Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File:                     2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier:          jTfwqPF7jJsboFZI/9g4GphkqYj4+P85j1Z6DUmBfKQ=
Subject key identifier:   0B:54:8A:72:40:A1:BC:72:AF:C3:3D:62:D5:FF:D7:8D:74:CD:10:8C
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       01962F3D30407F3DA7A5EA9A1630AAA3FE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number:          1255
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: 1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa (hash: H9QCxfs9A7ILRXrbCUmxWpocaR5zmO3JmxQzjRfE7KE=)
                          2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: 1hAWAoDwFyI3osnkyaTLINNwBQS7jxu1/r0RtO9j3F0=)
                          3: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=)
                          4: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=)
                          5: WezcbaDCWCglJVxlkqENoVQ5GlY.roa (hash: kXoxzzMiFtQKZOeEaMcNXCC2S+tWWgxtkN6qKdf+Gxc=)
                          6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=)
                          7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=)
                          8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:30:40:7f:3d:a7:a5:ea:9a:16:30:aa:a3:fe:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=0b548a7240a1bc72afc33d62d5ffd78d74cd108c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:2b:ce:1f:ef:ec:c7:ff:e4:7a:3a:d1:78:
                    54:20:f1:4d:76:6b:18:f3:6c:c5:f9:65:b6:c4:ab:
                    77:f2:11:6d:6d:5e:c1:29:b3:c2:50:b3:25:82:40:
                    72:f8:38:90:d2:82:8e:db:f5:87:e3:47:47:9b:1a:
                    e3:0a:03:cc:da:37:5f:58:f8:b7:05:88:49:8b:6a:
                    0c:3d:e1:c6:55:c8:9f:c4:46:32:9d:0e:9e:31:65:
                    78:3a:ce:a0:de:19:56:6a:02:a8:ef:c2:5f:4d:16:
                    da:a9:04:09:1c:4c:74:26:36:30:26:80:19:34:0d:
                    a4:e9:04:c9:ff:90:db:9e:ec:4c:da:33:09:c4:68:
                    15:7f:d3:80:9f:8e:cf:dd:81:c4:3c:0b:83:74:53:
                    1f:4e:94:1e:4c:02:30:e6:cd:09:d5:b0:35:b8:a3:
                    3c:c6:1f:70:b4:34:49:58:9a:9f:2d:75:b2:c3:29:
                    06:79:f6:9b:52:d3:db:38:cb:cb:25:ee:e0:f8:6e:
                    5f:07:77:62:04:f9:06:a9:17:24:d2:df:c5:a5:46:
                    5f:07:dc:e2:c9:23:85:c7:b3:78:76:11:d3:50:14:
                    66:9f:fb:b4:a8:30:78:a0:c4:b4:8e:86:52:fb:6e:
                    06:34:fb:fc:73:fa:f3:73:18:5d:62:ae:82:7a:e0:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:54:8A:72:40:A1:BC:72:AF:C3:3D:62:D5:FF:D7:8D:74:CD:10:8C
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:54:b4:d8:f9:77:cf:98:df:d0:04:94:2f:22:2c:e5:05:
         f9:f3:1b:a5:fb:62:ae:47:ea:c1:f7:9b:bc:6e:b4:bd:00:35:
         2b:bd:65:d9:2c:ce:15:b7:97:46:6a:7e:8e:6d:72:eb:19:a4:
         31:3c:2d:78:7b:18:b4:ea:c3:ae:3e:ae:62:6c:f0:80:bd:a3:
         44:d8:d5:1a:8e:6f:7d:09:f8:8f:56:65:0f:aa:55:f6:a3:d3:
         03:3f:22:15:26:05:30:65:58:b9:57:2c:76:a3:c0:68:c8:cf:
         38:5a:f9:6c:97:94:52:74:d9:a7:a9:c2:e5:d8:9a:9b:58:ae:
         bb:65:d2:20:f7:9b:e2:a9:01:a8:c4:20:06:1f:05:1a:c3:ef:
         32:6c:44:56:a2:ab:ec:71:99:9f:b9:18:d0:b2:73:26:5c:68:
         ae:14:2e:d0:f7:ef:2e:a6:10:09:4d:e5:b8:a7:0f:98:02:5b:
         2f:9d:3e:ed:54:6e:06:7a:60:fb:65:b2:e3:75:47:f9:f4:1c:
         a0:e8:18:7e:cb:ec:68:9a:3c:85:be:7d:cf:1c:48:bf:25:db:
         be:4f:79:be:50:a8:0f:9b:25:22:b7:bc:0f:a0:9a:4a:5c:bb:
         c8:2b:58:f7:b5:b0:03:24:d0:4d:6c:2d:d2:6a:67:6e:66:15:
         8e:a1:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----