Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File:                     YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier:          QIjoHQUBCMXhlCNoBwNHdnM/5tRoU2mKdu3cC46NrTQ=
Subject key identifier:   14:BE:02:E9:1E:B6:BB:EA:F6:BC:2F:ED:71:78:8A:77:3A:AF:BB:AF
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer:       /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial:       01962F06DDB942E7A23A92AC85FC2274BA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number:          1417
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: jc/vlqfB7RIJSLBDBBIxYmqbJ4+uZf6EiAPV/RV9WS8=)
                          2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
                          3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:b9:42:e7:a2:3a:92:ac:85:fc:22:74:ba:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=14be02e91eb6bbeaf6bc2fed71788a773aafbbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:c0:75:f1:7d:40:7d:95:75:e1:66:25:b2:
                    35:0f:ae:69:cf:0c:30:e1:a3:af:e0:55:00:58:ac:
                    24:38:07:b9:f4:10:15:b5:4a:89:e3:93:70:5c:72:
                    6e:db:66:50:4c:81:01:10:e7:83:e1:20:5a:ca:1e:
                    f2:95:84:2b:62:33:17:3b:2e:0a:5c:88:18:fc:59:
                    6a:f1:26:b2:b8:93:4b:c7:75:18:63:31:37:61:f0:
                    e4:43:7d:88:42:b8:c3:9a:f7:00:bc:33:8a:5b:6e:
                    e9:e5:50:d8:43:a0:ea:dd:5c:12:ad:40:9d:03:14:
                    a8:1a:fd:56:56:43:92:06:95:23:1a:d4:39:7e:91:
                    dd:32:b9:b0:36:5c:f5:1b:02:c4:2f:9d:33:ef:74:
                    04:37:52:6e:8a:e3:00:d0:0a:cc:dd:ec:08:7f:a3:
                    e1:b9:14:23:2e:b9:8a:56:aa:21:8d:18:88:52:75:
                    5c:5e:3a:3d:66:93:14:43:97:41:8c:7c:e1:c1:7a:
                    71:2e:ec:f3:e8:e1:22:6d:95:82:d4:c9:3a:12:62:
                    3d:b5:89:2d:56:1e:33:69:53:72:e4:e2:a5:d4:46:
                    45:26:89:89:c6:a8:a0:ad:36:7c:e1:f3:78:66:a5:
                    25:59:f2:4e:aa:5c:92:0b:ad:51:8a:5a:d6:22:88:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:02:E9:1E:B6:BB:EA:F6:BC:2F:ED:71:78:8A:77:3A:AF:BB:AF
            X509v3 Authority Key Identifier:
                keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:5e:d2:c3:d3:79:8b:04:97:ca:e7:74:38:fe:a4:77:24:
         58:8b:7b:94:b7:09:25:99:59:70:a0:1e:f3:5c:f1:a1:a6:bc:
         79:56:63:5a:a2:95:65:43:e6:9a:87:c7:3b:e4:41:fd:b0:16:
         13:27:09:91:0a:14:3d:c3:56:71:37:08:fd:d3:05:e2:2d:1a:
         f8:b9:88:31:02:85:a0:05:51:f3:ce:25:6c:a2:f5:21:47:48:
         60:45:65:6d:41:84:a6:fa:bd:b7:58:55:75:7d:06:1b:f8:ee:
         56:73:73:44:37:74:2b:7b:bd:68:49:90:cd:bd:97:11:d6:62:
         10:18:67:70:75:dd:e3:1d:10:62:47:33:41:65:2e:10:70:2e:
         96:5e:d7:c9:a3:78:3c:6e:1f:d9:9d:9b:86:0e:78:ef:56:86:
         ee:14:77:20:bc:d6:6d:ea:a7:16:38:d4:41:33:3e:55:e9:8a:
         6d:5d:55:4b:42:b7:60:80:4f:50:ec:33:bb:9c:3d:95:94:6f:
         5a:95:3b:ab:13:9e:7a:94:d6:76:2f:b6:5f:c7:18:7c:eb:a1:
         cd:0e:43:3e:da:2d:bf:45:af:11:f4:f2:f9:3e:9e:36:cd:7e:
         29:27:fc:88:b0:f3:10:35:37:27:7f:38:0f:01:a8:36:04:b9:
         ac:b3:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----