Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File:                     YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier:          zcNwc7d8ZhjdDzPqOm1j/PlJFSy3p+3Kc1HcyomOuIA=
Subject key identifier:   C8:01:D8:4D:99:16:72:7F:5E:5B:06:53:A7:E9:1F:DB:5E:41:55:BB
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer:       /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial:       01962F3D77B1AB8696B769D433D5F988DD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number:          08B0
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
                          2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
                          3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: l4gcKhq8Ve+LQ660sPHRliS0AOowm+H6XBGJ/uEXcv8=)
                          4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:b1:ab:86:96:b7:69:d4:33:d5:f9:88:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=c801d84d9916727f5e5b0653a7e91fdb5e4155bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:39:7f:d1:33:30:6f:9f:af:09:c6:ce:9a:ed:
                    21:8d:3f:6b:72:9a:49:d6:73:b0:4b:07:b5:fc:2e:
                    ff:8f:9c:53:8f:b2:ee:92:f6:19:41:6a:75:c7:17:
                    0c:04:78:be:dd:16:60:80:08:9e:9c:23:e5:d1:7e:
                    e8:23:74:89:6f:e2:71:75:17:89:2c:1b:30:ef:f6:
                    bc:c3:e5:f1:7d:4d:1c:60:3b:72:8d:b2:38:2c:cd:
                    ed:c5:3b:a4:3a:04:a9:64:9d:c8:4b:1c:2f:96:a7:
                    24:1e:df:36:18:31:fa:4c:6f:b9:45:1c:b2:fa:f1:
                    67:7a:76:63:fb:98:1b:03:07:29:7d:d8:83:c3:45:
                    e5:90:3b:82:01:03:c6:47:6e:3d:2e:54:b3:b6:b3:
                    20:ba:86:e2:14:1a:15:1b:60:e5:23:2c:86:fc:ed:
                    1b:82:ad:ab:db:29:df:46:95:d7:51:99:4b:6d:77:
                    f7:4d:2e:32:2e:1e:50:92:25:01:a1:8d:ef:39:9a:
                    ee:2f:dc:a7:2a:dc:63:1d:08:8f:1d:7b:eb:5c:47:
                    b3:55:60:3f:68:61:db:bc:14:4a:d2:b4:2c:72:61:
                    ff:30:cd:1d:cc:c3:6d:96:2e:da:fb:c5:48:2a:3b:
                    e6:83:63:f5:99:3f:28:47:68:53:84:ad:a7:0e:59:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:01:D8:4D:99:16:72:7F:5E:5B:06:53:A7:E9:1F:DB:5E:41:55:BB
            X509v3 Authority Key Identifier:
                keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:15:05:d3:c0:b4:b9:06:9c:ff:6d:0f:11:cb:dd:dc:23:
         f8:a5:72:3b:1a:c1:f3:38:ba:e6:1b:5c:89:61:ce:f9:b2:25:
         c3:0d:ea:3d:ff:af:db:0d:69:c2:27:92:b6:27:9f:55:b7:c9:
         ef:86:49:33:e8:4c:7d:fc:16:89:9d:dd:67:5a:4d:a5:f0:6d:
         f8:a5:44:36:e2:d1:f2:55:10:5b:ac:98:08:4e:b7:4e:20:a1:
         e3:d5:c5:df:bb:b6:7f:8f:e7:02:23:1a:f1:97:84:04:f0:1e:
         3b:09:42:bc:70:e8:f3:e0:1d:55:b6:ab:f5:b1:08:f2:65:f4:
         cf:fa:82:82:2e:0c:e8:e0:41:3c:14:bb:e3:c5:5b:4c:a6:bb:
         e9:66:fb:11:01:30:7a:3d:23:cf:ed:cf:7e:28:3c:df:2e:8d:
         eb:a9:2e:c1:d9:c0:86:08:3a:15:09:09:a0:25:32:38:64:88:
         43:28:39:55:ca:b6:0b:06:90:4c:86:af:55:4f:45:6c:a2:5b:
         7a:17:08:c3:4b:49:43:d8:b2:02:5f:e0:3c:93:b1:4f:a5:73:
         0b:eb:2d:d5:69:5b:82:dd:9a:f4:10:9c:e4:67:33:69:09:d8:
         39:23:93:39:5d:0d:33:7c:18:83:46:f2:d3:44:8f:1f:e5:03:
         82:fa:c6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----