Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File:                     ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier:          TXI8AgCOHmRWjCbVaQVSpw0QR3V6u8EJORN1w7hKHHI=
Subject key identifier:   33:B1:9E:73:0D:A9:03:A9:42:22:17:21:C5:82:E7:66:52:39:84:0E
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer:       /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial:       01962DF424051437C829B4ADD3EF54042D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
                          2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: h0sNglZqdhA2hAc2LBHoQI8IKQKxnus46I5qbmCQD5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:24:05:14:37:c8:29:b4:ad:d3:ef:54:04:2d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=33b19e730da903a942221721c582e7665239840e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:67:83:a4:19:42:76:73:99:ed:06:08:55:
                    8e:53:0a:d2:a0:31:bf:cd:12:3a:69:fd:63:97:28:
                    a1:b1:f9:d4:2a:ab:38:70:9e:24:3c:cb:64:ad:a8:
                    1b:64:5c:8b:41:84:ba:6b:5c:71:8e:83:f2:9c:e6:
                    de:4e:e6:0a:b5:76:64:fa:b8:3b:b1:ef:6c:a9:78:
                    ee:a6:4c:c1:57:50:b5:b5:44:f3:8d:0f:f8:a8:dc:
                    ac:a6:6e:b6:15:a6:e6:bd:38:7a:9d:28:37:88:42:
                    5d:f3:53:ed:ee:09:e3:50:1c:e9:86:41:ce:0f:51:
                    bc:72:91:25:d0:6c:9f:49:88:95:be:47:e5:92:89:
                    43:1f:34:d5:4c:16:a4:e8:16:3a:c6:7a:46:9d:be:
                    fd:bd:37:7b:de:14:87:28:1b:bd:90:36:e2:f7:cd:
                    af:37:a3:f2:e7:ff:22:11:e1:38:b1:e4:ce:44:34:
                    fa:a7:ca:cb:43:2c:57:84:6c:9d:de:17:ca:50:1c:
                    26:8a:bd:ca:96:2f:10:b2:6d:d7:33:93:f2:1d:f8:
                    07:fe:be:e1:a0:99:0a:b2:6c:a1:d7:39:c8:94:6a:
                    0b:52:e1:95:2e:6b:19:f7:97:d0:f5:62:dd:a0:7a:
                    9d:9e:ce:04:d0:cf:1e:83:5e:21:cf:99:78:20:c0:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B1:9E:73:0D:A9:03:A9:42:22:17:21:C5:82:E7:66:52:39:84:0E
            X509v3 Authority Key Identifier:
                keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:81:76:fc:30:c0:5a:bf:29:a4:0b:15:a5:d2:96:ce:90:
         14:02:29:c6:73:2a:5f:4d:be:d8:57:f8:da:29:fd:72:a5:5e:
         5d:d7:2d:96:d0:82:95:9a:e7:16:2c:5a:3e:8c:19:97:b0:a6:
         3a:1b:32:d0:94:0e:39:9c:42:33:8f:8c:22:03:c8:27:1e:2b:
         94:42:0c:8a:cb:62:b8:56:77:d1:ca:a6:4e:26:7d:64:8c:ae:
         cf:97:29:82:ac:dd:ec:35:71:ad:17:6e:4a:5a:74:ab:3d:4b:
         04:14:39:3f:56:e3:55:74:06:c1:c7:f5:92:4e:f4:bc:28:17:
         f1:8e:fb:57:da:dc:55:73:22:0f:29:eb:49:64:1e:2f:ee:a2:
         41:4f:33:1a:24:3d:5d:8e:a0:47:e9:d6:c1:9c:73:33:02:68:
         e3:94:c9:d6:fc:25:e1:83:75:b2:10:4f:fe:e0:e4:e3:22:2e:
         1e:2b:b7:72:b0:bc:b1:7c:b7:9d:45:aa:d9:34:55:41:89:94:
         57:19:12:b2:7c:ac:30:5a:77:db:37:af:87:43:1f:86:47:88:
         b7:a8:f0:22:01:57:4d:c5:4f:04:83:0b:4d:91:9e:d9:b9:3e:
         24:c1:9f:fd:5e:3e:c8:40:8d:59:af:ed:79:fa:d0:b3:50:dc:
         4b:53:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----