Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File:                     rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier:          bnZWYOnld4sfNtcGW5StuNuafYxjmIk7OpBElDmmoR0=
Subject key identifier:   25:90:87:09:47:7B:35:E0:1C:7E:4F:54:55:47:52:6C:07:77:A5:EE
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer:       /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial:       01962E987AB1DFE71EE4139C87EC4BF0D2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number:          0739
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
                          2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: 3J8wf7cQjB4dTpymsnvuoK5Qozy6KHKh/nTtp/1k5N0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7a:b1:df:e7:1e:e4:13:9c:87:ec:4b:f0:d2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=25908709477b35e01c7e4f545547526c0777a5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:08:cc:90:6e:91:9e:36:41:7a:49:b1:8b:
                    9b:4d:dc:b7:b2:8e:20:0c:a5:f7:00:2d:b5:20:04:
                    d1:6b:d6:f5:51:c4:20:63:45:e7:1d:90:e8:8c:a8:
                    05:f8:f8:b3:f2:de:a6:86:70:8b:f1:8a:f6:5a:d5:
                    db:2c:09:f8:d8:fa:6b:44:a6:08:05:f5:1b:c1:b7:
                    61:a1:fb:16:98:56:60:79:93:8c:d0:f4:70:7b:fe:
                    4d:5b:5d:05:77:59:b9:3c:a6:59:59:48:81:aa:52:
                    3e:78:e9:a9:d4:f5:6e:90:91:9a:e9:88:63:4a:b0:
                    24:35:8b:7a:73:3a:5a:22:ff:44:e0:53:8d:ef:4f:
                    0a:d8:21:e6:c3:77:ff:ea:1f:ca:38:10:5d:15:8a:
                    be:fe:80:70:8e:dc:a2:63:a5:9f:6c:7b:75:52:91:
                    dc:52:fc:26:6c:3b:c9:56:26:1f:12:b0:7d:86:c2:
                    3e:96:90:7a:0e:26:08:ea:95:20:da:d3:5f:c4:31:
                    4d:c4:04:55:11:e2:85:78:d0:5a:f7:05:aa:13:b6:
                    3f:d0:fa:e8:32:57:f5:a4:fb:71:85:cd:3d:5e:3f:
                    8b:ba:45:cd:19:56:68:f0:c3:ec:06:3c:35:95:31:
                    54:e4:61:59:05:4c:83:b0:47:cd:d2:7d:f8:e8:31:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:90:87:09:47:7B:35:E0:1C:7E:4F:54:55:47:52:6C:07:77:A5:EE
            X509v3 Authority Key Identifier:
                keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e5:ae:b6:d6:1c:bb:68:69:1f:4d:44:ee:27:59:53:8a:78:
         b2:8b:80:fd:06:85:d2:85:30:a8:2a:76:94:80:0d:a8:45:49:
         3c:38:85:50:5b:4c:58:9e:59:84:7e:0b:5c:d9:3d:3e:13:59:
         20:ac:bf:90:0a:a0:38:50:cf:71:8f:22:c2:59:25:5a:e3:ef:
         e0:d5:0b:ce:e4:43:6e:36:c4:6e:24:ed:32:9a:e5:8f:09:13:
         e4:40:ab:e2:b4:a3:8d:13:8d:29:1b:78:43:10:f3:bd:c9:b4:
         48:25:cb:0b:f0:73:3c:db:b1:7b:b3:e8:52:06:db:28:b1:eb:
         a6:10:8d:19:dd:3d:90:a8:24:81:49:ec:b3:a5:14:8e:2f:5b:
         b4:a6:91:5e:5f:09:c3:3a:33:90:58:08:66:52:42:a6:f5:87:
         b3:c3:b5:5f:bf:52:cf:fb:73:57:69:ea:f7:2f:94:13:b4:82:
         11:8a:c6:69:1e:08:09:b1:cd:ef:9d:63:cf:c1:b4:64:0e:f3:
         6d:20:80:77:5e:ec:32:f6:5c:13:dc:dc:aa:26:cd:93:64:26:
         d4:1d:5a:15:65:76:d8:27:c2:7f:93:d0:58:34:25:d9:f6:3d:
         8d:c8:f5:0e:db:d4:da:71:5f:13:61:62:a1:da:89:ea:e5:51:
         59:af:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----