Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          9iD8YeALFCWXi/8go0qLiuBAMNOA1qCFetA/TcOI20A=
Subject key identifier:   82:B1:52:66:30:8E:70:B3:C2:4D:05:3F:55:E8:D7:A8:AE:78:94:73
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       01962FAB4EBCA3DD363A639BD4B466A0592E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          08B4
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: L7vo6n9BgY3fZANo6epe7vbZHts.roa (hash: Gmx0MV98HD7oOh/xtyqe1DV4s1De/YW1VHipqzOKk8c=)
                          2: Yb9tsCfpQgyQVhV8fqh-Sp_yitA.roa (hash: 2hs56XjZJhM4FFxn6rpMfJzmdBVo5/6HusR5cW2LXtA=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: xlSOJog9DyFBvn/xfvu7IEf9AVMHxBkoo8OBS+xFXXA=)
                          4: fVp3g-s19I4wph98MiqmHy9dJ8Q.roa (hash: 1ttOZ6t4S7bYciANzsJmcpLu3G2yq0AKNa7bw1gtrgY=)
                          5: shu5QB5GjPMBcKGZl2o9EhVlwLE.roa (hash: l2v228GgEP09+0vIbdur06C/ah0an7DTOFEqlZLFixU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4e:bc:a3:dd:36:3a:63:9b:d4:b4:66:a0:59:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=82b15266308e70b3c24d053f55e8d7a8ae789473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:48:38:20:35:a8:4f:47:5a:de:f6:24:24:
                    67:62:ba:04:b9:36:1f:76:26:c5:08:1f:58:f0:79:
                    52:f8:29:0c:c5:ac:29:2f:2c:f3:84:1a:87:1c:3c:
                    3b:50:f1:19:7f:83:4b:38:59:b7:a9:40:af:86:89:
                    4a:bc:58:c3:df:5f:93:88:0f:5d:49:2c:2a:8e:83:
                    2e:22:a1:11:69:9a:01:12:ba:e7:ab:67:b2:fd:27:
                    c1:51:91:4b:7f:3f:35:ae:76:ae:fb:53:ef:b2:7c:
                    3b:ed:56:ca:9f:33:ba:40:c7:01:fb:60:68:42:14:
                    22:1d:33:2f:b9:73:1c:d0:d0:d8:6c:b3:7d:d3:a7:
                    5e:9c:4a:c1:b7:9f:3c:6c:bd:e1:83:71:1a:d7:c4:
                    e1:18:60:cf:7d:2a:5d:dd:0a:ea:cc:81:ce:42:18:
                    fc:dc:6c:7c:50:9d:8c:8c:80:15:6e:26:02:e3:22:
                    d9:74:07:8b:77:f1:d0:28:3d:84:39:7f:4b:fb:86:
                    f6:64:d8:7c:34:a3:71:51:e6:b3:3c:9e:18:77:e1:
                    7f:ec:e6:5a:43:da:1b:60:cf:b7:98:7a:f2:48:29:
                    56:e7:31:99:ac:54:44:90:63:8d:bd:59:04:84:d5:
                    43:0d:3a:04:9a:2b:2b:f7:63:0c:ad:b9:bf:3b:a8:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B1:52:66:30:8E:70:B3:C2:4D:05:3F:55:E8:D7:A8:AE:78:94:73
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:da:bd:3d:a4:7d:8d:d1:ad:cf:78:a2:98:b0:54:36:6f:4d:
         3f:dd:fb:0a:65:3f:9b:63:96:d3:b8:4a:31:5e:69:40:e8:d8:
         19:95:22:62:1d:89:3b:b9:26:cb:4c:28:07:d5:71:14:13:43:
         31:66:d8:c7:e0:cf:bc:a6:2b:ff:70:4d:12:b3:0d:ce:cf:0e:
         16:b7:02:ce:9e:0b:fb:ea:3e:9d:ef:ee:f5:d5:8d:86:a5:63:
         d7:af:1c:55:cb:35:03:b4:dd:04:67:67:77:bb:55:fa:c8:58:
         6e:0a:cd:cf:6f:3c:51:cc:a8:96:d1:f5:c9:3a:8b:b7:04:d9:
         61:77:19:f1:c3:42:8e:72:eb:c3:70:49:ce:cd:dc:c4:95:b7:
         dc:b3:f8:64:80:38:03:7c:55:94:3b:69:b4:c9:a8:c6:bb:3e:
         71:7e:9e:4a:ca:48:fc:49:d5:da:b4:ce:27:07:3c:44:1b:ae:
         67:d6:6d:7b:44:cb:60:51:f1:c4:34:ad:a3:b5:82:b2:7e:41:
         b0:19:77:51:96:23:57:d5:1c:73:71:55:b1:2b:1d:05:aa:7a:
         16:87:03:c2:27:0d:16:45:93:7a:e5:a1:6c:f4:13:26:4d:28:
         27:0b:7b:50:a8:89:8a:cc:59:e8:b1:02:1c:7a:f6:1d:67:73:
         76:37:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----