Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.mft
File:                     y_nNJDztaTe2vqVxAoFP-bpCZiE.mft (raw, json)
Hash identifier:          jW1bM4y/z0wwAUb//9UDrtTccENm6dGgYydH3CIxq18=
Subject key identifier:   AF:7D:AE:28:10:43:80:C6:45:5B:14:64:F4:5F:34:85:A6:0E:F7:37
Authority key identifier: CB:F9:CD:24:3C:ED:69:37:B6:BE:A5:71:02:81:4F:F9:BA:42:66:21
Certificate issuer:       /CN=cbf9cd243ced6937b6bea57102814ff9ba426621
Certificate serial:       01962F072B86DB6CAF801EC2AE4C9058DE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_nNJDztaTe2vqVxAoFP-bpCZiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: y_nNJDztaTe2vqVxAoFP-bpCZiE.crl (hash: Cv0sshF5UUQxzSzJHf7d8clVM+9d95EWPIjSF+flS1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2b:86:db:6c:af:80:1e:c2:ae:4c:90:58:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf9cd243ced6937b6bea57102814ff9ba426621
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=af7dae28104380c6455b1464f45f3485a60ef737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:0b:d6:1d:e6:d1:56:ff:41:cc:06:6b:4a:
                    8c:d1:7c:1c:c4:f8:d1:88:eb:e4:b8:bc:89:1d:d9:
                    e1:c4:d8:05:76:64:7b:34:23:6b:ab:e6:73:40:03:
                    23:38:06:e3:50:a4:f7:10:ec:27:df:4a:cb:af:7e:
                    d5:b0:1e:80:51:17:13:7b:9b:a3:86:88:c2:ba:86:
                    f2:5b:ec:cf:e5:b2:25:01:c7:10:90:d0:2f:d1:e2:
                    30:6c:32:a6:13:9a:78:32:1e:ce:fe:c8:b1:1b:86:
                    99:38:d1:40:25:96:b4:04:99:3c:99:80:7b:4e:76:
                    cb:5d:3a:74:65:01:41:c8:d8:5b:c1:2a:b8:f9:58:
                    ea:97:ff:bd:d7:a2:98:88:2d:16:b0:67:93:0b:0c:
                    0f:30:62:fb:95:55:b1:2b:66:18:47:43:57:cf:67:
                    b3:1d:55:40:69:f9:e3:bb:b6:ec:bb:3b:7c:ce:bb:
                    6c:4c:e3:92:d5:ff:5b:a1:e7:cd:9a:0f:66:59:da:
                    b0:0d:8b:c4:0b:a5:10:68:84:9a:85:90:28:43:12:
                    7c:a4:03:a6:45:bd:3e:ce:4c:84:ee:69:b6:2a:66:
                    52:9a:23:ff:5f:02:c0:e2:8c:b6:da:9d:e6:cd:58:
                    32:99:91:9b:27:49:fa:5e:07:da:2e:24:25:20:0f:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:AE:28:10:43:80:C6:45:5B:14:64:F4:5F:34:85:A6:0E:F7:37
            X509v3 Authority Key Identifier:
                keyid:CB:F9:CD:24:3C:ED:69:37:B6:BE:A5:71:02:81:4F:F9:BA:42:66:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_nNJDztaTe2vqVxAoFP-bpCZiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:e5:38:41:9b:7d:a2:9a:c6:3e:57:d1:74:d9:a6:a0:53:
         34:24:15:ba:c0:08:87:97:64:0f:82:ff:d6:2e:08:42:0a:0c:
         11:19:2b:b3:cf:3a:07:83:6b:7f:64:0e:7e:e0:6a:63:bf:e4:
         18:02:08:32:f0:e7:a2:5c:dc:13:4f:4c:89:c4:fe:cc:d3:4f:
         d7:d2:74:1d:f4:b5:f2:68:a9:c8:e3:e1:38:c8:f9:cc:bb:f5:
         06:f5:51:73:9c:95:8f:b7:58:4b:f0:2f:96:41:34:9e:9e:cc:
         a9:a5:be:96:8e:6a:35:a8:d9:3b:14:cf:90:a7:39:6f:8a:99:
         ff:6a:06:1b:8d:7e:55:45:66:2a:02:bf:46:00:78:4e:03:8b:
         2f:ef:a7:8c:c5:d0:98:95:3e:12:45:30:b5:6a:fc:79:e4:de:
         5d:c3:66:68:81:e4:9e:0e:30:7a:2b:e3:69:73:e0:94:3e:f6:
         76:01:70:57:b1:ee:f9:4f:37:4c:6b:cd:25:e9:79:7e:fd:14:
         25:b9:47:28:55:45:9b:41:1e:ab:63:08:2b:01:2c:bf:5f:73:
         3d:be:bd:71:50:87:ec:d6:70:ea:36:ec:11:6e:c4:a0:59:d3:
         ce:7f:c7:48:ab:8a:a3:a0:b8:e4:fc:98:64:ba:6b:f1:86:50:
         c2:eb:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----