Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
File:                     YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json)
Hash identifier:          PSqEii9/iFN5LrIiocBUKvTbOUK7a3caxhPfshJYTEE=
Subject key identifier:   17:1C:6A:91:72:E1:55:EE:25:6C:7E:27:32:A5:C3:0D:08:E0:EA:1A
Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
Certificate issuer:       /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Certificate serial:       01962F74E95BC181107B56003351A4ABB857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
Manifest number:          D8
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=)
                          2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: Gb7t83duKB9bghWpIxm4vCadRIQukjRHmBWy+PcE/YQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e9:5b:c1:81:10:7b:56:00:33:51:a4:ab:b8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=171c6a9172e155ee256c7e2732a5c30d08e0ea1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:a8:3d:03:89:b6:68:f9:b6:21:c0:0f:4e:
                    4e:75:5a:78:5e:76:d5:2f:ab:c0:c6:87:b6:ed:0e:
                    9a:72:7e:f9:bc:7a:00:02:76:85:05:1a:22:c1:62:
                    f7:93:95:88:21:b8:4f:84:e2:a1:93:b5:02:5f:f5:
                    aa:1b:aa:cd:45:00:c8:62:4a:10:95:c4:e1:4c:b0:
                    84:1b:7e:0d:a8:b5:88:0e:e6:80:95:0a:fd:00:9f:
                    d2:51:2d:eb:f2:bb:03:4e:41:21:6b:64:c6:63:2d:
                    8e:67:52:c4:fe:0f:65:ad:a8:34:32:35:40:25:b5:
                    ae:b9:a3:49:94:97:5f:48:67:03:76:bc:8b:a4:13:
                    83:f4:f9:0c:9f:75:1a:4b:e8:fa:ca:a4:e3:c8:2a:
                    e0:a2:3c:61:5a:4f:17:15:01:85:2e:d7:b2:9e:d4:
                    95:38:4d:54:77:a3:42:e8:c6:c2:99:2c:a8:d6:40:
                    3c:28:92:d9:83:76:eb:ec:19:95:a9:ea:06:ec:8b:
                    e6:2e:58:83:2a:ee:6f:63:d8:53:f2:ec:8d:ae:32:
                    e9:e8:d7:cd:35:48:29:0f:d5:ff:72:30:a7:39:86:
                    c9:e6:89:da:ce:93:b3:a1:1b:59:3d:ea:79:e6:bd:
                    53:35:b3:1b:fc:58:39:57:6d:69:d3:bf:e6:ad:4e:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:6A:91:72:E1:55:EE:25:6C:7E:27:32:A5:C3:0D:08:E0:EA:1A
            X509v3 Authority Key Identifier:
                keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:45:58:c7:7b:b1:66:06:c9:fc:47:b6:3c:04:87:d1:1c:47:
         98:13:88:0f:c3:91:73:b8:01:a9:c0:61:b4:5d:39:2e:9a:b2:
         49:52:d2:1c:90:d6:64:d0:a7:4a:ba:22:31:3c:b5:37:4a:97:
         67:53:17:69:65:a1:ac:c2:e1:17:4c:cd:bc:2a:f2:88:14:4e:
         1f:ac:c5:9a:c2:83:36:bc:99:94:be:bf:16:48:ff:29:2f:25:
         d5:8f:75:d2:8a:5c:5d:04:e1:52:2a:df:3a:bd:af:cd:25:de:
         e2:1f:33:23:41:0e:b7:80:bb:4c:cc:21:3d:8d:e5:0c:7c:9c:
         cb:ae:83:91:a2:db:39:ed:c9:da:7c:47:66:05:35:0e:2a:d0:
         a0:cc:3f:ea:9b:a7:15:f7:1d:21:60:c5:32:54:f8:77:39:23:
         19:01:1d:e9:ab:c7:82:0e:0f:d8:85:a3:6d:dc:1b:85:e7:b1:
         81:81:41:c9:a9:3f:ab:38:92:b2:e2:6c:5e:48:e5:a3:36:78:
         35:c6:b7:85:b4:dd:c1:42:7b:f0:06:3f:99:df:ab:a9:9e:fb:
         28:1a:50:ed:0c:46:a6:ad:04:31:5a:1a:ea:7d:30:ab:70:df:
         20:2e:c6:17:81:4f:ee:72:a9:5e:26:80:dd:ed:6e:d3:15:bf:
         de:65:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----