Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File:                     YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier:          EW7Q0uz6rixcZGMuJz+geaSB5XiR65RUoE2r0kEXEIw=
Subject key identifier:   61:3C:4D:4A:7D:1D:35:EA:33:6E:BD:E2:0D:0A:BB:3F:C3:5A:C1:12
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       01962E61B53D23D47D52706B075600AEB7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 5FhhHCPWa4-v3je2lNasEQ6KBEA.roa (hash: egC6kLz81t2QzmqWPKo0ntXC4597XNyXx7ou4kY8DDw=)
                          2: XEdeUqJtGvf3nuw3JhTcNjeaswY.roa (hash: dWEpXPSMYLWolJCKQgqJKX5Frojz6fYc/emv0J+yYog=)
                          3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: 9UtHMTD8ekCPqC3PqGEq0t7Fwvrq7uiol6IbiQxE9Pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b5:3d:23:d4:7d:52:70:6b:07:56:00:ae:b7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=613c4d4a7d1d35ea336ebde20d0abb3fc35ac112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:43:ef:14:a1:15:64:fb:db:04:b6:de:72:
                    38:1b:35:8d:55:05:24:20:fd:37:d8:9a:34:f4:4b:
                    78:7c:ab:cb:a4:75:5a:47:fc:c4:67:41:ba:09:5e:
                    a8:bb:95:10:1f:04:77:7a:c4:0b:4e:54:0a:73:33:
                    b5:c6:c9:33:ef:fc:c1:0c:cf:0f:bb:5d:15:e4:6c:
                    fd:bc:bd:a6:7d:6b:0e:0b:ce:e5:bd:7e:bc:43:3c:
                    44:fe:60:71:53:6e:e8:de:21:ea:b5:45:8f:d8:73:
                    86:bc:b9:21:11:ae:60:9d:28:8b:f3:3b:8f:8f:ab:
                    7b:ad:ed:41:85:50:3c:9b:fa:b6:30:49:7f:1e:5d:
                    97:6d:c9:3b:51:aa:13:df:57:19:4c:e3:95:39:3b:
                    44:c9:ae:a6:e1:49:43:90:47:a1:16:57:35:61:5c:
                    59:3c:79:86:dc:9f:b3:92:a7:7a:d5:ab:62:50:fc:
                    aa:7c:09:41:d1:32:22:89:f6:d3:0b:55:48:43:57:
                    af:c8:db:84:c4:09:7b:7b:02:36:ed:3a:e0:e6:cf:
                    44:f0:5a:4c:29:c4:a0:6d:10:3d:3f:15:e4:14:ac:
                    8d:92:63:2b:41:43:fb:f1:99:de:78:ae:c4:9d:00:
                    84:79:06:6f:75:59:3f:2b:ec:0b:c3:1a:c3:99:91:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3C:4D:4A:7D:1D:35:EA:33:6E:BD:E2:0D:0A:BB:3F:C3:5A:C1:12
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:67:61:6f:66:1f:ec:4d:63:79:c7:21:ab:4f:e5:16:66:
         30:29:3f:ee:cb:35:f8:92:b7:68:c5:13:40:c4:0e:68:01:2d:
         3c:0b:81:18:25:dc:44:7c:4c:f9:ea:ac:cf:96:f8:2b:a5:ea:
         21:79:48:c6:00:0b:64:da:ca:85:8d:da:8d:7d:8f:1b:7f:a3:
         dd:16:ab:2b:b6:97:d2:96:a2:aa:cf:ff:c2:71:58:f8:e8:13:
         9c:47:48:87:45:1f:0c:8c:60:78:64:bf:a3:a7:a0:0e:32:53:
         22:35:f4:52:c4:12:19:40:95:4a:ed:c9:5f:2a:1b:93:de:6f:
         56:d9:f7:3a:88:75:bc:1b:46:a0:95:7c:a8:00:13:83:48:24:
         31:10:09:26:35:2a:14:8d:7b:bf:06:9f:92:af:99:ff:3d:16:
         cd:e7:19:a2:37:f1:6f:ac:64:11:dd:ce:da:0d:f4:02:fb:d2:
         10:9c:8b:4d:9c:28:9b:2d:86:f4:80:b9:76:e8:ea:37:f6:27:
         c9:6a:8a:da:e7:3a:87:0a:78:e3:a5:33:c6:a2:ec:53:65:eb:
         87:e8:21:6e:fe:ef:f3:4b:18:2e:8c:a6:28:68:65:be:0c:9a:
         96:cd:cf:2d:93:a6:8e:11:b1:c0:91:7e:d2:24:10:97:b0:7c:
         11:83:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----