Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File:                     Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier:          YjTYHKurLEXLDxdd44ovJDhqaDuhHYpyDlk2HeyAG5g=
Subject key identifier:   3D:4F:68:6D:17:4C:D1:27:CA:A5:69:C9:AB:8C:8F:B3:72:2E:46:64
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer:       /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial:       01962E99AB54807854F9A3FF1194D0D5FCC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number:          13E0
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: KM4NOd9M6C+uoKNUtivzIy3xUidP0QPP7PTSxUoTPCM=)
                          2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:54:80:78:54:f9:a3:ff:11:94:d0:d5:fc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=3d4f686d174cd127caa569c9ab8c8fb3722e4664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:b9:a8:c1:50:7c:61:af:af:9f:58:2e:7d:
                    98:31:09:a0:17:ad:3b:02:8e:3a:7a:1c:e2:22:6c:
                    6a:f8:77:3b:52:4c:2b:97:a6:77:41:e9:64:24:af:
                    39:8f:8c:3a:aa:40:33:8d:e2:e8:cd:82:1f:3c:10:
                    80:59:b5:0c:ed:b7:47:a4:f0:09:82:cf:20:2f:6e:
                    cc:42:75:1d:18:6d:8f:c5:d7:a0:e9:1e:34:cf:1f:
                    c7:7e:c0:c9:07:75:c8:3a:77:be:72:ae:70:fd:df:
                    e5:a5:16:e0:5b:8e:b4:03:6c:9f:c3:81:85:19:f2:
                    42:a1:57:f3:4e:4e:7b:dc:ab:9c:16:4a:98:82:5a:
                    4a:cb:4e:34:35:81:ff:c0:9f:66:4e:2d:9f:20:d6:
                    83:5d:9b:f3:3f:05:24:7a:8c:3c:dd:5b:00:7b:f2:
                    bd:91:b4:49:f5:28:12:f0:c1:5a:1b:12:63:33:1c:
                    54:fb:65:8e:79:44:95:a2:fd:ee:5a:9a:98:f4:f2:
                    03:66:da:28:27:a7:aa:c7:da:01:98:1d:81:12:a2:
                    4d:b2:73:00:62:8b:b8:b8:2e:a7:23:0c:92:23:74:
                    de:bb:78:e4:89:d5:4a:ef:2a:4d:30:e2:3d:4b:8f:
                    86:b5:47:f6:97:dc:31:9d:4c:a7:70:2c:ef:2f:f9:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4F:68:6D:17:4C:D1:27:CA:A5:69:C9:AB:8C:8F:B3:72:2E:46:64
            X509v3 Authority Key Identifier:
                keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:13:f1:88:0d:0e:d0:d6:b1:b2:8d:a2:78:2c:68:12:76:52:
         8f:e7:1e:86:d8:f3:bb:ac:95:87:d1:b3:f4:ef:ef:16:4a:8d:
         09:85:5f:af:c1:1e:ca:a5:f2:43:3f:e5:40:62:e1:a6:d7:a8:
         96:a2:a1:7e:73:8d:1d:c0:4d:a1:f4:d5:69:f2:90:27:3b:93:
         da:7e:4a:d1:3e:13:17:0e:cb:97:c8:57:b5:52:48:ab:1b:41:
         b2:b9:39:d0:42:3c:b8:c0:1a:92:e4:8e:4d:83:b3:97:42:2b:
         e9:ff:c1:0b:1f:56:ee:47:ff:51:ca:9a:9b:23:97:d9:de:66:
         44:78:4f:ca:93:b0:ed:62:38:af:48:8a:d1:fb:de:2c:6e:32:
         be:b5:67:fb:9b:aa:e6:f6:93:cf:f1:e1:b3:05:4a:fc:91:d7:
         ab:ae:14:5e:af:7f:8e:6d:c9:15:8a:95:54:6a:6e:92:7d:4e:
         f1:3b:9a:45:99:d0:59:f7:95:ba:d5:e2:ac:36:c7:95:5c:c9:
         69:68:dd:0f:e7:5a:94:11:ff:8d:18:da:92:f6:cc:1f:23:8d:
         14:85:7d:e2:3b:d3:8d:a0:63:85:22:86:73:f8:14:6e:0b:4b:
         d0:2a:35:02:a8:14:12:ea:bc:b7:7b:3d:99:67:33:54:87:69:
         45:9b:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----