Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File:                     YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier:          fqApSJihOrfkC5qCj8F5t0Xu/uJqWxBV17LwLrS85ro=
Subject key identifier:   B1:BF:5D:67:39:8C:23:5D:4F:2C:61:D6:45:39:FE:F9:07:6E:5C:7E
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer:       /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial:       01962F0724E64F23C2A6970DECD11361056E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number:          0CE1
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
                          2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: b2P1/tbHnnkC9CltXu7/o3pwOMJmIA6w9afzUd9RKLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:24:e6:4f:23:c2:a6:97:0d:ec:d1:13:61:05:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=b1bf5d67398c235d4f2c61d64539fef9076e5c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:83:1a:94:2f:a4:37:0e:77:36:97:3f:57:
                    77:b2:1b:12:bb:14:8f:6c:eb:fa:12:eb:ba:7d:65:
                    5c:ec:7e:cb:4f:35:9f:1e:a2:30:40:29:a7:ae:5c:
                    60:26:1c:85:4b:5b:e0:ed:b3:9f:a9:75:42:24:8b:
                    9e:41:71:8c:66:b7:36:e5:75:e9:bb:7e:a7:9e:25:
                    90:fd:e2:c3:0a:ff:57:0a:2d:51:65:a9:c6:77:5a:
                    9d:a2:4a:26:bc:83:d0:19:44:2b:86:6b:22:ad:e8:
                    f1:4b:e8:e8:5d:1b:d3:27:9d:65:6a:0a:70:e1:6b:
                    40:33:11:64:b6:4b:eb:e3:c1:68:8c:b7:86:fa:75:
                    1d:e4:75:e8:e1:a4:6c:c8:1b:df:e1:f0:61:5b:cb:
                    14:56:94:7b:01:80:a6:2a:1b:f2:2e:6c:95:28:53:
                    54:d9:bc:a6:6b:e2:67:58:d6:4f:1e:31:0d:b3:86:
                    6a:b1:44:5b:9e:6f:90:03:fa:60:93:f7:3b:ee:92:
                    e9:5a:11:fb:c9:35:c4:34:d0:b0:2f:02:5d:82:53:
                    cc:ca:a4:a7:52:3b:0c:1a:d2:e5:79:b0:a8:4c:68:
                    70:9d:92:05:bd:fa:d1:aa:89:a0:17:6a:6f:89:21:
                    18:80:f8:a3:f3:12:d0:72:19:99:42:04:6b:3b:50:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BF:5D:67:39:8C:23:5D:4F:2C:61:D6:45:39:FE:F9:07:6E:5C:7E
            X509v3 Authority Key Identifier:
                keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:77:cb:19:f8:7f:08:ac:21:b2:e1:b2:52:ac:b4:17:d2:74:
         09:89:53:a1:c4:3e:c4:21:2c:81:17:38:2b:7b:6e:47:5f:ea:
         9c:a4:1c:68:fa:7d:d8:5e:f3:5e:02:0e:e0:15:3a:37:2d:3a:
         5e:49:c2:99:b3:0d:00:d9:11:95:22:58:14:c8:48:7a:7e:57:
         d6:7d:35:7a:74:63:23:04:53:d9:e1:ac:ea:22:05:e7:21:69:
         e8:0d:f7:4e:d7:9e:6b:51:47:a9:1d:31:6e:18:25:b2:5a:fd:
         db:ad:c3:29:0d:e2:37:9c:55:a3:67:ec:06:df:79:e5:65:20:
         64:6d:ee:f1:b2:4d:80:69:47:ce:37:2f:2f:74:12:c4:17:69:
         ae:43:82:7e:18:bf:f9:12:67:3e:96:c9:1e:cf:61:ad:7d:e7:
         48:00:6c:87:42:fe:b8:80:d9:89:23:cc:b0:a3:8c:eb:dc:28:
         0a:3c:49:51:87:14:89:70:94:6a:da:79:2d:dd:3f:66:7f:b0:
         63:f8:ae:e7:aa:95:22:11:31:f8:26:14:85:b7:69:00:7c:94:
         69:3e:c4:f9:1e:ae:37:d0:c5:38:10:46:2d:e7:48:7d:ce:00:
         ea:22:8d:51:cc:fb:85:64:46:86:c3:5c:1a:6b:99:d4:16:3f:
         d0:59:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----