Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File:                     yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier:          epneLUAtNmGOKoHPbzRYcYIq/9GRO9QFzUbGTuqGWro=
Subject key identifier:   91:50:77:43:96:6B:13:CA:B1:A9:91:47:F1:0B:0D:33:84:08:68:7A
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer:       /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial:       01962E2B2CDE29EC20BA10F311E64A3A370B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number:          0220
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: MxMSo97QGnpOPhxxoTU2+sRxWMMisWL/NKhCPYw6DT0=)
                          2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2c:de:29:ec:20:ba:10:f3:11:e6:4a:3a:37:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=91507743966b13cab1a99147f10b0d338408687a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:7c:b2:e7:f3:56:92:33:a9:fd:85:1f:bd:
                    c5:45:9c:80:87:05:c9:53:d7:69:67:0a:46:c7:6b:
                    4c:2c:f9:52:89:56:6f:27:21:b8:40:6b:eb:fb:90:
                    04:8f:0f:07:66:2c:ab:d4:90:ad:4c:6a:13:21:1e:
                    97:99:51:ac:21:6d:0f:fa:f0:19:ff:62:b5:4a:be:
                    88:41:20:f2:d2:d6:47:1f:fd:c5:97:69:f7:62:8d:
                    4c:0e:7d:23:cb:93:20:71:04:25:7a:53:c1:6a:23:
                    c6:93:2b:70:25:38:b3:4c:9e:a5:1d:f9:a8:0e:0e:
                    18:71:24:92:77:d5:12:42:8a:ea:dc:2c:61:d6:c3:
                    d5:a9:08:26:7b:90:75:0d:00:78:d1:65:3b:10:42:
                    4c:f4:bd:0b:8a:a5:a9:7c:31:24:11:4e:13:cf:5a:
                    c2:17:6a:70:9d:8a:20:2a:c2:ed:53:eb:71:a3:45:
                    18:e6:8a:07:7c:68:47:3f:04:ee:ab:9c:29:8a:94:
                    04:0e:75:e3:63:48:bc:32:f5:d2:73:15:f9:ab:b3:
                    89:bc:e7:22:3b:14:e1:8b:24:c9:6a:fc:d7:77:f7:
                    b7:1b:5c:d0:54:5c:46:51:86:bb:26:cf:c2:f6:e5:
                    61:d7:b5:7b:d3:78:90:b4:83:32:f5:ef:08:0b:a5:
                    02:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:50:77:43:96:6B:13:CA:B1:A9:91:47:F1:0B:0D:33:84:08:68:7A
            X509v3 Authority Key Identifier:
                keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:90:62:e2:b5:89:6b:65:a0:61:d6:85:08:03:6a:cf:0f:a0:
         61:af:8d:b0:9f:b0:c2:03:b7:32:06:c2:b7:c6:54:8a:b4:74:
         83:bd:a3:5f:9c:cd:02:a1:1a:fc:b8:76:41:d9:79:28:09:ab:
         16:54:f5:be:ac:07:00:dc:f4:43:82:dc:4f:c9:94:08:11:22:
         ad:74:ea:84:cb:f2:5f:5b:1d:0b:e0:71:c3:b1:46:47:9d:f4:
         0e:c9:b9:f7:7b:eb:f3:6e:04:14:ec:d6:72:f0:c9:48:8a:84:
         22:e2:b2:e6:ce:1c:fd:27:2a:d5:81:15:36:fb:9d:f1:f0:56:
         3f:cc:83:95:81:87:ec:e0:41:94:ee:e4:9d:f9:01:95:b1:68:
         60:42:20:b1:2d:a5:13:79:75:e3:9d:fa:fc:83:3c:f7:94:da:
         65:c7:ff:8a:af:aa:d0:95:86:fc:84:ad:ed:e8:f7:48:27:0c:
         bc:12:c2:9a:b6:56:13:d4:74:c3:0b:80:4c:bb:08:51:ca:6c:
         8c:e2:03:84:3f:82:1a:24:48:22:7f:57:4e:9b:12:d4:83:94:
         24:cd:81:ea:b9:87:4f:93:57:ca:7d:15:73:51:35:a7:ba:12:
         60:c4:05:5c:e8:7d:61:20:20:3a:00:27:cf:03:10:41:04:63:
         d9:63:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----