Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          sbc0zDz2hXoeaUQjush/sBb6yknvDFbCUJ6LSqeSDh4=
Subject key identifier:   29:23:24:3E:61:65:98:F8:B0:C0:97:0C:3A:87:44:74:1A:81:D7:E3
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       01962ECF9ED1DCEF0D6BDEEF793E9D599D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: 2E9kWgPtYN0WAc6RCe6lEkD5GGc.roa (hash: WZKZ1nRj/095D4tmKUIjIrN2QssyrW7JaucRn5aUuQo=)
                          2: AkxBzFahq-o6wjZntexC75GkoQc.roa (hash: XI+dcnOKPlHyd45iksd8y1QhwpvH96atl8vNKM9DQ9c=)
                          3: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (hash: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=)
                          4: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (hash: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=)
                          5: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: q+2EWNTjIh7rccHxivER14T6bra0WIvXZkXAw12Eeks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9e:d1:dc:ef:0d:6b:de:ef:79:3e:9d:59:9d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=2923243e616598f8b0c0970c3a8744741a81d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:f2:13:f2:3f:a0:28:15:d9:14:c2:86:0f:
                    49:f9:4f:d7:72:26:d3:7c:0b:fc:79:9e:61:67:a1:
                    d1:ab:bc:5d:45:76:65:4b:c2:75:e7:4f:3d:ed:09:
                    6a:20:3b:76:90:e0:64:4f:da:ff:e1:ac:8c:7d:fd:
                    7e:ce:7a:f4:86:d0:76:11:15:75:77:ac:f1:6f:fe:
                    e5:cd:40:91:05:2b:b6:09:13:67:a4:be:4c:5a:b6:
                    43:0e:be:aa:a7:9c:ec:7f:94:9a:c9:0a:32:cc:3c:
                    4c:c2:b0:0d:be:5a:19:19:a5:84:d1:f6:45:69:79:
                    ba:ef:40:9e:c7:6f:b6:53:ea:82:5f:ee:0e:c5:6c:
                    39:f1:3a:bd:c6:ee:1f:bd:f8:bb:c5:0f:49:b7:3c:
                    87:0f:eb:45:72:eb:9c:d5:1c:84:fa:97:09:87:d2:
                    ac:c6:ba:98:3a:9b:c3:dc:0f:b3:a8:cd:69:1b:7c:
                    09:a0:b2:7e:1d:dd:24:72:78:91:af:51:3f:a8:ab:
                    e3:62:f2:72:2b:68:c5:38:fb:59:12:e0:dd:5f:2a:
                    fc:73:c8:c9:01:37:6d:52:c8:b9:ee:76:59:bd:4d:
                    50:09:c9:9a:d5:c9:c7:e9:8d:3f:87:28:ad:32:4e:
                    54:f6:3a:38:ee:4a:71:11:a1:e7:cc:2d:12:13:3c:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:23:24:3E:61:65:98:F8:B0:C0:97:0C:3A:87:44:74:1A:81:D7:E3
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:11:31:d9:33:36:1f:45:d6:d6:60:3e:96:75:cd:a4:49:2c:
         a1:2c:b2:a5:31:d8:ce:fc:a8:2d:4e:87:44:a8:f2:0d:9b:bf:
         b7:2e:d6:ff:b4:ba:1a:6c:19:1c:fd:42:17:20:f3:b6:05:c7:
         ed:05:78:27:44:cd:e5:1d:e6:6a:14:1a:cb:44:09:ea:b6:ae:
         d5:26:86:ed:b9:52:48:78:79:a6:9e:92:12:1b:4f:cf:71:e1:
         90:b3:8b:93:cc:18:41:c5:40:7d:61:fb:eb:f9:49:b5:ff:89:
         64:ba:c7:8c:71:14:28:ea:08:84:84:e7:01:10:a6:35:e1:b8:
         89:2a:b4:89:64:b0:35:fa:08:e4:03:31:17:f8:b4:7a:e5:73:
         ac:de:a2:3d:4d:c3:2a:0d:89:73:60:1c:19:b9:e9:50:3b:bc:
         6e:2c:22:fe:81:bb:0a:f4:43:a2:e7:a7:ad:72:e1:2c:8c:1c:
         46:43:bd:8c:7c:14:1b:16:52:12:14:ed:4f:66:50:67:87:d8:
         c3:ce:ea:fc:12:76:59:d5:19:f4:8a:20:93:85:af:88:8d:85:
         3b:4c:62:9c:8e:e8:9e:66:ea:e8:6b:08:28:59:5d:f1:79:6a:
         ef:b5:53:50:02:49:4d:42:78:8d:40:85:50:81:af:f3:6a:69:
         6e:40:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----