Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
File:                     y3yVUPThoer5UHL7G5q7JpVNJj0.mft (raw, json)
Hash identifier:          /XeVWBaPrgIlduM5T9Uszw80aBV+A0fO9uAORZuAArI=
Subject key identifier:   8F:33:D1:6A:3C:95:4B:18:BF:11:2E:5F:51:41:A1:D4:A9:61:4C:3D
Authority key identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
Certificate issuer:       /CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Certificate serial:       01962F7423DD9A2932F9F15EB6B502719400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
Manifest number:          0B92
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: y3yVUPThoer5UHL7G5q7JpVNJj0.crl (hash: sf6BGYJmJT9Uhx2njZKx/BysVkuR/cgKN3/2anxH9QA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:23:dd:9a:29:32:f9:f1:5e:b6:b5:02:71:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=8f33d16a3c954b18bf112e5f5141a1d4a9614c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:e4:68:fc:23:23:89:b1:e0:89:d4:07:5b:
                    2b:4a:f9:8e:aa:bc:5e:4a:21:2f:aa:b5:c0:ab:d1:
                    6e:16:ed:cc:e0:96:cf:65:60:39:48:fe:68:d1:d7:
                    c4:6e:c8:b2:aa:7c:db:6d:91:b0:20:7c:88:6b:44:
                    db:2b:c0:e6:1d:ad:89:f5:97:df:79:4b:a2:7f:cd:
                    4f:06:97:29:85:04:97:f9:3e:f1:f9:c8:d8:db:b6:
                    8b:b7:60:bb:09:58:6c:a5:90:2b:8a:bb:38:12:2b:
                    05:03:36:04:52:69:1b:44:2c:d2:84:65:18:ec:97:
                    5c:9e:14:92:22:58:66:80:e0:86:38:a2:c8:9a:bf:
                    88:2f:8f:0e:10:52:0a:80:27:10:f4:6f:3c:42:90:
                    7a:08:29:14:93:19:05:c3:60:e0:7e:fc:65:f7:f9:
                    68:18:70:45:f2:43:b9:cb:4c:ae:2b:89:b2:b8:42:
                    b3:45:7c:64:69:d7:78:18:4a:53:94:4f:8f:9d:e5:
                    fb:81:21:df:9e:a7:27:4d:ae:99:a1:90:73:03:89:
                    d6:01:c8:3a:89:3e:26:f1:6c:6d:e6:6e:be:f0:b9:
                    fe:32:e2:bf:0a:f8:8e:55:16:2a:f3:0d:a7:f0:d2:
                    d0:c7:1e:32:84:2c:5a:0c:ce:7f:dd:19:f8:bd:df:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:33:D1:6A:3C:95:4B:18:BF:11:2E:5F:51:41:A1:D4:A9:61:4C:3D
            X509v3 Authority Key Identifier:
                keyid:CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:b3:95:7a:a1:d5:3f:16:70:42:ac:64:f2:58:6c:d1:0c:
         d8:0c:0f:92:d3:d9:15:26:39:aa:fd:1d:99:10:74:82:c2:6f:
         1b:d6:e3:9c:e4:5b:da:d7:e7:fb:98:5c:01:3d:16:d8:18:00:
         1c:69:70:01:a4:52:75:fc:2f:2e:64:bc:63:b0:10:74:f6:4a:
         66:73:83:92:a2:95:90:f4:c4:5d:8a:31:39:2b:89:fb:de:24:
         1b:b5:7f:23:25:5d:fc:08:77:ba:ae:f0:42:6b:07:b1:35:47:
         fb:fc:be:fe:fa:93:89:20:1f:6c:78:4e:bf:d7:20:73:bd:3d:
         cd:db:67:af:5c:90:8b:a9:2e:11:c0:bc:09:f8:7b:24:ab:14:
         ad:66:96:fe:18:43:1e:89:e0:4f:70:f9:a4:d9:de:eb:02:92:
         77:f2:51:2f:c0:06:a5:22:52:58:ef:ea:36:f6:d4:04:da:43:
         1f:ad:9d:95:10:ef:c1:65:08:22:7c:11:74:2e:7b:16:cc:5d:
         7d:90:1e:ee:d6:67:ef:02:80:31:4a:34:b2:fa:e8:a2:aa:24:
         3d:a8:74:e4:fe:de:4c:7b:65:41:40:82:06:32:b2:db:48:50:
         56:16:32:58:d3:18:48:33:0d:24:4c:14:95:5d:a0:77:c5:a7:
         4a:68:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----