Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File:                     y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier:          d9huSdxTRYsF2A5QRNtr3hnt4y16uewb0mwbibjiS8s=
Subject key identifier:   04:A3:DF:EF:1E:2B:B3:B0:59:69:2F:EB:47:C4:E4:81:5A:DD:8A:3D
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer:       /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial:       01962E61E607BA6E00157897AF730B29BD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number:          11EB
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
                          2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: 8ktGm82WTFlLahMNGYQ2AnlvSpicp22BONZEA0IRJzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e6:07:ba:6e:00:15:78:97:af:73:0b:29:bd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=04a3dfef1e2bb3b059692feb47c4e4815add8a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:97:ba:89:f5:f7:65:b7:92:d2:de:db:21:
                    43:6c:d2:fe:98:ee:13:e2:7d:a8:14:2d:4b:11:89:
                    2f:53:fa:2d:be:9d:cc:63:91:dd:95:6b:1c:27:74:
                    7f:1a:bd:4e:5c:8c:60:af:77:bf:99:d2:38:e2:13:
                    26:52:73:ba:53:39:98:47:f0:5a:42:dd:94:f5:df:
                    b1:6b:7c:62:b4:78:93:7a:70:39:ad:1d:52:1a:e3:
                    40:0f:3c:51:17:bd:ea:c6:f9:30:de:47:65:91:51:
                    f0:1e:de:62:2c:dd:98:95:cd:15:b6:1f:d5:dc:0c:
                    d7:fb:4b:82:46:72:92:a3:f4:f7:72:1b:04:b5:1d:
                    33:c3:b3:45:2c:b6:e8:d3:ac:58:47:2f:71:50:08:
                    90:77:10:2d:b7:ae:3f:f2:2a:64:73:22:72:e3:06:
                    49:9b:67:2d:b5:3b:3a:1d:4f:1c:68:1e:87:1e:ff:
                    de:1e:fd:ff:86:07:1b:dd:cc:ae:26:b4:f4:da:10:
                    d5:49:61:cf:60:b8:da:73:f6:8d:f9:0c:c6:8d:d7:
                    ad:d3:e4:3e:49:df:83:ff:35:07:75:73:99:7b:58:
                    f6:6f:4d:4c:12:33:5e:79:45:4e:fc:e3:23:e1:c9:
                    47:6b:ea:9d:4f:ed:fb:c5:63:68:de:5f:c3:1e:d7:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:DF:EF:1E:2B:B3:B0:59:69:2F:EB:47:C4:E4:81:5A:DD:8A:3D
            X509v3 Authority Key Identifier:
                keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:63:f8:1d:8d:97:56:a0:0b:4e:d8:75:cb:0d:d9:6d:77:f3:
         59:e0:2f:88:f4:f6:20:03:0a:b0:c2:ee:8c:bc:c3:8d:cf:da:
         0e:be:74:c4:5e:0d:f2:ee:6d:dd:81:cd:64:4c:60:dc:6c:0d:
         33:5e:d3:eb:37:a1:ed:fa:07:1e:ce:d6:01:e3:28:17:01:f1:
         01:a0:da:b1:f1:e8:27:79:22:37:4d:04:c9:6a:2d:36:40:56:
         71:7c:65:8c:f5:c6:38:18:80:3f:e1:b4:96:d3:54:15:b5:15:
         33:eb:cf:34:06:19:a3:b7:a7:73:3d:12:9e:18:a5:45:cb:43:
         42:62:6e:24:8c:44:3a:f7:a3:a7:95:cb:14:45:9e:6c:7e:d5:
         9c:33:bd:67:fd:30:4e:2a:b5:48:6a:10:1f:c9:93:b3:db:0d:
         ae:66:c4:3a:54:62:52:ed:dd:50:82:9e:cc:f9:ee:1d:af:35:
         ab:eb:ca:f3:2d:44:ae:89:62:aa:97:36:33:47:21:ed:73:bc:
         d3:76:fd:9e:fb:cd:fa:b0:65:30:a3:a4:12:1e:82:90:fb:85:
         cf:b3:59:5a:ba:f9:ac:2b:86:40:8a:f1:11:73:d9:17:d4:f0:
         ff:93:43:aa:53:2e:3d:9e:c9:14:27:09:02:6d:c8:b4:26:4e:
         68:6e:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----