Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File:                     Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier:          8pwSKFcQ0bVjBfL7HZAoTLT5PJj27OQYMFr1wVDcsPI=
Subject key identifier:   98:B3:B8:0C:90:49:26:F9:8B:A5:24:8A:F7:69:82:BE:84:01:8B:D7
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer:       /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial:       01962F06FAE2F65FB23C0AACB7743590FACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number:          0648
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=)
                          2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: syrJx10kYJnxswnn4qGUbGKEOUQzDsmStZajAQZWwjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:e2:f6:5f:b2:3c:0a:ac:b7:74:35:90:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=98b3b80c904926f98ba5248af76982be84018bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:16:94:f2:7a:5d:ee:66:a7:32:22:8a:8e:
                    25:9e:0f:4e:0e:a7:ac:79:a4:8c:9c:e6:d8:fa:6b:
                    aa:09:5d:00:4d:4d:f1:4c:5c:ee:c8:5a:3d:fd:d1:
                    ee:3a:f6:36:42:6d:43:a4:ac:f1:62:73:ec:47:30:
                    7b:98:98:3a:57:d7:ec:3f:7b:76:f0:6d:44:46:12:
                    1e:24:00:13:76:50:52:80:dc:f0:a6:c6:91:8b:57:
                    c8:cb:c7:90:0e:29:1e:7e:8e:71:5e:7e:f7:68:b2:
                    59:13:3e:68:f4:66:fd:4d:55:0c:ed:8e:7c:70:5f:
                    75:88:20:12:41:bd:6e:94:92:84:4b:d5:53:7b:13:
                    23:eb:1b:6b:8c:d4:73:a9:c7:2c:f3:f8:95:c5:09:
                    11:a8:96:5b:60:ed:b3:ef:da:00:66:bf:36:41:56:
                    1a:f0:47:bf:3e:9e:f7:02:55:80:56:9b:61:93:4d:
                    00:a3:71:85:42:70:78:7d:a7:42:dc:2f:49:c4:b3:
                    e1:73:90:e9:5e:36:1d:11:27:bd:86:64:12:df:75:
                    e2:93:a0:58:2c:b5:6c:4a:25:b3:77:d8:32:66:0e:
                    f8:1f:62:a2:f2:b1:1f:b8:67:0f:f2:7c:38:a8:49:
                    58:ee:da:1a:44:6c:19:ec:45:2e:e1:24:31:fa:2c:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B3:B8:0C:90:49:26:F9:8B:A5:24:8A:F7:69:82:BE:84:01:8B:D7
            X509v3 Authority Key Identifier:
                keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:64:86:d8:59:e7:4d:f4:c1:27:93:50:de:e6:c6:61:3b:a6:
         09:b5:a0:49:b7:be:e6:8a:cf:a5:e9:30:1b:a4:d1:9f:06:ce:
         9f:e9:5f:01:11:61:5a:b6:1b:30:e5:32:fe:91:e7:42:78:eb:
         dd:33:89:7f:3d:03:3c:ce:60:c2:b7:6a:8a:f3:39:d2:e8:72:
         ba:4b:8e:0f:ab:55:4d:bb:68:7b:b9:b3:04:4e:dc:1d:b5:2a:
         5d:cd:34:e3:63:ee:1a:d6:48:ee:db:0f:78:1f:04:e9:bf:1d:
         b7:90:c3:67:3e:92:e9:3e:2e:c9:8e:2b:62:ce:0e:b1:a8:fa:
         0b:36:86:db:6b:e0:ec:b4:b1:cb:1c:ba:a8:df:75:29:ee:84:
         7a:be:83:ae:cb:52:c2:91:23:18:72:74:83:bf:f6:1b:8c:b3:
         a9:88:84:d0:db:63:bc:d4:09:80:f1:94:aa:5e:e2:7f:de:ea:
         1a:58:cf:d0:9e:ca:5d:d3:b6:95:b9:c0:cb:2e:df:23:b3:50:
         dc:b1:6b:e1:86:c7:5f:14:40:c7:2a:74:c0:da:f7:c7:63:05:
         b1:29:93:ff:a5:4e:82:67:54:f9:9b:b3:65:4c:86:2b:f2:5b:
         61:fe:3c:17:2b:23:a6:41:80:38:a5:5b:18:88:40:5b:64:7a:
         1e:82:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----