Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File:                     yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier:          o+LZtx11b9/PHuffzpXjgHmI2N9J9sFzyjcBzsCqUXU=
Subject key identifier:   B3:C3:93:82:CA:E3:58:FA:0D:AB:17:6C:F8:47:8D:17:E1:08:C5:10
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer:       /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial:       01962E2AE410FF04777986A43097A0BFC737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number:          01BB
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=)
                          2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=)
                          3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=)
                          4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: SQkRjLhfbYFZcE6ZHfNViiVLhrjRcithfUWpUFZdLuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e4:10:ff:04:77:79:86:a4:30:97:a0:bf:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=b3c39382cae358fa0dab176cf8478d17e108c510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:d6:80:bf:a3:b4:82:51:2f:c5:6a:fb:14:
                    6f:31:6b:be:87:44:b7:03:fd:81:9b:d9:81:5c:d3:
                    75:a1:00:a4:fa:3a:9e:44:26:7f:e1:da:e0:af:76:
                    1a:5f:f0:87:b3:6d:a3:10:c5:cc:fc:48:6d:59:fd:
                    6e:1d:51:a5:63:f0:11:a3:6e:ea:fe:84:a9:a4:4a:
                    d4:63:16:80:c1:6e:34:a8:51:4e:f8:9e:dd:0b:fd:
                    be:23:04:26:c8:ec:52:c9:e6:4a:b4:89:73:8e:db:
                    c6:e2:89:82:54:12:1a:7c:1a:b0:ca:0b:fb:1f:77:
                    30:bf:fe:b2:58:6a:03:94:d8:ed:1f:e0:fe:c6:27:
                    58:0f:42:80:1f:0f:bd:8a:b5:1a:b8:5b:ea:eb:3a:
                    87:fd:20:88:77:11:fa:3e:e5:1e:c6:de:72:37:c3:
                    b4:38:47:6b:2d:b3:b6:5d:d4:2c:6f:fd:46:de:39:
                    1a:df:2a:e3:db:63:f8:b7:0f:01:1f:c3:e5:b8:7d:
                    08:08:54:44:e0:38:3d:89:c6:2c:aa:f7:67:c7:90:
                    27:f2:74:6f:f4:3f:f6:e1:b3:d3:cc:89:0f:30:53:
                    73:59:67:25:0f:6b:a9:74:59:ed:8b:b3:d4:e7:19:
                    f4:9d:b7:bd:1e:a3:a4:3d:28:53:50:49:6c:fe:fd:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:93:82:CA:E3:58:FA:0D:AB:17:6C:F8:47:8D:17:E1:08:C5:10
            X509v3 Authority Key Identifier:
                keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4d:2c:56:06:96:15:1e:97:dd:3c:18:a7:cd:58:44:e4:4a:
         77:5d:c9:9e:98:f1:ee:53:78:c3:cc:08:06:d8:27:9c:ef:8c:
         8a:18:91:b1:25:7a:4b:36:00:85:0f:af:6a:00:dc:89:08:04:
         85:6f:32:0c:95:c3:8c:eb:39:d2:14:8f:d6:b6:be:ee:55:bb:
         26:96:5e:1e:f6:81:53:d9:d2:63:47:1a:8f:58:a0:16:90:3d:
         6f:f7:6d:7e:29:0c:8c:f8:7d:92:1c:48:d6:75:6c:e2:18:ab:
         9b:71:9d:3c:3b:5a:68:cf:3e:b1:01:2e:d6:e2:7f:f3:a4:56:
         cc:bd:0a:b4:91:23:70:77:58:ba:fa:de:02:76:d0:1c:35:31:
         5a:7c:eb:eb:fc:4b:f0:de:72:04:4f:a6:56:b3:af:c2:6b:84:
         40:89:a9:3d:81:bf:69:de:bb:47:48:bf:62:0f:be:fc:a2:eb:
         c5:27:8c:03:c2:22:c7:6e:39:cb:65:57:4f:39:b7:ac:ee:2a:
         cc:93:2a:1e:b8:b0:64:d8:4f:3a:d2:52:69:7c:71:c9:00:a4:
         af:26:3b:ad:ff:3f:d1:8c:bb:91:67:56:e7:49:35:fc:b5:e5:
         3b:cb:d0:23:ae:c6:47:e3:f3:59:21:dc:17:fe:11:a2:b9:d9:
         0b:43:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----