Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File:                     ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier:          GGIljBCNPsxEeKbv0OyHi/obB6xBpbJhSveZisUByao=
Subject key identifier:   86:73:9F:9C:FB:C4:F8:33:38:1D:21:D3:EE:B3:5A:61:17:C9:B2:6C
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer:       /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial:       01962E99B63B94EA4ECD4298FD4DFE9BF56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: hb7Rkqvk/2F3cXK80yNkFPGfKG+gnMXapM/PrkqIS/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b6:3b:94:ea:4e:cd:42:98:fd:4d:fe:9b:f5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=86739f9cfbc4f833381d21d3eeb35a6117c9b26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a2:1f:84:90:f5:67:e8:e0:6f:43:ec:ef:16:
                    ce:a1:8e:5f:c2:5b:82:96:a4:c2:c0:05:d2:6b:ca:
                    eb:5f:6d:a6:64:a9:3b:a3:49:77:44:57:4f:86:a8:
                    f3:5e:16:f0:59:93:ad:e4:47:62:19:f3:ea:52:7d:
                    d9:8c:21:75:7f:32:38:d0:bb:81:88:1a:f7:bc:30:
                    e6:9c:72:26:57:87:94:6c:09:c4:83:4d:03:09:7e:
                    68:df:bf:12:64:11:5b:d9:16:0e:03:b9:ab:95:37:
                    8a:fa:74:cf:33:10:52:5d:31:0a:3a:72:9c:5c:36:
                    f1:37:6e:b9:23:43:8c:0f:b0:03:48:84:23:d3:e0:
                    a9:35:a0:58:57:db:da:98:db:ef:0d:76:bd:c3:95:
                    23:63:45:25:25:52:7e:f7:92:b6:ae:2a:3d:86:87:
                    3b:24:2d:0f:86:2b:d2:70:9c:b4:ea:02:34:76:63:
                    37:7c:78:6d:12:7b:d6:06:c9:7f:1e:c1:df:08:8b:
                    ab:46:ba:76:1e:73:0c:f0:85:28:ec:6c:db:d0:4d:
                    80:bb:f0:f0:b9:07:1c:61:16:e7:23:6f:d2:13:0e:
                    be:3b:05:55:d4:94:c9:28:5c:36:61:37:d5:eb:01:
                    e3:1a:c5:fa:c8:09:08:ba:df:fd:9a:13:ec:82:44:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:73:9F:9C:FB:C4:F8:33:38:1D:21:D3:EE:B3:5A:61:17:C9:B2:6C
            X509v3 Authority Key Identifier:
                keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:49:19:6d:05:87:ec:56:be:75:4f:ab:5d:11:26:85:b5:
         2e:a8:4a:02:4d:e8:04:8a:9d:cf:34:70:ee:db:2c:8c:e2:ae:
         8a:50:4c:a0:83:4b:ba:a3:a0:4d:69:c0:51:0b:73:d8:a4:a0:
         a4:29:6d:b1:01:44:40:82:f2:78:28:7b:26:50:a5:09:d9:85:
         4a:8f:9f:27:76:33:5a:e1:a0:a7:8a:c4:e2:8a:f3:ad:16:93:
         2e:12:72:e9:dc:6c:a4:f5:45:52:ee:a1:83:de:f5:9c:08:fa:
         0b:57:dc:e2:4e:f7:b0:05:a5:02:6d:d5:b3:42:37:46:5b:96:
         15:4e:d5:34:e7:06:6f:27:cc:0b:d5:9e:fc:86:75:54:24:8d:
         1c:68:76:f7:28:d7:2e:18:9c:09:45:7d:5b:7c:24:69:f1:ba:
         a5:78:cf:c4:41:c0:b8:aa:7f:d5:6d:d7:3f:91:a8:e5:0c:06:
         50:2b:f3:c4:da:f6:42:48:60:ac:61:86:24:4a:89:c6:69:70:
         36:2e:d5:86:ad:c0:8d:94:b9:bd:27:c0:92:b6:b1:38:e6:85:
         2c:09:dd:90:b6:a5:82:d6:20:dd:18:16:73:cd:05:2e:27:b7:
         da:68:ed:29:94:c7:c6:bd:40:a5:e5:8b:29:8b:5c:8c:a8:7e:
         62:d4:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----