Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File:                     yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier:          0xa99iEoaj8lfIJSMtirPIwaTFa1qOrwDKny3v1+XeM=
Subject key identifier:   C6:F3:DF:7C:57:24:72:4C:53:7F:6F:B5:0A:20:F0:AB:DB:42:40:4B
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer:       /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial:       01962E98D92E95348D577896618103F96C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number:          09F0
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: z0OnHlwwNa6hEoXLMw/BnivwHPBnrbZ6ijHINtL05ZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:2e:95:34:8d:57:78:96:61:81:03:f9:6c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=c6f3df7c5724724c537f6fb50a20f0abdb42404b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:5a:f3:a7:4c:60:5a:05:fa:7b:5b:12:9e:
                    29:39:8d:4a:dc:c6:35:c9:18:22:05:84:26:3d:24:
                    91:8b:4e:cc:34:c1:34:aa:06:2c:60:c0:31:0f:2f:
                    09:8a:84:0b:e4:e4:c0:df:69:fe:97:0d:1e:9b:77:
                    30:c7:03:a6:c4:2d:78:96:31:97:38:89:42:05:f2:
                    3e:ed:0a:aa:3d:fc:d9:ba:71:af:83:36:81:8a:59:
                    30:35:e8:b8:a3:66:92:cf:c9:2d:55:f6:9e:43:8d:
                    41:e7:0d:77:41:ee:c1:a5:95:c3:06:a2:d6:b6:7c:
                    18:7e:57:c3:90:08:ef:17:1a:56:60:55:f9:46:42:
                    05:67:eb:a5:6b:68:da:62:91:1d:b7:75:62:37:6a:
                    cb:04:f5:d9:3b:f8:44:e4:c0:ed:1c:56:bd:20:9b:
                    a5:a3:b6:92:64:0b:17:dc:87:ba:a6:05:1b:39:8a:
                    ad:18:90:e5:d7:cc:a6:89:8a:ef:16:a4:37:63:ce:
                    d2:45:9a:9d:38:5c:fc:4e:4b:fe:4b:90:26:96:bb:
                    0b:ea:72:89:17:22:11:2e:9b:76:3e:3d:69:7b:c1:
                    fd:c2:1d:d1:41:1a:a9:a3:8e:5d:3e:07:55:01:5a:
                    90:ae:07:28:96:e0:08:2c:81:3a:eb:27:ab:2b:c3:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F3:DF:7C:57:24:72:4C:53:7F:6F:B5:0A:20:F0:AB:DB:42:40:4B
            X509v3 Authority Key Identifier:
                keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9f:85:d8:cb:99:2e:ed:e5:69:77:04:7c:e2:19:6a:11:96:
         8c:a8:de:a4:fb:91:a0:e1:91:d1:8f:83:04:99:ca:de:f5:00:
         65:7d:ae:6c:af:bd:bd:68:02:c4:80:d7:a9:ed:34:04:3e:0d:
         87:2a:6a:a7:36:80:c4:6d:e1:e6:95:97:40:59:f4:73:80:5d:
         6c:6f:19:c3:f6:87:82:f7:37:89:09:67:e1:cc:4a:7e:ff:a8:
         00:64:43:c6:dc:d1:c6:53:6d:cd:23:dc:f8:2d:c2:ec:2e:db:
         b9:f6:b6:1d:50:c2:83:bd:08:47:80:bb:40:35:96:c8:dc:14:
         47:99:ef:0a:40:f4:9e:ad:57:d0:e6:34:51:a0:79:c4:5e:59:
         1e:7a:84:f8:bb:15:be:b1:2f:17:03:69:99:94:18:4a:34:64:
         19:88:c3:ef:ec:59:73:98:c2:7d:a2:e7:57:0f:86:e7:75:e9:
         58:ed:d0:4a:73:0e:04:7c:34:3b:fe:4e:b3:11:76:fe:8a:c8:
         b1:97:19:99:83:81:21:f7:a5:81:56:a6:bf:29:48:78:2d:ef:
         b8:02:0f:7f:84:fc:47:b9:94:25:88:78:07:e1:ba:b5:81:63:
         11:f4:55:62:bb:54:ad:81:9a:99:5f:53:9d:20:ea:86:fb:cb:
         ab:4c:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----