Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File:                     yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier:          cOR2MMfhBzAVxr98MJlv6aw1jfP8w3lVm7UiV8536rA=
Subject key identifier:   DF:A6:87:98:AF:C9:91:3B:1D:04:E3:FC:D9:70:B5:BC:83:0D:F8:76
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer:       /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial:       01962ECF9A224411532CAE20A5B244A5C3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
                          2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: rIBiWfvooP1tq+utqP057No7ayneIfafBY5aaMsRW54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9a:22:44:11:53:2c:ae:20:a5:b2:44:a5:c3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=dfa68798afc9913b1d04e3fcd970b5bc830df876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:34:7b:5a:9a:08:39:93:f1:99:ff:a5:9c:
                    e2:94:9d:97:5d:5f:ab:fd:9b:02:ec:7f:e3:f1:7d:
                    d6:3d:98:d7:f6:61:18:82:82:94:58:64:2d:73:32:
                    e6:9c:b6:48:5b:80:2c:16:af:6b:4d:f4:d2:3f:a9:
                    82:b8:d6:86:ef:00:6e:f7:13:8c:47:41:2f:96:9c:
                    7b:d1:f0:7d:f1:d5:55:dc:04:60:c0:8d:d6:bf:a3:
                    23:31:39:72:83:40:1e:6c:7f:f1:50:44:70:79:ac:
                    8d:2d:67:f3:d4:6e:0c:b6:bb:29:96:3f:5a:0a:91:
                    06:79:84:a5:fa:ff:3b:d7:e7:7b:69:e0:36:54:9f:
                    e9:67:b9:4e:0a:61:54:bf:99:92:0f:3e:97:2a:0f:
                    5d:fb:8a:c4:dd:50:df:3b:3d:56:33:24:c6:b3:6e:
                    68:23:68:02:a6:eb:43:e0:be:36:4a:8b:ae:5c:df:
                    3e:4e:20:7f:ef:94:6b:ab:71:6e:5f:14:39:7c:78:
                    2f:02:07:79:71:13:70:df:ff:b3:38:b8:8d:15:b4:
                    c9:d2:63:5e:20:0c:29:f9:a4:f7:2d:22:1d:fb:f9:
                    6a:39:5e:4a:a5:ee:d0:4e:b5:57:a3:ea:04:39:f5:
                    c4:59:b5:a8:b2:e0:dc:eb:30:8a:cf:79:fc:46:fd:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:87:98:AF:C9:91:3B:1D:04:E3:FC:D9:70:B5:BC:83:0D:F8:76
            X509v3 Authority Key Identifier:
                keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:28:4c:b6:ca:ab:d7:81:35:7c:8a:e8:d8:be:fa:4d:5e:
         f4:76:5a:46:ec:48:e2:5e:83:95:24:d1:50:80:bf:84:dd:d5:
         4d:5f:69:ed:71:ca:be:c9:76:33:fb:ec:34:d1:0a:b8:6b:6f:
         d8:37:2c:77:01:55:d6:10:4b:3a:05:c1:36:f5:0a:0d:89:45:
         72:23:a7:47:40:36:8c:96:2c:9a:bc:0d:7d:49:ce:08:6a:af:
         d2:65:40:64:25:6a:ba:3e:98:19:d4:66:69:70:1e:54:ed:ed:
         51:ac:12:e6:56:9c:97:0c:55:c6:22:60:d0:4a:53:02:f9:62:
         a7:f1:7c:84:25:b0:47:a4:2a:cc:80:91:be:9d:9e:fe:31:1e:
         62:96:3e:ca:2f:01:86:c6:2d:73:39:a1:65:34:3d:00:99:86:
         36:7e:d2:bd:0f:4e:f8:c0:3c:f8:68:38:0f:72:25:f4:43:69:
         40:d5:2e:7a:2b:66:da:b2:03:df:03:c1:7b:ef:7c:a6:02:ff:
         84:eb:71:75:4d:d1:04:1a:d2:e8:f3:69:42:4e:b4:6d:72:1e:
         2a:ea:6b:46:46:8e:3d:ed:7a:a5:84:93:e0:b6:65:91:a3:52:
         cb:cc:1c:7a:78:c4:65:d3:bf:6d:f6:6b:9c:8c:5d:7f:51:fd:
         75:2a:8a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----