Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File:                     Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier:          RzzGmMEhA9IfrdannD4qKfFUlBi5xNQopBbGLTOEYXM=
Subject key identifier:   D3:E1:8B:69:76:29:2B:5E:0F:71:1C:41:D6:FD:EC:98:79:9E:57:14
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer:       /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial:       01962F3DBA1808D8E065DF010593F96E625C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number:          0454
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: s/asEgcJnU1vi+16sXP5C2tdQmfyjMWRPu83p0Xjxbg=)
                          2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ba:18:08:d8:e0:65:df:01:05:93:f9:6e:62:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=d3e18b6976292b5e0f711c41d6fdec98799e5714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:dd:dc:fa:1a:9b:9f:8c:2f:91:0c:9a:a0:
                    c1:44:b8:36:99:d6:28:9f:a6:d1:bd:3e:0e:c5:e8:
                    75:3e:96:45:21:26:d1:57:03:a4:bc:a1:b6:bb:98:
                    77:e7:b9:9b:f8:6d:6f:3b:99:4c:93:97:2d:c9:64:
                    02:4c:f5:43:8c:68:19:c5:f9:73:13:31:5e:3b:5a:
                    08:5e:5e:7d:e5:39:9e:48:fd:b4:26:d3:88:63:6e:
                    c0:5f:54:c8:fd:9d:00:8d:58:da:af:1e:bb:1d:37:
                    c9:96:62:b6:bc:3e:89:e1:9f:5a:0e:d2:c6:02:8c:
                    2c:72:68:21:fc:26:e9:01:02:d9:91:e1:81:fe:c4:
                    4e:ff:4a:71:b7:ab:3b:1c:4d:2a:5b:1f:59:d8:64:
                    13:ba:ef:b4:29:e1:1a:8d:25:d7:be:72:d3:7c:88:
                    2e:1c:b0:c2:8d:7b:e0:de:64:07:4d:ff:ae:3b:7d:
                    8e:63:20:4d:b8:83:46:e0:d3:be:e8:1a:a7:3d:24:
                    d2:e9:0e:a0:72:7e:e0:44:c0:64:ee:f5:78:ff:d7:
                    a7:f5:dd:cd:0e:3d:c0:37:da:b0:4c:26:e8:37:f7:
                    79:b5:13:74:d6:9f:37:95:3b:1a:b1:58:da:a6:c5:
                    a8:23:c5:d9:9e:44:54:0a:de:0d:40:45:03:9e:30:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E1:8B:69:76:29:2B:5E:0F:71:1C:41:D6:FD:EC:98:79:9E:57:14
            X509v3 Authority Key Identifier:
                keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:24:f8:6f:97:3a:3c:aa:68:a2:65:a6:6e:c6:99:f3:34:
         ad:8e:fa:73:66:d8:d1:f2:41:2c:e8:54:59:cf:c7:30:c4:09:
         b9:9b:36:c6:8f:f4:d6:85:59:9f:9c:7d:cd:ca:20:60:cb:5c:
         ac:ce:19:bd:04:50:87:b6:53:c8:c8:92:fb:3e:22:89:e5:01:
         c3:de:49:1d:48:2f:90:6b:98:87:68:da:53:62:91:f2:15:f4:
         66:24:9b:5b:44:20:4e:d4:b2:af:db:cb:1f:8f:51:c2:2d:8c:
         5e:14:29:30:5c:59:ba:a1:c3:af:83:6e:e6:40:9e:f0:de:9a:
         55:28:91:46:f0:a1:cf:f8:c4:2b:8a:12:63:6f:c3:4e:da:ef:
         07:5b:3e:1a:81:e3:f5:08:0f:f8:86:98:89:b7:ed:3b:68:07:
         6d:2d:1c:d1:a8:07:4d:84:2d:6b:43:e9:d9:41:44:68:c1:74:
         17:8d:61:70:6e:f0:8a:f7:81:c2:ef:11:be:a3:db:b9:22:7b:
         f2:24:c9:87:e2:90:71:63:3c:3a:5c:4b:2d:65:d9:d9:56:4b:
         69:8d:bd:eb:1b:b4:68:71:d8:4a:df:15:ba:ab:48:17:2f:63:
         ce:bf:20:35:0a:be:17:a1:a6:23:45:35:f6:68:d0:a3:21:3e:
         b0:b0:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----