Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File:                     YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier:          qyttxxyWA01TqvxpBnZriwqXQdc8MMVN4p7ZJf+1aQM=
Subject key identifier:   39:75:42:10:7E:93:5F:2A:D4:FC:7C:46:8C:97:CC:72:C5:F3:DA:C8
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer:       /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial:       01962F3DA3785705629D27502B2131DD8D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number:          096C
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: E1lA4S/fAczymZu8y+kQTOluXV4hWzJD31/rfkfDauE=)
                          2: oNp64lcp-PwrYsQaBw1j30tzyNw.roa (hash: FzeHCqPb/tC2Vmdnn3r7gfGFiDclam5dSTVPZrLAWO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:78:57:05:62:9d:27:50:2b:21:31:dd:8d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=397542107e935f2ad4fc7c468c97cc72c5f3dac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:62:f4:d0:c7:cf:d4:c0:d1:ae:80:d2:12:
                    79:67:4d:c3:04:1e:76:4b:90:f0:c5:b7:a9:8c:98:
                    a1:cb:82:72:2f:19:ea:32:3e:6a:ad:dd:f5:0b:c1:
                    38:ad:61:94:98:1d:6d:cd:51:75:10:01:2c:08:62:
                    7e:28:21:79:60:ee:65:5c:44:03:bc:a5:6e:46:84:
                    2a:f1:64:7e:20:0b:bf:f6:50:9d:ca:c7:41:4c:61:
                    4a:f8:e8:c4:cc:df:73:a1:1f:9b:a2:c4:eb:2a:eb:
                    e4:84:a3:3c:45:19:2e:97:9a:88:0e:9a:44:af:4e:
                    a9:8c:88:36:d6:8c:85:97:7b:fa:f6:24:1e:f7:43:
                    4a:ec:38:49:94:1e:f0:15:37:7b:32:c7:c9:e6:16:
                    74:aa:8f:77:22:63:64:5f:06:5a:13:ca:b4:8f:a6:
                    dd:df:d4:37:ef:52:8d:6b:92:88:a5:a2:1a:37:17:
                    f4:c2:16:23:dc:85:75:7e:fb:08:d4:3a:78:ac:4b:
                    a5:b4:82:0b:75:39:d4:4a:5d:39:00:b7:20:8c:ca:
                    7e:d4:df:73:41:76:54:46:3e:6f:79:ab:64:fc:01:
                    bc:85:75:2e:26:8f:11:76:1f:f3:81:a9:2a:41:9f:
                    f8:d5:ce:a2:44:34:80:2d:53:06:8d:60:c0:92:ba:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:75:42:10:7E:93:5F:2A:D4:FC:7C:46:8C:97:CC:72:C5:F3:DA:C8
            X509v3 Authority Key Identifier:
                keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e3:9c:26:76:01:40:e2:99:6d:70:57:55:b8:ae:d0:8c:72:
         f4:78:75:12:e4:2b:bd:fd:9c:d6:3c:09:a9:06:e6:e6:5a:5b:
         2e:e8:4f:e4:ae:f0:e1:c2:0e:a5:9f:e2:20:e0:73:40:76:28:
         39:20:4c:57:b1:1c:2a:37:7b:a7:4b:75:c0:d4:b0:c4:01:12:
         ed:8d:2d:cd:33:58:15:6e:0a:8b:63:b4:c0:0f:6e:97:84:76:
         92:d7:4b:31:ce:85:0a:4e:6f:a6:0d:d2:3c:14:7e:a8:00:d5:
         61:2d:9c:79:95:de:6f:73:e9:35:36:d0:e7:46:79:b0:9c:97:
         cc:76:45:93:4f:fe:8d:d4:24:e1:58:61:7d:e8:3f:26:a2:f1:
         6b:60:c2:c3:24:3b:84:d1:62:38:ec:36:e9:25:7a:0b:7b:41:
         96:95:30:b2:9e:6a:1d:3f:55:39:12:1f:98:df:f1:40:4e:8c:
         9f:5c:5d:c3:2c:8c:60:e1:fc:a5:a2:a3:21:21:57:5e:a7:fc:
         22:49:13:49:3b:e0:9c:17:fe:c8:6b:fd:f1:b9:fe:92:04:35:
         86:d7:65:3f:73:20:83:aa:c2:cb:29:bd:6a:71:e3:a5:3f:ba:
         2d:8b:56:ae:53:d3:d9:d6:b8:5d:fc:ee:a1:23:d8:85:77:16:
         17:bd:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----