:3e:54:d3:5d:ca:6e:8a:c6:83:6d:0a:b4:01:60:
         99:84:c9:94:03:ae:46:48:c0:93:a4:0e:3e:ba:69:c5:ef:0b:
         29:91:db:44:63:31:83:9f:1a:59:d2:a9:b4:16:3a:8b:84:7a:
         dd:af:d1:f1:18:e7:3c:37:c8:ed:f4:81:7f:b7:c6:c0:87:de:
         b3:0d:7d:36:a8:fe:42:77:85:57:f9:de:e1:cc:ed:4c:bd:35:
         07:43:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----