Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File:                     yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier:          2RVD19cMKTksplhFdtGpqY/vMFeR3Z+ba7n+B9ufw1Y=
Subject key identifier:   10:D2:19:36:69:61:99:44:77:A4:9D:A7:05:3E:9C:3B:FE:2C:4A:60
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer:       /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial:       01962F06581148B3D7CF95FDD3EE5C16B6BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number:          0F32
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
                          2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
                          3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: axsxh3/ib2fv9EP9gwusXJ+7AHoAWOfo0T3T2P8eSrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:11:48:b3:d7:cf:95:fd:d3:ee:5c:16:b6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=10d219366961994477a49da7053e9c3bfe2c4a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:a1:9a:cf:32:8c:73:dc:a6:a6:32:c0:a1:
                    ac:f9:31:55:98:71:8f:10:09:25:bf:96:0a:6e:78:
                    98:54:91:a1:42:e4:85:e0:a6:37:93:a4:11:5f:70:
                    d1:c7:7d:79:3a:e6:20:33:26:7f:c5:bd:b9:c7:ab:
                    25:76:11:bd:4d:03:32:8d:a8:4d:49:ae:f2:53:12:
                    04:8a:e3:6c:f7:ee:f5:b3:b6:cb:dd:f8:36:b1:a2:
                    76:2e:2d:dc:12:dd:3c:78:9a:8f:79:46:5c:65:cd:
                    77:50:92:f9:12:06:68:f0:41:a1:2f:e0:2c:eb:21:
                    11:07:59:65:fc:24:74:66:6b:46:87:27:06:8b:82:
                    30:2a:e7:46:0e:48:60:1f:cb:08:93:40:d4:90:83:
                    0c:99:87:a9:53:d4:60:96:ee:a4:e3:f0:b5:13:bb:
                    59:81:cc:49:5f:25:2b:d6:83:84:42:18:a8:40:b4:
                    c8:20:37:34:bd:8f:6c:7b:f9:14:92:90:35:4c:7b:
                    ee:60:34:25:f8:f1:36:94:5d:b2:1f:6e:e8:fb:ec:
                    a6:0b:b0:28:39:38:f1:92:ea:52:3a:0f:29:77:72:
                    f1:4d:9e:9d:3f:81:c0:23:8e:e7:0b:ef:3b:f6:a2:
                    17:f8:3f:cc:19:ff:ad:7c:4e:ce:30:df:d5:25:4f:
                    e3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D2:19:36:69:61:99:44:77:A4:9D:A7:05:3E:9C:3B:FE:2C:4A:60
            X509v3 Authority Key Identifier:
                keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:17:60:7f:a0:a4:97:56:36:e7:6f:ab:55:9e:3a:ad:2a:
         cf:00:94:7a:f1:80:70:1b:cf:de:11:47:2b:70:71:02:b6:0a:
         c7:28:61:01:41:f2:d5:dc:ed:27:88:50:d9:96:44:60:53:3e:
         db:bc:ca:2f:56:b2:00:6c:b1:ad:02:02:75:88:ab:f9:fb:58:
         09:ec:26:94:67:52:6b:7f:7a:35:4e:72:54:6c:b4:3b:be:7d:
         3a:d6:ea:6d:d1:c1:2d:d3:52:41:2f:45:f2:a7:e4:b5:7f:a1:
         a2:05:55:e3:33:de:0b:5b:f7:92:7b:05:9a:33:83:4e:90:37:
         84:e9:dc:34:70:11:20:37:eb:79:cc:a6:da:a5:45:30:3f:a6:
         93:c6:f8:21:57:6e:7b:46:85:4f:8f:95:b3:47:39:21:3e:3e:
         b6:f2:fd:86:2b:62:53:01:3a:d6:de:ee:9b:bf:24:ac:88:75:
         1f:be:e2:cb:16:a4:05:6c:13:07:11:f1:ae:70:53:5d:80:e0:
         a5:37:8f:1a:13:bf:a4:96:52:88:a1:67:d9:3b:f7:32:31:50:
         25:f0:6e:45:3c:47:28:bd:b5:12:58:f8:c4:cb:30:db:d2:ee:
         82:cd:85:4e:68:e8:db:42:de:f0:b4:0c:79:bf:0f:0f:b1:12:
         b9:c8:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----