Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File:                     ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier:          H/FiRVCUMdZIMjVRJ0/jmGBP7G2mizw9VOgBjfKAN1I=
Subject key identifier:   C9:5D:6B:CF:EE:54:A6:4C:73:64:5D:66:2B:C9:58:73:16:7F:C0:3B
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer:       /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial:       01962FAB8BCEFC181A01D81E9968CE4F2A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number:          0A77
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: T7qjUpuFek2HO0YlRj5-k5NdZXM.roa (hash: mMiY1pDTZBZHtZK+AEVkPiyRFIi1wbnQYRg+XFOmlGk=)
                          2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: 7kr7Sty2Z2My/ctgc4ksOEtBYrS9gd1vD+hh0SwdpPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:ce:fc:18:1a:01:d8:1e:99:68:ce:4f:2a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=c95d6bcfee54a64c73645d662bc95873167fc03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:3e:a8:f1:ac:10:8a:fc:71:27:3d:16:a2:
                    db:b2:42:a4:07:51:ad:f7:c5:a3:9d:44:d5:72:b9:
                    8a:7b:36:1b:51:aa:3e:fe:0e:c3:f0:7e:5f:37:a6:
                    8f:a9:c6:22:c0:21:de:68:ff:e6:fc:ba:33:8f:6a:
                    2d:cd:25:52:3e:35:55:e5:38:0f:3c:19:b8:66:7d:
                    5f:33:41:5c:8b:64:3e:65:73:67:7a:91:b8:9f:c8:
                    9f:6c:9c:49:96:7d:ee:8e:80:27:10:7f:62:59:7e:
                    61:c5:9a:9a:67:86:d2:01:00:e2:3c:49:1d:46:b7:
                    58:b2:7e:a6:9d:d4:9d:59:25:ff:d0:36:55:7e:1c:
                    70:ab:b7:82:72:78:fa:7a:6f:ed:87:91:1f:0c:44:
                    02:1d:c2:8c:3a:a1:4e:9a:ce:e9:44:d0:81:bf:78:
                    68:bf:44:b4:74:52:f7:8e:e7:59:0f:93:d5:31:04:
                    0e:41:b2:ae:b7:85:4a:02:a6:9b:87:0a:a0:82:53:
                    46:25:8a:67:5c:42:5e:7c:af:ac:bd:e6:88:91:0e:
                    ee:91:27:5b:1b:e1:ee:a7:76:42:3e:bd:82:5a:d7:
                    1c:ea:bc:29:e1:6f:df:32:a4:37:94:97:5c:b0:3d:
                    4e:59:f8:e6:78:cc:64:a3:05:0b:dc:36:96:21:60:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5D:6B:CF:EE:54:A6:4C:73:64:5D:66:2B:C9:58:73:16:7F:C0:3B
            X509v3 Authority Key Identifier:
                keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3a:3b:6c:0f:07:16:0f:39:7c:94:3e:16:d3:d6:1e:7a:63:
         77:c4:44:26:44:a7:81:76:04:68:4a:b3:5e:a9:0a:07:4c:e9:
         03:60:b2:e0:6b:25:79:26:1f:c1:78:5c:b5:33:0b:99:98:31:
         f5:cc:90:f4:17:a2:ba:5d:21:ad:91:1f:ea:ba:e8:b9:c7:dd:
         6d:eb:9e:c5:f3:da:a9:dd:db:21:f8:4f:33:db:ce:91:d6:df:
         c6:ad:fb:ee:3b:b6:94:60:55:8f:14:f1:68:01:98:ac:2e:eb:
         69:37:77:09:75:d4:30:6f:3b:dd:6a:43:35:3c:b6:b6:6e:29:
         86:35:3f:a3:81:76:e1:dd:96:37:c9:bf:ab:77:d1:ff:09:ee:
         72:71:a7:ff:01:a8:41:be:36:c7:50:e0:75:cf:fa:db:6c:68:
         f6:1a:c3:03:2b:0b:82:f0:09:e1:f3:6f:b3:28:16:ab:79:dc:
         58:4d:b3:95:20:6f:1b:06:42:26:15:27:2a:74:9c:37:61:56:
         4b:2a:f4:5c:78:24:bb:ed:e0:3c:e4:2f:dd:c1:9f:16:3e:74:
         14:2c:1b:63:04:35:93:58:1d:71:84:b9:f4:ef:97:53:ed:c4:
         6d:35:63:9b:ae:cb:0a:a2:07:9d:8e:64:d3:34:03:43:1c:ec:
         b1:1f:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----