Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File:                     n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier:          1Uc4MJSfXAB7nkvI+epLoKxjW1kX0Yv+1y5yJ04DIvY=
Subject key identifier:   4A:5E:5F:5B:EF:B2:D7:B2:73:B7:7E:E5:C6:A3:5C:71:64:C3:1C:77
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer:       /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial:       01962F07296947E2AB92534A2AEC40C92A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number:          0298
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 1uWXPJauvtvifVbThumN2raM6U0.roa (hash: Y17nAyKVcY518yw8/uPGoyc32qYJ3ixC6oOmJrlY3aE=)
                          2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: pqQRN5OIR+3vHSpR7uA09Pq3c3Vns/RTiXOiI03eDT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:29:69:47:e2:ab:92:53:4a:2a:ec:40:c9:2a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=4a5e5f5befb2d7b273b77ee5c6a35c7164c31c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:85:fd:f3:34:43:6e:96:1c:d7:cb:7b:ad:
                    ee:48:9a:f8:b9:6c:87:30:dd:a4:8c:1b:2d:cf:1e:
                    21:a7:b3:62:23:22:27:a5:06:07:b2:f8:49:99:57:
                    5a:5b:b1:ea:49:e7:89:b9:53:28:20:89:35:8b:d6:
                    7f:aa:fd:c5:4b:6f:b6:93:24:12:6a:a4:96:8b:6f:
                    87:b0:68:10:1f:72:f2:50:e2:86:69:ac:1d:6f:09:
                    fa:1f:6d:71:4f:55:02:b4:99:e4:a1:20:a9:f4:3f:
                    e0:d5:26:82:2d:64:b4:d5:f5:d4:f0:09:83:18:fb:
                    df:77:a3:d9:49:31:66:af:14:f1:36:3f:99:32:0a:
                    75:05:b2:d2:3e:d9:8d:47:9a:72:f4:8a:62:3e:9d:
                    4c:8c:87:00:9c:34:d8:c0:31:80:49:d9:a4:2c:1d:
                    9d:69:a7:42:e4:9a:8d:1f:ed:ae:5b:f5:3d:76:98:
                    9d:90:84:06:eb:3f:99:5d:bf:d9:76:77:b4:19:bc:
                    12:c2:81:0b:be:69:00:34:b5:9f:d8:cf:4f:a6:ef:
                    fd:62:ff:56:0b:30:26:92:7b:4c:d6:c2:80:81:76:
                    0a:fa:73:89:1b:d0:8c:e5:e1:bf:da:c5:43:2d:e5:
                    8f:57:ed:4b:c1:7b:21:ef:e5:6d:e7:de:96:f8:fd:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5E:5F:5B:EF:B2:D7:B2:73:B7:7E:E5:C6:A3:5C:71:64:C3:1C:77
            X509v3 Authority Key Identifier:
                keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8e:f2:53:81:c1:3c:c9:06:76:dd:5b:2e:69:40:c7:1e:fc:
         86:52:92:bc:d3:6d:0f:24:79:55:fe:56:80:b1:ca:88:72:4e:
         ad:be:55:4e:18:9a:23:56:92:ac:0f:5d:38:ba:b4:55:c7:b6:
         22:38:5c:16:0d:67:47:b5:60:0e:dd:f3:e7:50:75:91:5a:23:
         d1:7c:8a:fa:e1:20:81:5f:2b:ee:43:c7:bf:0d:7d:e3:43:27:
         0c:de:a8:ec:8d:6f:18:59:e0:72:35:c8:ad:ce:e8:2e:70:a8:
         da:97:c9:b0:df:ec:f4:87:14:bd:28:f0:80:06:4c:c3:80:42:
         d0:7a:92:9e:32:e8:e2:d1:f8:95:1f:3d:79:a8:62:16:18:81:
         d7:b4:23:f7:73:8d:ae:84:64:a3:6e:be:41:e5:3b:99:96:19:
         16:97:0a:12:6e:09:a1:75:04:7f:20:03:fe:82:d0:cf:25:0c:
         c2:cf:30:1f:99:e1:fd:16:90:ae:ee:bd:00:4b:1c:c5:52:43:
         06:1e:f0:4b:ff:91:d4:47:55:cc:86:ec:43:12:89:77:ac:bc:
         09:14:ab:c0:24:23:c1:ba:c3:59:79:2e:04:9c:3a:6a:f0:f1:
         89:ff:07:af:a6:e1:e2:58:73:a7:e0:bb:61:bf:91:42:77:66:
         b9:d9:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----