Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File:                     YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier:          3iExqqifRJQhksIUNS0YcZfZelrjOIpRb+G547QEghI=
Subject key identifier:   79:AA:AA:3E:2E:94:A8:11:C3:32:CE:69:62:09:A7:E0:70:35:0A:50
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer:       /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial:       01962DF421F5B426B54A9F05D42E61143390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number:          0D9A
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: ciky5P2XX3z5xN+VSy8Q1HgFsR4Vc9VYE2lad1Wf32I=)
                          2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:21:f5:b4:26:b5:4a:9f:05:d4:2e:61:14:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=79aaaa3e2e94a811c332ce696209a7e070350a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:f8:2b:c6:a8:02:08:f2:b3:0b:a4:d7:96:
                    bd:ee:9d:19:43:04:d0:a0:b7:51:92:e4:10:c3:e5:
                    4a:2e:14:38:6a:0e:43:18:e8:d9:87:f1:b3:04:5e:
                    e2:2b:68:2c:e8:ed:64:2d:e5:3c:3e:cc:7b:3d:2f:
                    83:a6:c6:a6:6b:9d:1b:a9:3f:42:fe:01:b8:55:4c:
                    99:14:ea:98:21:4c:aa:2c:57:33:d1:dd:dc:f7:b7:
                    5a:de:1a:bd:0b:1a:57:41:d5:66:9c:b4:c4:3c:bc:
                    65:e3:24:bb:48:e2:7d:a0:db:f0:f9:17:f9:a0:4f:
                    a9:41:cf:ca:cd:2b:20:f0:2e:f1:be:b6:f8:4d:d9:
                    66:bd:51:de:65:64:c5:02:31:36:1b:52:ee:6a:77:
                    41:dc:98:8d:d7:d6:fe:2a:e3:dd:6c:34:7b:af:a9:
                    e8:5b:7a:83:e0:f3:28:08:c0:8a:88:be:8f:46:e3:
                    3b:bc:9a:f3:9a:b2:db:cb:b2:1f:44:d5:10:fb:27:
                    98:49:2c:77:10:52:18:0f:bd:14:6f:8b:ae:3d:65:
                    35:53:3f:be:02:67:31:e9:f9:98:bb:77:ac:b6:cf:
                    f9:13:91:db:2d:d0:ae:e4:b9:ee:7c:27:d7:ff:7e:
                    2c:97:47:86:dd:64:79:98:e3:9e:fd:95:f9:06:55:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:AA:3E:2E:94:A8:11:C3:32:CE:69:62:09:A7:E0:70:35:0A:50
            X509v3 Authority Key Identifier:
                keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:34:2e:b0:27:02:a6:34:25:96:4a:83:79:00:9c:f8:21:
         47:df:a3:3f:86:71:30:10:4f:16:0e:a9:f0:63:d6:e3:16:a0:
         88:18:1b:d9:47:cf:37:cc:80:a5:de:38:29:1b:6e:5a:57:65:
         70:27:61:d5:5b:63:18:04:b1:29:85:80:46:bf:e8:cb:a6:69:
         de:ca:8a:12:cc:21:81:77:f2:11:ba:48:3e:06:7a:93:b9:af:
         d8:04:9e:1e:07:30:04:48:d8:8e:36:d1:83:06:23:c8:d9:89:
         26:35:7f:5e:cb:e8:ca:a9:ae:22:8a:73:3e:a2:60:c0:81:f4:
         c4:5d:22:c4:25:fb:f2:41:8a:d1:23:7e:9a:05:46:86:7a:11:
         b1:e2:5d:6a:53:40:09:89:bd:55:4e:ec:fd:f6:d4:12:3b:18:
         33:4a:40:46:4d:d6:76:70:24:c2:a1:4b:7b:af:81:f3:9d:40:
         9e:73:c0:17:36:1f:25:9e:b0:84:48:98:d4:c2:56:1f:e6:f7:
         bd:58:b9:25:db:16:50:65:f4:ac:73:cf:20:7f:da:44:3f:0b:
         28:9a:73:3e:6a:4d:d7:99:1e:79:e3:3b:9d:04:9f:ad:8b:ef:
         19:5c:11:9f:5c:14:9c:8b:91:d2:89:8b:99:04:56:d6:8b:97:
         4d:e1:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----