Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File:                     yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier:          CEAaPCff3Yu5BqrQS7bD+5RF1u8AYiKTPcX5qJWuTw0=
Subject key identifier:   6A:46:28:CB:05:DD:57:2D:E2:79:8E:8E:16:74:21:88:F3:AA:27:43
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer:       /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial:       01962F3D45A1CCC4B5C440907088F33089B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
                          2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: Wa61xIsm8x8RviOgJJdzmYrzaMp+w0Euq72Qf1D0AaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:45:a1:cc:c4:b5:c4:40:90:70:88:f3:30:89:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=6a4628cb05dd572de2798e8e16742188f3aa2743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:b0:ca:87:e7:4c:ba:c3:54:9f:76:28:ff:
                    d2:ec:06:9d:3e:7d:ee:c1:4d:c1:6a:15:45:6c:d5:
                    2f:70:e9:d8:c0:3d:7a:69:cc:83:5a:3c:83:2c:82:
                    67:2b:da:bb:e2:9e:7f:02:96:88:45:50:6d:7c:7f:
                    8e:a8:03:ca:ac:7c:59:7d:01:52:91:d9:f4:cb:ad:
                    9b:39:b6:a0:0d:f7:e7:c5:cd:ca:f7:ed:09:90:78:
                    c0:cc:de:d2:0f:45:13:02:6b:e7:00:87:42:95:7a:
                    24:c3:06:55:84:46:e7:01:df:96:c2:4f:ba:28:19:
                    3e:94:21:d0:5b:4f:72:18:2a:81:58:81:9d:2b:f2:
                    32:9b:ac:8f:ce:c8:cb:1b:70:4e:36:f9:2c:6d:7a:
                    94:d1:cb:5b:04:67:e2:43:90:f2:f6:0d:c7:f3:a1:
                    5d:0e:2f:64:5d:1b:b8:a5:c8:a8:c9:9a:16:cc:d3:
                    d0:22:12:16:cb:34:4d:08:dd:9b:0f:a0:50:f7:d1:
                    85:e5:f8:32:71:2a:e8:6c:b7:3f:01:b6:b1:74:b0:
                    ef:56:05:cf:d0:c9:ed:20:97:97:f3:9f:76:0c:1d:
                    4a:ba:e1:de:f8:e4:b4:6a:a6:7f:d9:7a:76:2a:b0:
                    38:04:ee:18:ef:b3:7d:95:ea:2a:d9:67:61:3d:09:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:28:CB:05:DD:57:2D:E2:79:8E:8E:16:74:21:88:F3:AA:27:43
            X509v3 Authority Key Identifier:
                keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:c4:94:04:f6:9e:8c:31:62:52:d5:89:db:e8:4f:fd:97:
         5c:79:a3:5d:93:65:ef:1b:76:f3:ab:7b:4f:6b:14:91:c5:e0:
         d6:e1:dd:ef:44:32:c8:8a:8a:e0:47:fb:53:2e:35:f1:ea:e5:
         5b:4a:e1:50:69:18:71:f4:4e:4d:5f:e6:72:ad:d4:56:2b:67:
         74:ae:b8:ac:d8:1b:a5:c8:ec:39:e7:84:fe:81:cd:bd:94:64:
         26:26:db:1a:f7:47:73:2a:f4:d0:3b:b9:64:22:ff:e4:fe:4b:
         2b:4b:fd:12:bb:8a:e2:d0:34:6f:21:66:6e:f4:ff:08:fd:47:
         33:a6:58:66:ed:e7:34:93:c2:b5:d5:50:32:c4:15:00:11:0d:
         7d:45:10:ce:f6:f8:09:e6:02:89:07:72:ae:60:0c:e8:70:30:
         87:f4:4b:1f:57:e0:0b:11:fd:96:52:8e:20:ea:1e:00:9f:37:
         27:c9:b2:97:8b:b3:55:16:5f:64:d8:ec:eb:4f:0e:d7:5a:6f:
         63:21:31:e4:0a:92:fa:b6:0c:d0:5f:6b:7f:5e:a7:6f:73:86:
         2d:3b:1d:e6:cf:43:db:31:1e:8c:42:d9:00:b7:1f:52:2c:d3:
         92:9d:4f:6b:8a:ac:5d:9b:00:08:d7:c0:fb:f4:15:68:68:58:
         e7:95:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----