Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
File:                     y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft (raw, json)
Hash identifier:          vPfWXkAlY750MwFB+NSotG7LEStl9sceAOpmgetHkbs=
Subject key identifier:   35:A5:CC:57:BE:05:2D:40:79:D6:DE:AE:1A:32:FF:94:7B:BB:F2:EA
Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
Certificate issuer:       /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Certificate serial:       01962F3DBD5F92C1C48876E7AA0B1D324D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
Manifest number:          1089
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: nPtNOVhjTVbNoPzqUJGa-Eqnb0Y.roa (hash: Yuz9f1rxV7S4atM+GycUQVhSQinvjc3oT1lXV1zOVuE=)
                          2: y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl (hash: sqERGJ7BtnpT9izvPdQnwDPRtL1aI10HLM8QMZhMP68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bd:5f:92:c1:c4:88:76:e7:aa:0b:1d:32:4d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=35a5cc57be052d4079d6deae1a32ff947bbbf2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:67:ba:f6:f1:e6:ab:64:1f:c5:12:c6:17:
                    88:db:69:88:90:7e:99:4a:d4:eb:22:37:d4:8f:d5:
                    c4:1e:f6:33:c7:bd:df:57:6a:ad:80:67:7a:96:b8:
                    bb:71:7c:55:67:6a:f1:93:4a:ca:59:07:f5:40:63:
                    21:fa:33:90:7e:3d:10:f3:a9:a4:d4:40:f8:e7:65:
                    45:32:3b:45:80:50:5a:88:8e:15:9f:f3:fb:0f:ea:
                    18:bd:03:dc:6c:da:2a:97:94:59:ea:1f:ae:ab:a5:
                    1f:b3:33:e4:93:4a:94:dc:72:e5:fb:99:64:0f:a6:
                    24:18:25:5e:d2:58:28:d9:4a:a1:eb:a6:52:a7:79:
                    3f:3d:21:5e:fc:c2:63:ac:68:d7:07:29:a5:45:a0:
                    c5:8e:0c:09:e4:f4:52:a0:17:10:0b:3a:68:33:70:
                    33:43:55:dd:29:da:bf:d0:9f:59:b3:33:9d:a0:64:
                    20:75:e2:5c:72:d0:3f:2a:30:93:89:ae:9f:41:6e:
                    cd:49:d1:8c:c4:e6:a2:9f:b7:4a:07:bd:32:3c:59:
                    79:01:14:81:de:1e:9f:27:e2:cf:ed:d0:b2:db:09:
                    84:28:70:b5:57:02:2b:c0:be:59:cd:01:35:73:27:
                    2f:a1:56:81:12:36:99:9e:f5:be:b3:30:62:b4:9c:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A5:CC:57:BE:05:2D:40:79:D6:DE:AE:1A:32:FF:94:7B:BB:F2:EA
            X509v3 Authority Key Identifier:
                keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:d3:58:06:ee:3b:9a:73:2e:70:cd:fc:2a:61:f6:41:a2:
         29:c0:6f:b8:29:4b:04:ed:bf:19:83:e1:d4:b4:2b:d2:ed:fc:
         f6:04:4e:6f:3d:bb:e6:a2:e0:64:3c:18:be:f7:1f:e8:59:2d:
         3c:8d:00:ba:24:73:52:84:15:97:dc:a5:4e:63:a9:fd:e5:26:
         fc:f6:01:2d:4e:c6:12:cf:96:e8:b4:07:4c:97:97:2c:80:a6:
         76:e2:32:92:05:c4:52:e8:1d:a4:56:03:1c:77:44:36:69:ac:
         34:e6:ec:13:9d:cc:53:26:19:75:3b:44:26:4b:58:fb:9b:a9:
         75:a6:6f:63:a2:e6:68:f1:f7:42:c1:3c:c1:06:e1:1f:a1:5e:
         83:ec:71:74:e2:66:ae:57:8f:f8:63:4b:be:8e:be:36:bd:4a:
         58:e2:38:d1:f8:70:7f:c9:a0:fa:a2:d2:0a:07:e8:7d:ba:df:
         66:95:48:24:8f:23:70:85:fa:41:e4:f0:f4:83:c1:e9:d5:83:
         b1:67:2d:db:9b:0d:b0:80:65:04:21:b2:e6:44:f8:98:cb:40:
         83:c9:e6:6f:9c:16:b1:54:72:c1:e9:95:08:3f:e3:bb:73:c7:
         7d:d0:8e:ab:60:ad:13:84:d7:de:2b:31:2a:4a:92:72:e1:07:
         03:bc:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----