Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          k942GyrHHCnJWxaC54noa6mIOG03gXo2pxpYLML9clM=
Subject key identifier:   70:E8:3F:E0:F8:D7:50:58:91:1F:98:7F:10:3A:8D:77:E9:04:EC:C5
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       01962ECF89D22B579EFC12CA5750BB6841FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          1200
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 1S5NGl_9XzrIZlMPmsHgEW4H8RI.roa (hash: ZQeIY/xttmXPutXEtut0kcab8CenHX3mGEuBNFgJJJE=)
                          2: DW7jRSnbY34hE_RIyO6FIl_U_i4.roa (hash: Bs5rd92ASGZAZDzYbnXm9tO9ObUBPqRSYN5EMjrMJfE=)
                          3: OHCA3vQMxG1d25xR7UuiUEeJ818.roa (hash: O5s8l0cJjmVTzrkVW/B/tmzvvxU5Y9LtP5126UUkQZE=)
                          4: VcjKNddvZkM3oUg77hjobEZD-v4.roa (hash: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=)
                          5: ikC3r3gDMRV7rzOGGg-rqokymXI.roa (hash: zgCMDOXPzxWDouvwv/WvFaJhABZR8ZFNubvE8NCbA04=)
                          6: lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa (hash: 4aBF5aNmJAlF3RgZKlr2lhS8/MOTaZfHHnjAN6dRE6w=)
                          7: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: kqn8feusHkU3Ea7BltrdS1RINHgaOjgoiJhXsvoh+qg=)
                          8: znIVaHKYkyKBEQBVptVbnSPMRT0.roa (hash: g4EHnnn85toCFef30TdaJ5KqFEtNZHscTK/ZYfzTE6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:89:d2:2b:57:9e:fc:12:ca:57:50:bb:68:41:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=70e83fe0f8d75058911f987f103a8d77e904ecc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:c1:a7:9a:09:eb:85:c6:e0:3d:d6:d5:9d:
                    7d:1c:ec:ed:1c:69:13:7f:45:c0:c0:8b:d6:63:fd:
                    18:5d:6e:56:01:ed:04:9f:4b:6d:1f:c9:51:30:99:
                    c5:cf:0a:02:bb:0e:fa:98:60:16:6e:7a:98:ed:be:
                    be:42:d2:f0:44:2f:a0:ac:4a:97:b2:5c:8d:8e:9b:
                    df:53:24:71:22:03:c7:cf:9a:f9:b1:12:e2:fb:bc:
                    e3:1f:cb:23:f2:65:25:57:62:c5:95:74:38:75:ab:
                    77:2c:d8:1e:3d:7e:59:e6:b1:e6:b8:c9:bd:12:11:
                    ba:96:45:ea:b9:98:4a:f9:ab:92:3f:03:6f:4f:9c:
                    0b:56:eb:b8:73:2e:90:99:1d:2d:5b:8f:66:7d:4d:
                    f8:b1:28:0c:f0:e8:79:d2:d3:68:60:8e:8a:d0:56:
                    f6:b8:86:25:ab:20:bd:30:a3:61:33:10:b2:8c:6f:
                    43:b1:91:2a:18:45:b4:4f:a5:27:73:7f:3a:17:f8:
                    6a:55:db:13:b2:e3:be:6d:bd:b3:1a:56:65:f7:5e:
                    0a:c6:81:89:d4:84:c6:a5:ef:4e:a4:0d:17:62:72:
                    b8:25:03:49:0f:10:06:98:d0:4f:c8:0a:36:8e:8a:
                    3b:b0:1b:28:f2:9b:00:bb:01:d9:3c:58:90:eb:66:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:3F:E0:F8:D7:50:58:91:1F:98:7F:10:3A:8D:77:E9:04:EC:C5
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:2c:34:96:9e:a3:13:07:5b:0b:60:22:e5:99:70:2e:0b:
         9c:17:07:b6:f7:b2:b0:df:56:f9:fb:ec:97:c5:60:54:8e:a1:
         db:10:4f:b4:72:eb:da:9a:09:80:a4:dd:b4:47:ed:30:e3:c7:
         92:17:83:f6:33:6a:dd:e9:cf:b9:a4:11:4a:eb:bd:fe:69:ad:
         71:59:00:6b:64:d4:4b:6a:fd:2a:93:78:11:5b:ea:f9:03:03:
         91:f6:0a:4a:d5:59:11:c1:a0:e9:7d:8f:a6:2a:33:11:79:e0:
         70:85:b5:74:12:cb:78:7d:f3:41:b2:e7:5d:dd:51:0c:01:c3:
         98:b3:10:be:44:c9:a7:1e:b1:0d:6e:4f:4b:fc:50:af:5f:11:
         58:0f:2a:03:1e:8e:8f:a1:a7:55:c1:92:20:71:c9:e0:ce:c4:
         54:b7:2a:51:56:d2:29:f9:25:7b:3f:71:73:76:50:42:ee:54:
         7f:4e:76:40:ee:e1:e6:fd:b2:9a:99:96:f2:2c:5e:cc:81:3e:
         8a:dd:6c:a4:ec:35:1c:8a:e0:d9:74:68:88:e7:1a:b1:44:1a:
         0c:03:07:8e:ef:44:57:4d:e0:85:e9:24:1a:75:11:55:04:20:
         c9:5d:a9:67:9e:1c:52:6f:22:ea:06:eb:76:b8:03:e4:6c:fd:
         1b:2f:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----