Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
File:                     YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json)
Hash identifier:          /29pp487Q3Pdb8x6UZt/pfA7IK/s1OMyLR8SqBiFcys=
Subject key identifier:   9F:42:F1:90:0B:DA:61:93:C5:B7:F9:3E:60:88:81:82:98:5C:2A:BE
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Certificate issuer:       /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial:       01962F0720B95FE86BC07EC1C771D9F2DABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa (hash: eiPh0DahvU1iWHrSLpqP3W+j96pO/2cFZ0BXyIe6o9g=)
                          2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: MhkoLkmDyesu66As3KNACFxo3sqKR8nN9omQii+3J2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:20:b9:5f:e8:6b:c0:7e:c1:c7:71:d9:f2:da:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=9f42f1900bda6193c5b7f93e60888182985c2abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:2f:9b:2e:72:e3:b9:75:da:8a:b2:4e:a1:
                    e9:bc:37:77:81:07:88:f0:37:80:52:c2:a4:1e:91:
                    a7:09:ca:4a:f5:6e:db:33:0b:2b:de:ff:7b:25:13:
                    c1:f5:0a:6b:7a:6f:d1:ea:99:aa:81:e8:43:73:dc:
                    e9:05:11:72:82:5d:d7:2d:84:f8:03:eb:31:3c:3d:
                    f9:ac:f0:39:52:17:08:56:a6:60:e5:2e:24:2c:7e:
                    65:d2:1a:bd:79:67:01:d2:37:2d:9d:33:1e:8f:cf:
                    fa:71:83:82:0a:4a:5c:cf:07:b1:49:67:08:c3:ff:
                    08:ea:7d:99:77:c2:02:e4:f1:c8:fe:62:1c:f9:a8:
                    16:5c:16:7a:fd:90:3d:8a:b5:c5:88:2b:c0:7f:ae:
                    d8:8f:ed:f0:eb:e2:52:71:85:57:c5:20:ee:1f:cb:
                    78:c1:e3:0f:88:ed:aa:db:bf:0b:ea:52:41:a9:11:
                    80:bd:82:81:6a:3f:46:df:2e:3a:f7:eb:1f:b9:1d:
                    bb:28:37:e3:c6:db:3c:f3:21:a9:47:b6:16:fd:b5:
                    9a:96:72:b0:39:5b:fc:36:e0:39:1f:11:bf:b1:f4:
                    b2:af:19:dd:d5:55:3c:d4:6c:2e:bf:c7:85:c4:19:
                    c8:c3:1a:24:08:51:b9:b1:5d:17:9a:a9:53:68:d5:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:42:F1:90:0B:DA:61:93:C5:B7:F9:3E:60:88:81:82:98:5C:2A:BE
            X509v3 Authority Key Identifier:
                keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:65:21:f3:12:30:3e:02:84:4c:59:31:3f:af:17:9b:26:9b:
         e7:0e:4e:56:fc:1f:00:d1:5d:4f:14:2c:9c:a4:99:f5:66:9d:
         d8:d0:03:90:28:29:9c:c7:fb:73:09:19:d1:c0:5f:15:95:1d:
         65:fc:8f:9c:69:8b:95:67:e7:d5:56:2f:fa:e4:b8:d4:08:0f:
         f5:b0:cd:c3:c4:ca:c6:61:57:d0:91:e4:40:08:59:0b:b7:4d:
         16:fc:f1:6c:d9:8f:bc:35:66:b0:79:9c:12:99:f9:4d:8f:47:
         da:c0:c3:9a:53:80:12:63:e8:d5:90:c0:5d:d0:f8:2c:8e:80:
         85:4d:a6:12:d9:22:4b:9e:01:63:91:1d:64:6b:48:89:f1:aa:
         c9:5e:d1:f3:e3:0e:b1:98:a0:86:51:30:ed:97:65:66:81:36:
         a0:ad:25:46:d3:63:50:63:46:72:a3:15:98:fd:c2:9d:3a:6d:
         1b:ed:fc:a7:59:7c:9a:bc:f6:eb:56:7f:39:f6:62:da:be:bb:
         b6:90:cd:42:40:30:17:22:6b:af:74:a1:b9:41:84:c4:60:06:
         62:16:92:05:d8:0e:d0:76:f9:a6:8b:ba:a4:9e:0f:8a:12:9b:
         48:d5:93:a3:26:ea:01:fc:0e:9d:62:e1:2d:46:63:98:f3:7a:
         bf:d5:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----