Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft
File:                     yuDyZX221YxEden7gXNW4u3SzA8.mft (raw, json)
Hash identifier:          Hb/N+iVHryDK8Y54j5ERTHvuYv5hwegJH+Gtpu+DSoY=
Subject key identifier:   2E:CF:5E:67:91:D7:67:EB:DE:EB:48:DD:30:58:61:D1:DB:B1:01:58
Authority key identifier: CA:E0:F2:65:7D:B6:D5:8C:44:75:E9:FB:81:73:56:E2:ED:D2:CC:0F
Certificate issuer:       /CN=cae0f2657db6d58c4475e9fb817356e2edd2cc0f
Certificate serial:       01962F06A21637893D03320DE287445B6C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuDyZX221YxEden7gXNW4u3SzA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft
Manifest number:          10C6
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: yuDyZX221YxEden7gXNW4u3SzA8.crl (hash: G882yS2PyiSTg3c1X0bGqoczedNapO7s35Omx8/cDLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a2:16:37:89:3d:03:32:0d:e2:87:44:5b:6c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae0f2657db6d58c4475e9fb817356e2edd2cc0f
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=2ecf5e6791d767ebdeeb48dd305861d1dbb10158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:70:0c:2f:fe:22:b6:3b:1b:9b:b2:ef:e6:
                    5d:0b:ba:b2:02:37:d8:9a:41:89:8a:84:40:d3:78:
                    f5:3b:34:b6:62:7e:8e:ef:85:6f:89:d1:ad:79:71:
                    3a:5e:8e:b7:b1:87:29:27:d4:7a:fe:97:ec:69:de:
                    f6:72:da:a2:b3:71:6f:c4:7d:f2:a1:8c:ba:bf:0f:
                    7b:02:51:39:7b:a3:a0:1a:16:b0:43:20:98:d7:b6:
                    90:ab:0b:3c:42:b9:f1:47:aa:0d:5e:94:7a:a3:5a:
                    c7:bb:7b:c0:e1:9a:87:0a:43:dd:a9:77:93:84:8a:
                    8e:25:c2:de:c6:33:ab:94:cb:e6:2e:33:ef:4c:d9:
                    34:da:13:95:16:96:a3:d1:67:ee:7b:12:a8:81:ce:
                    b4:38:e6:a4:42:fc:b3:11:70:c3:3e:c2:1d:46:d7:
                    be:1f:e1:0c:a8:fd:5f:23:35:4b:e8:5b:24:69:2c:
                    bd:5c:a6:d1:fe:31:e7:0d:41:0f:93:72:82:e1:c9:
                    88:a7:1f:6c:0a:6b:4c:88:c9:5f:a1:30:d3:58:2c:
                    da:92:d0:b3:9a:21:19:e0:35:96:ef:71:68:19:5e:
                    1c:a4:67:23:05:fb:7e:9d:99:2b:94:22:76:ff:50:
                    e6:82:c4:4b:83:c8:c2:da:17:3a:aa:ab:47:e9:d3:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CF:5E:67:91:D7:67:EB:DE:EB:48:DD:30:58:61:D1:DB:B1:01:58
            X509v3 Authority Key Identifier:
                keyid:CA:E0:F2:65:7D:B6:D5:8C:44:75:E9:FB:81:73:56:E2:ED:D2:CC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuDyZX221YxEden7gXNW4u3SzA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0f:21:3b:9c:b8:7b:60:b5:30:03:b2:9f:25:29:82:56:ec:
         ef:47:2d:bd:00:e0:64:5f:fb:83:87:1f:7f:0e:bc:b6:7f:e0:
         33:d9:15:82:ec:5e:26:9e:9f:84:29:66:10:5a:4e:17:62:4d:
         24:6b:c6:0c:9b:57:5b:4d:37:34:41:a6:3f:64:b7:e3:6a:46:
         d0:6a:32:8f:e2:df:04:90:58:4e:ef:32:33:71:67:2d:b1:02:
         62:80:d0:45:56:57:40:2e:52:1e:cb:8b:61:71:4b:25:7c:b9:
         e8:1a:01:78:88:98:c6:e6:79:7a:63:20:6f:b4:e9:95:00:60:
         e3:c9:82:9f:7b:90:68:99:3f:3e:8f:05:e8:49:3f:10:98:d0:
         a4:d7:1a:40:c8:3c:1f:14:09:df:ae:12:38:bc:08:3a:1f:b5:
         01:c8:60:09:2e:58:63:97:34:35:d4:b1:4f:48:7d:7d:42:59:
         2c:fa:44:23:c0:1f:20:0d:60:dc:85:9f:cb:8c:bb:63:22:f4:
         bf:e9:67:0d:dc:5b:ed:85:15:69:98:e8:b9:a2:1b:73:4c:26:
         35:e4:8e:e5:88:2a:12:59:20:43:26:bf:d0:c0:55:85:84:56:
         46:e2:6a:c9:72:50:dd:dc:1e:21:2b:61:87:dc:4f:c1:18:73:
         9f:6d:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----