Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File:                     ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier:          610oU5JIIfUy3Md7xGJZD3dteKsbfXYC5fMYPZkkR1g=
Subject key identifier:   34:FF:26:D6:EB:62:CB:7B:47:52:6B:71:39:64:FF:8B:32:44:B2:3F
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer:       /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial:       01962E9928EB593A6EA94F34B06281DDE0FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: OB0YreH+p2CFwNM4J7GnEbTNDJIkmRfWolhWuHRP3V8=)
                          2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:28:eb:59:3a:6e:a9:4f:34:b0:62:81:dd:e0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=34ff26d6eb62cb7b47526b713964ff8b3244b23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:77:13:e0:75:3d:21:2e:cf:61:c5:3a:49:
                    11:69:fb:6c:2d:96:b8:c9:a1:e4:74:66:24:5c:4f:
                    2f:51:e1:13:8a:72:90:f1:15:71:67:29:b2:ca:3c:
                    6d:46:78:10:f0:9b:fc:14:8a:b7:91:58:28:e2:96:
                    7a:95:8b:29:59:89:9c:bf:c5:cb:7a:41:d8:f8:03:
                    bd:97:74:8b:c0:d5:62:0e:85:75:0e:7f:69:01:3a:
                    cd:bc:32:d5:e1:51:74:1d:12:23:17:24:af:6b:4a:
                    21:b0:a6:4e:08:7a:b2:95:cd:e7:23:42:bf:70:d0:
                    0e:5c:49:93:cb:2c:ec:4d:8f:9a:5d:12:42:c8:11:
                    72:72:e8:97:28:0a:10:45:6a:e1:a8:b3:ec:9e:ea:
                    38:88:1a:89:99:d1:8a:ee:f9:31:12:4d:78:8d:76:
                    e3:ab:4c:75:e0:67:85:3f:73:74:4d:29:80:c9:4d:
                    fc:b2:87:ed:79:44:f7:87:82:d7:dc:90:b6:bb:9c:
                    a3:7e:1b:1d:d5:31:93:ce:d4:b1:ec:86:81:18:0a:
                    a3:b4:3a:b7:34:ce:76:a2:4a:3b:18:88:64:2b:b9:
                    76:31:fb:67:79:c5:f3:ef:43:e7:a7:6a:23:2a:6d:
                    4e:f6:a3:5b:c6:be:c1:58:c5:a6:9d:3b:54:48:0e:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:26:D6:EB:62:CB:7B:47:52:6B:71:39:64:FF:8B:32:44:B2:3F
            X509v3 Authority Key Identifier:
                keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:17:52:52:4b:d8:e7:f2:59:49:d8:d5:10:1c:a2:42:2c:
         ed:b4:44:2d:d7:2e:1a:fc:f7:21:0d:d4:f9:8c:50:83:3c:ba:
         31:fb:6b:92:c6:50:09:04:3f:b6:9b:13:0d:04:b5:2b:de:c7:
         97:fc:2b:a8:f4:d6:91:20:6c:03:d6:8d:f2:23:18:84:04:4d:
         4f:b0:69:4a:2b:de:dd:0c:50:c3:55:dc:f4:f3:0a:25:57:43:
         94:c7:fc:68:58:83:5e:b0:77:b0:68:90:d2:4a:35:e2:f5:c4:
         f9:0e:23:27:a3:23:da:59:25:4c:6c:b2:3e:ce:27:84:14:3d:
         d2:9b:d5:f6:8b:bb:91:74:0c:48:36:20:d1:6e:44:14:0f:71:
         48:1a:71:f1:57:72:60:ec:f8:a0:d7:91:67:0b:72:c4:bd:28:
         26:87:3a:75:bb:1e:e0:77:96:58:43:1b:8a:a2:5d:df:11:90:
         a1:46:a0:41:d8:3e:b2:2d:f4:1c:8d:d8:b9:de:c7:13:5b:08:
         25:71:cb:6c:c4:47:49:4c:c5:2a:cb:dc:90:2c:9c:77:22:39:
         6c:fa:0f:04:eb:ad:8e:6a:b6:a8:35:18:9d:ba:64:13:8d:28:
         c5:88:de:3d:72:a2:53:0b:0c:67:c9:b9:7b:a2:75:9c:a5:cf:
         90:f5:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----