Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File:                     YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier:          oKhmE97VHnKyikJbasota/AObSOmkltwiCRrMjFtEQU=
Subject key identifier:   FD:73:40:98:D6:41:DC:F8:68:46:1B:8A:B8:43:4C:97:03:A8:96:C7
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer:       /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial:       01962F073541CCCF3D136D4498DBB1B1FDEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number:          0BAF
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: QXZ8B5uLBLlmYObeqrmnFH99m8OfCx0VSjSTs3qmK5U=)
                          2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:35:41:cc:cf:3d:13:6d:44:98:db:b1:b1:fd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=fd734098d641dcf868461b8ab8434c9703a896c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e5:e7:c6:9c:14:39:12:c9:4b:14:7d:12:9d:
                    ba:5a:b0:c7:0d:34:db:34:d0:55:27:26:19:fa:01:
                    6b:4b:e9:74:36:c3:5a:65:f3:2f:96:87:ac:cc:30:
                    69:e5:3f:fd:bf:52:3d:67:16:a2:e2:57:45:7e:25:
                    e1:0e:8f:31:52:eb:46:77:47:42:cf:55:93:06:27:
                    66:ad:ac:b5:50:51:14:37:da:e8:22:5f:d7:3e:7b:
                    80:d2:0a:92:70:d7:91:1d:9a:68:a4:f6:e7:cf:af:
                    69:55:bd:99:2b:43:1c:6f:fa:fe:2b:7d:96:ab:38:
                    73:31:a7:63:86:32:6e:12:54:fa:c2:3f:45:27:cc:
                    e2:34:35:f1:56:ac:40:45:8c:b3:04:07:63:5b:dc:
                    56:71:22:03:ba:79:94:7a:ab:f1:b6:25:b4:8e:b0:
                    88:84:e0:7c:71:96:93:e6:18:9a:6b:68:c2:79:62:
                    0b:b1:43:d8:91:5a:4c:8a:06:2d:bd:18:9e:3c:e0:
                    0b:cd:90:2c:d3:29:b3:34:38:be:09:e2:02:06:18:
                    4f:00:06:a1:58:a5:19:0c:f3:1a:86:2b:b6:8d:38:
                    91:50:b2:53:22:e0:7f:f8:53:5e:fa:ff:59:dc:05:
                    31:dc:1b:de:4b:d7:d7:f1:bf:29:49:c6:8e:8f:fb:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:73:40:98:D6:41:DC:F8:68:46:1B:8A:B8:43:4C:97:03:A8:96:C7
            X509v3 Authority Key Identifier:
                keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:41:7c:53:2d:25:a6:dc:97:7b:eb:1b:8c:25:ac:70:b0:33:
         e5:e4:c1:f1:c5:15:b5:7f:76:37:66:6c:9e:c6:05:c3:28:71:
         65:71:33:fb:f7:99:f7:1b:b4:7a:eb:97:16:07:2e:12:93:64:
         f3:f2:ac:bb:a9:ef:01:ab:cf:9a:22:b9:9d:64:e1:69:12:3e:
         09:b3:93:30:43:43:85:28:df:19:04:0f:d7:6c:14:f1:8e:a8:
         cc:df:cd:86:50:d3:be:66:83:01:6a:3f:e5:dd:60:aa:2e:8f:
         76:4e:43:5f:09:f7:f2:bb:42:8b:d7:11:ea:70:39:96:67:ab:
         0e:c9:9e:21:19:1a:ec:d5:bd:ba:36:21:7e:09:b8:00:2b:76:
         a5:e8:e0:7f:a7:b7:9c:91:35:0c:31:a9:8d:ed:08:fb:ee:b9:
         f6:2e:9a:a4:f9:2c:92:b5:ff:fa:5c:7d:7f:93:af:00:59:94:
         03:71:73:89:9f:c7:d2:2f:d6:0e:c1:87:94:23:be:a4:2a:49:
         e0:8e:10:37:88:ee:b7:66:0e:c7:5b:8e:71:bb:89:06:76:98:
         98:ae:97:b6:c4:2e:f5:10:ef:5a:a2:73:54:f4:a2:09:ce:38:
         ad:73:26:59:92:c8:e7:ba:20:7d:88:ce:0c:2a:4e:2d:71:85:
         f4:58:d8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----