Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
File:                     ypzNgwt-AzCL9c8l5np_wr3glXw.mft (raw, json)
Hash identifier:          cRwx89xIQtWIwcUL/eUF123x1J9JVoyP0214S7arI/Y=
Subject key identifier:   EC:94:B2:68:B3:91:44:80:37:60:97:4F:97:B6:C3:62:C5:1F:7B:80
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Certificate issuer:       /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial:       01962ECFB8BFDFBD1EE111FAEA9C494B7873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
Manifest number:          0A7A
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 1-lyX4JIsY34qoSsN-PTTYSxCYz0.roa (hash: 6h3tZa9OQ8UDf48KQx4i86jA03XYZw8QmNFGA5NUQCA=)
                          2: 1X-psqrhXoWJNm9AGHsWuX9CEYk.roa (hash: bW01QgSO3kxqUT/liNPe0TPUpwe3PqHFLx6Llohhsy8=)
                          3: 8nba-exF3ZHVESE2CvVjIKuU3UQ.roa (hash: jxvFl3q0Zgzzo4QwCA+FiBdsIMPCA+I2+5CHXaI0+OI=)
                          4: AAPuozOtYNy4K61ZvTIYHjD5I7I.roa (hash: OcW+g0HeO6IaZSx3EEThLo6AY79MxD65KTP11DyWVvU=)
                          5: PEXdMp-4CvfhDpAVQ0Pz3ECZAhk.roa (hash: qaoxZI1AadmU8INHwPbDVXQK737+Qj88K4LOCtSbEyg=)
                          6: PFaPt8f1BXC24GQ6dyfAr47R1QA.roa (hash: wfai0T+UJzpZnxL10tPs80Oos9vwanBxSD/wrEIQWEo=)
                          7: e5Sy1VAry68r-4ha4VS5j2qDIh4.roa (hash: iAgJw0j0bHx4il0UO6E61c4MJfLKF0a3JiNbi25PF/w=)
                          8: gZGGAJn4KD99W2PWWIsURvOoimQ.roa (hash: vMmXSgbyVxEUVACS5btztN2cHUzgJFBf3PgLKKDGxyA=)
                          9: iSdpP7ZcrXle-CGEYFrwsY1kYrI.roa (hash: +6PdXaQuowtykR4waR/410l8flDm2QsBF8w2MV3GVtU=)
                          10: jWt_FdPMKhJ6LBUGm4GuQwlMer0.roa (hash: JSe4tFMgywTUkhZKCdS6lj1tYUGBxWS17wo5Kf6yHnk=)
                          11: luaak96rxl3BpQDOlilu-Ao8mkw.roa (hash: pwAYhEbt4FHFaEl56W0oBs/0SEuKAQ3pZ57+umcKBc0=)
                          12: ypzNgwt-AzCL9c8l5np_wr3glXw.crl (hash: Ii0sDoKTzrrIr7edhcHm+Dh1llg+mTrmiFmqRj35U0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b8:bf:df:bd:1e:e1:11:fa:ea:9c:49:4b:78:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=ec94b268b39144803760974f97b6c362c51f7b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:63:7f:c9:11:24:95:f3:c1:72:04:4f:cb:
                    29:fa:d1:5e:00:d4:26:83:33:80:92:30:97:62:09:
                    f1:04:b8:01:86:62:62:98:18:a6:4f:78:dd:3a:2f:
                    24:c2:85:f3:41:83:f5:0e:f8:2f:99:e1:dd:5d:45:
                    3c:68:ac:fb:b9:d1:4b:b9:de:bf:8a:36:15:36:51:
                    52:38:a2:ba:23:fd:9f:ee:29:84:6d:a2:39:4e:c4:
                    43:19:86:36:c6:78:df:8c:b4:3d:ab:a7:b9:ea:11:
                    5c:3b:32:6f:f9:17:96:d6:c3:89:52:e8:2c:e4:a5:
                    90:f5:34:76:6f:8a:63:bf:c5:07:85:fe:d1:1d:41:
                    4b:09:7c:6f:d3:8f:cf:a3:16:28:af:4b:e0:bc:c4:
                    92:05:b5:a4:eb:08:f5:23:95:f8:71:bb:a7:f4:60:
                    d9:8a:7c:ab:60:97:ff:63:4a:99:cd:3a:6d:43:96:
                    8d:c1:a0:43:87:b4:07:37:c4:70:2d:88:5f:76:9c:
                    b7:6e:95:3a:7d:2b:ee:04:20:72:ac:a5:49:9e:ac:
                    00:ec:9c:54:48:0a:fe:6f:e8:b7:61:87:a0:d1:43:
                    54:1c:9c:f9:fa:45:b0:b2:a8:5f:22:53:0f:ff:85:
                    fa:71:5c:7a:83:38:4a:a8:cb:b7:51:60:57:19:92:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:94:B2:68:B3:91:44:80:37:60:97:4F:97:B6:C3:62:C5:1F:7B:80
            X509v3 Authority Key Identifier:
                keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:87:e8:ee:61:11:f6:b3:29:0c:27:a9:55:07:b5:e6:6b:1f:
         05:7e:89:67:29:62:d2:3e:b9:30:0d:15:67:fd:53:00:56:93:
         33:9f:74:5f:a2:1b:02:ab:53:56:da:84:61:23:12:91:d6:ed:
         b5:a4:e8:99:68:1f:de:3a:65:be:a9:2a:bb:3e:e4:26:c6:cd:
         b8:31:ad:b8:16:5a:63:eb:ef:55:f0:64:4f:21:e4:90:72:c1:
         65:65:6a:bc:de:a6:c9:1a:17:7c:08:a7:fe:cf:36:fc:dd:b8:
         1b:fe:f8:73:bf:36:a2:28:a6:c5:40:3f:6f:bd:5a:34:4b:c8:
         6f:a6:8f:18:e1:52:ff:30:cf:93:fb:b4:e4:75:1a:b4:1e:f3:
         5d:d3:30:ac:d4:11:13:91:6d:97:c2:a4:c2:0c:ba:29:a5:82:
         f3:4d:ad:65:a1:06:63:d0:98:7f:56:6c:29:c0:a2:66:13:6f:
         f9:07:4f:28:86:47:55:61:b9:b4:fd:bf:32:8b:15:a0:67:ee:
         d6:2e:cf:cb:77:a5:49:48:db:ea:70:37:23:ff:f5:d7:ea:ff:
         d4:e8:1f:e1:90:1c:e8:27:f2:84:b1:e2:e1:06:aa:e8:a4:e6:
         44:6c:40:e7:c2:26:1f:e8:89:f1:2b:82:a2:67:20:f4:21:d7:
         6c:40:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----