Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File:                     YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier:          NaDzSnv5qAPHKvJNpprvtx++3XbCvitMKJw9HPycjYY=
Subject key identifier:   16:AE:7C:C1:25:ED:B0:3B:2B:B4:C0:AB:19:1D:40:5B:74:A6:D8:B1
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer:       /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial:       01962E2AF6B1D80720A2B8E6215E25029BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: HdZatOGTRO1KyeMy3aZmjKq5OoviGkxfWWmCfneUhlc=)
                          2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f6:b1:d8:07:20:a2:b8:e6:21:5e:25:02:9b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=16ae7cc125edb03b2bb4c0ab191d405b74a6d8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:ea:69:80:08:2d:96:9a:66:1c:9c:31:98:
                    89:a8:03:63:ea:60:bd:12:76:08:1c:7d:4a:f9:9d:
                    f0:97:00:2f:55:d1:97:fb:24:84:66:61:97:4e:18:
                    31:99:61:b2:37:81:c8:59:de:bd:19:52:e6:bf:cd:
                    8b:61:e3:b4:06:d8:67:c1:4a:b7:80:f0:ae:17:03:
                    22:11:4c:f4:59:db:f1:a5:76:8b:5b:a1:3c:d2:1e:
                    9a:4f:eb:dc:a7:02:0e:4f:62:28:2f:25:bf:d0:fd:
                    ce:fb:1b:09:f6:d8:26:90:fb:84:6a:45:b6:b0:24:
                    14:c9:01:99:d5:b5:00:bc:ea:11:5d:a8:90:8d:f4:
                    27:db:41:35:3b:b0:11:71:c4:07:f1:3d:af:05:b5:
                    79:e4:cf:cd:d7:4f:08:13:2e:01:97:bf:88:1e:56:
                    37:2a:3b:66:a1:36:b9:1b:81:43:24:82:54:86:25:
                    84:15:c4:87:c3:9b:d1:07:5e:bc:b8:3c:5f:37:be:
                    50:f2:e7:00:fe:24:7e:f4:3e:4b:34:53:c2:9d:0d:
                    a1:37:74:e0:37:80:ee:c8:a6:1d:6f:b6:a0:58:db:
                    7e:20:4f:cc:20:86:6c:ee:74:62:69:b1:b9:fc:0d:
                    9e:b6:08:a1:68:a9:13:1b:f5:ba:44:10:85:bb:36:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AE:7C:C1:25:ED:B0:3B:2B:B4:C0:AB:19:1D:40:5B:74:A6:D8:B1
            X509v3 Authority Key Identifier:
                keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:7e:6b:66:72:88:fb:86:5d:4b:23:4c:9a:d1:04:ec:4c:
         ec:e2:82:42:63:ce:5b:17:99:f9:b7:0b:00:a1:d2:98:f1:4a:
         f1:b3:39:33:7b:76:54:2e:50:c9:ed:aa:c1:15:f5:16:ae:cd:
         bb:90:2b:6f:b2:4e:26:ad:d7:38:81:8e:ab:07:65:9a:39:55:
         04:e9:9f:67:ff:e6:a3:a0:01:2f:11:51:65:18:8b:e3:17:f0:
         b2:59:07:83:16:9d:28:a3:1d:08:a7:34:4a:25:b1:16:b6:48:
         56:94:a3:98:3f:1a:7f:56:9c:19:3b:09:4c:b5:d3:4d:6d:66:
         83:b2:25:78:0c:a5:f8:e5:a7:b8:5f:49:41:ea:5c:32:2e:f3:
         29:53:35:41:10:81:8e:b4:f6:8e:2f:fc:29:ee:86:c5:2a:c3:
         a4:e7:e8:80:a5:2b:3d:e9:7c:c0:1e:aa:da:8a:2a:be:49:03:
         92:46:69:06:d2:0c:21:9c:4e:e0:fe:67:10:1c:2c:4d:19:b4:
         7f:49:2e:d1:4a:55:a1:b5:48:29:06:2d:3c:cc:c2:2a:37:64:
         93:91:94:5e:4b:6a:86:b8:f0:c8:a8:31:d1:9e:91:4f:13:14:
         3d:c8:85:75:bb:86:41:b4:42:42:0c:a4:ba:eb:94:a8:a4:22:
         f3:5c:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----