Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File:                     Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier:          XmIYvar2P5LMIgnHB5/hzOmzl/AnA96CANkpWqZ1WL8=
Subject key identifier:   DA:D5:E5:97:6C:8A:F7:96:77:E7:6C:33:43:A8:D6:97:29:A4:2F:B1
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer:       /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial:       01962DF3F088AA6C8966189DB06E0FED2746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number:          0E3A
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: Y1mrL3FpONRtb/zr+nzWxNRwkdiC623UIYXUYgOWFkI=)
                          2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:88:aa:6c:89:66:18:9d:b0:6e:0f:ed:27:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=dad5e5976c8af79677e76c3343a8d69729a42fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cc:6e:c1:0d:10:9c:bf:92:da:5c:86:b9:ce:
                    df:6b:29:3d:60:e7:de:d4:62:7f:ec:cb:ab:bc:55:
                    4e:bb:0e:e5:50:f0:e4:89:21:a0:0a:2e:05:86:28:
                    8e:f5:3a:96:1e:c4:82:78:af:b0:ab:28:4b:3f:eb:
                    53:fc:0c:c7:be:1e:a3:34:74:42:72:83:58:1f:3f:
                    77:43:f7:e8:77:48:72:15:b6:13:3e:62:c4:5a:15:
                    e9:3f:bc:dc:bc:fa:92:ad:40:87:f1:ef:c5:b7:9a:
                    5d:34:13:e6:20:f7:66:ab:a8:e0:9b:cd:dc:a8:dc:
                    e4:8c:a4:16:46:ef:cb:76:af:3a:f5:0b:73:43:0b:
                    ac:4f:51:f2:b3:f4:c7:3c:46:5a:24:39:ca:e3:4e:
                    09:a5:60:ea:22:34:20:fa:36:3d:19:63:62:7a:8c:
                    c1:bb:b1:d2:80:79:d3:3b:4f:84:04:a9:d0:46:f0:
                    41:e3:cd:c0:38:ed:8d:0c:6d:d2:37:86:40:f1:94:
                    2d:f8:0a:1b:d0:98:d5:e4:c4:3e:21:76:0d:65:a2:
                    0b:ed:55:aa:6d:20:9b:5f:c8:10:db:0b:e0:7d:fc:
                    ef:b7:2d:37:ad:1e:c3:6c:62:71:8d:8d:a5:72:a0:
                    6f:99:a0:64:73:b9:f1:2e:f2:e8:05:23:36:bb:8e:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D5:E5:97:6C:8A:F7:96:77:E7:6C:33:43:A8:D6:97:29:A4:2F:B1
            X509v3 Authority Key Identifier:
                keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:07:24:32:4f:f6:c5:d5:34:a5:68:45:15:4a:67:42:ae:0d:
         a5:6b:e0:cf:84:75:8d:32:c4:50:7e:d5:7d:4c:39:1e:3e:f3:
         af:24:21:11:7b:69:50:87:b5:cb:b5:06:a2:b2:60:63:2a:94:
         49:15:58:e5:30:70:9a:73:80:26:dd:1c:dd:35:09:86:69:29:
         64:82:c9:be:7c:d0:a6:6b:98:8f:e8:c5:0d:77:71:35:f7:23:
         06:f9:be:3f:01:38:40:0d:1d:8c:5d:82:9b:a4:40:82:a9:61:
         f1:74:5d:f2:33:45:cf:2b:2e:25:f1:a2:02:45:ee:b6:ee:cd:
         93:9a:7d:9b:07:d9:04:4f:b9:81:84:ba:4d:93:b9:03:27:6d:
         23:25:17:26:ff:8d:ae:86:65:dc:1d:10:fa:c5:0c:fc:a8:5f:
         ba:1e:8b:75:02:97:49:ba:96:38:b8:86:b9:90:3a:d7:e1:c7:
         84:75:b9:f1:c9:f6:45:24:70:53:a0:cf:cd:31:f0:d8:3d:21:
         c8:cb:25:c4:c4:ed:a3:94:91:9d:d5:ca:82:9b:20:68:ba:9c:
         5a:dd:72:7c:3e:40:45:ab:70:e3:6c:7c:46:14:f7:82:63:fd:
         15:4a:e5:50:0c:ee:65:27:f8:85:53:6f:59:9e:de:3b:70:ad:
         b5:31:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----