Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File:                     YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier:          f7ksu3fptsniHmvoP6WFfeJ42KPjoLULJPQEY/R3uqA=
Subject key identifier:   65:DA:D7:77:DF:5B:E4:DC:F9:00:67:78:94:B1:3F:D1:42:6E:4A:C0
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer:       /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial:       01962F3DD3AB5AE2092D3FCDD57DA6B91393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
                          2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: 70xJEZZQAx5n1K0o/0XqJkSnvgQINS4VJo77RNWq+38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d3:ab:5a:e2:09:2d:3f:cd:d5:7d:a6:b9:13:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=65dad777df5be4dcf900677894b13fd1426e4ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:d1:6f:4b:0e:74:8e:8d:4b:5e:c2:b8:08:
                    b8:6e:4b:75:76:82:15:28:e8:ac:57:6e:2b:04:de:
                    38:44:cd:f0:ca:41:d8:44:78:09:57:bd:a9:c6:4a:
                    07:1b:9b:8a:5e:7e:ff:50:f7:b9:f9:ec:aa:d2:87:
                    0a:ed:49:17:0b:8b:a9:6f:56:8c:fc:aa:00:dd:1a:
                    24:c1:f1:c7:89:3b:af:6d:08:0c:0c:14:29:e6:b6:
                    6f:90:e2:6b:e1:22:e9:a8:5d:7e:27:f6:2e:da:36:
                    70:fc:46:ed:0f:6a:24:8e:a5:e6:d6:fb:05:7e:56:
                    28:0f:76:e9:13:33:e2:ce:ee:ab:ae:fd:49:67:8e:
                    75:30:9d:4b:7c:fe:56:3e:75:39:67:93:e8:f7:cc:
                    9b:23:b4:1b:ba:b0:5e:ac:18:81:d7:4f:e6:20:a8:
                    b5:32:cf:c5:e2:f1:0c:2d:f9:20:27:f2:ad:ee:53:
                    83:e9:ba:65:f0:1a:bd:44:63:48:ee:ea:2c:ac:cd:
                    39:16:3e:4b:30:e8:f6:ac:4d:aa:3d:43:e4:7f:25:
                    22:60:f6:83:bc:29:4e:b7:e4:b9:94:5f:1a:79:3c:
                    fe:03:55:50:28:39:65:75:52:b8:ad:48:6c:08:b3:
                    0e:f8:a0:da:0d:75:b0:18:9b:be:1a:e1:22:6e:42:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:D7:77:DF:5B:E4:DC:F9:00:67:78:94:B1:3F:D1:42:6E:4A:C0
            X509v3 Authority Key Identifier:
                keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:84:a9:76:34:72:fe:c6:96:da:ab:00:b4:45:ca:4a:b6:8b:
         14:c3:b1:a3:b4:3c:d8:f6:cd:e8:cb:be:c2:3d:59:9c:4c:43:
         4a:d6:bc:04:95:48:30:46:70:d2:20:ec:7c:ab:38:ba:1f:dc:
         b2:64:33:e6:55:87:52:80:96:43:86:36:13:6a:03:8d:a7:34:
         47:ae:f4:a3:ab:b4:e9:0e:4f:cd:f9:f9:2b:e5:33:20:75:ee:
         f0:fd:4b:7b:a2:c4:e9:cb:15:7a:2c:b6:e6:75:ba:f7:c1:d0:
         37:10:83:0e:11:ac:50:ba:7b:9d:94:4c:52:71:0f:af:d6:1b:
         ec:41:94:7f:a4:13:fa:64:f3:a9:72:c1:5c:9c:27:a8:f0:26:
         22:8d:af:63:f1:ac:e3:13:bf:88:a3:97:aa:f2:0e:7f:6f:f4:
         3d:50:d3:df:fc:0d:b2:c9:8d:32:30:51:1e:98:25:f3:53:d4:
         a6:c4:14:71:c2:1a:c2:c0:34:b6:1e:81:55:75:49:b6:01:9d:
         02:09:da:2d:7c:36:79:13:44:a1:9e:2e:9c:a8:e8:78:3d:df:
         ec:5e:d7:a5:bb:c2:1e:bb:b8:f6:6b:fe:4f:0c:10:01:71:91:
         6a:12:0b:38:b3:87:c0:5b:2a:2a:08:f6:8f:8c:25:9a:5b:3e:
         e2:3c:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----