Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File:                     YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier:          U6IMFwZtUAZkCSYU7I2g59uPft2pocKfpm0Oa01xwWQ=
Subject key identifier:   83:52:15:28:88:D7:C2:2B:68:AB:4C:3E:82:AD:5F:00:CE:12:7E:7E
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer:       /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial:       01962E99863BD918C80812A2C5ABA6C84D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number:          0225
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
                          2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: 4cZAB+4Q2/7BCKxOF2PxA4kzwB+IWq2qczbWxe1f/qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:86:3b:d9:18:c8:08:12:a2:c5:ab:a6:c8:4d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=8352152888d7c22b68ab4c3e82ad5f00ce127e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:22:4d:37:94:c2:55:79:e8:4e:39:87:31:
                    b8:a1:cb:91:04:a2:e1:c8:93:51:53:8d:21:02:92:
                    94:8d:5f:c0:8e:b2:71:bd:cc:3e:f7:11:c1:ec:bc:
                    1e:3a:84:7b:b2:a0:3a:80:4d:17:56:6b:4e:c4:fe:
                    09:17:27:5f:98:6e:a3:0e:09:74:e9:0e:36:98:6e:
                    30:a5:95:c0:62:1d:8d:08:da:a5:01:d5:c5:8e:53:
                    cb:f0:6b:5c:0b:fc:93:28:c1:c5:17:45:c6:4c:cf:
                    a6:fc:3b:7b:ed:d8:fa:8a:f0:19:ca:55:51:76:83:
                    23:ee:5a:bb:09:2c:92:07:22:61:29:fc:c3:aa:43:
                    89:d4:99:c6:17:2b:4a:b0:0f:9a:46:c0:d7:19:c6:
                    48:89:9b:6e:da:6e:77:13:68:24:a7:f8:d2:6a:24:
                    89:60:4f:b8:be:78:a1:55:00:39:32:1f:f0:f8:ee:
                    35:f5:e1:1d:37:34:b4:bc:da:70:3c:4a:60:2a:87:
                    0f:de:b0:3c:66:6c:6d:6e:46:4c:51:74:79:57:16:
                    61:56:89:4d:c5:12:d4:f9:b2:1d:19:32:3f:fd:67:
                    97:49:79:9f:14:8c:cd:cf:2a:d0:01:60:c6:32:32:
                    46:8f:4a:c6:cd:85:c9:a1:76:9b:82:7b:30:ac:22:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:15:28:88:D7:C2:2B:68:AB:4C:3E:82:AD:5F:00:CE:12:7E:7E
            X509v3 Authority Key Identifier:
                keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b9:00:45:a8:3a:08:49:70:23:c7:d3:44:36:53:2b:b2:17:
         a9:c3:c9:63:cb:4c:a9:4e:cb:dc:a7:1c:59:56:98:64:30:51:
         a3:b4:69:dd:12:74:0c:ed:91:ea:a0:fd:ce:4b:17:88:f7:36:
         8c:18:4c:71:67:2f:8e:d5:05:99:66:0e:63:88:64:e7:1d:18:
         f7:fe:e1:ab:5c:d5:e2:31:8e:18:ef:87:71:01:0c:8d:f4:4c:
         1e:d2:65:51:fc:ea:05:1e:c4:06:98:f6:1d:d3:e4:e1:fa:ca:
         d8:14:a6:7a:6e:ab:9d:f0:c2:b7:fa:ea:bf:28:01:b8:9f:24:
         c0:f7:5b:ed:85:be:7e:e7:d0:b2:fc:3d:3e:b9:d7:88:74:b0:
         27:8b:01:99:5e:3f:0c:14:b4:41:85:de:78:3f:9f:45:14:61:
         22:98:62:f3:88:c9:11:1d:a2:2b:72:28:b6:30:1d:ee:c2:60:
         cf:44:58:89:81:dc:b2:97:36:9a:96:fb:09:c9:b8:f0:7c:07:
         bf:81:76:7f:cc:0e:cd:17:3c:14:17:e2:2f:c7:41:64:5c:50:
         a9:b6:13:10:66:6f:e0:29:8f:93:b2:30:23:8c:07:55:ab:33:
         72:cf:7a:6e:c8:2c:36:87:51:3f:1d:38:4d:9c:52:00:6c:f7:
         ac:39:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----