Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
File:                     yyDpqru2GRVGEQI1z3bEg4S0UdA.mft (raw, json)
Hash identifier:          6PbH0tBAF6HyPHBcHtRG9/KWR6dgBnF/bvMP+xxWrlo=
Subject key identifier:   76:1E:DF:C8:D2:84:6D:A4:64:59:9B:67:55:32:C0:24:64:D5:31:FC
Authority key identifier: CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
Certificate issuer:       /CN=cb20e9aabbb6191546110235cf76c48384b451d0
Certificate serial:       01962F74D6C39D895547E5FD492B3DF2D748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
Manifest number:          0437
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: FrgpiGySO2oWsL9iFngnI7PbElc.roa (hash: K8ZOrdKMvikDUKQOk+LhYtaLYhJs3NNoQsJnp3Y9dfE=)
                          2: yyDpqru2GRVGEQI1z3bEg4S0UdA.crl (hash: qyGu5N69sRiGs1bWzMHzjtWRqT+Xyz3DIlDThwv+GcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d6:c3:9d:89:55:47:e5:fd:49:2b:3d:f2:d7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb20e9aabbb6191546110235cf76c48384b451d0
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=761edfc8d2846da464599b675532c02464d531fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:81:d5:fc:e7:d8:17:99:5b:e2:e0:54:c1:
                    b2:4c:5c:ac:c7:ac:b3:e2:fc:db:27:7b:fa:82:d0:
                    09:e7:ab:c1:da:0b:f9:9b:d1:08:9d:0d:c8:d6:b3:
                    2e:6d:b4:63:d6:42:5d:47:35:3d:6d:4d:b0:20:9f:
                    a5:2d:11:cc:5f:9d:3d:19:cf:6a:9d:b5:77:4b:8f:
                    de:70:0c:c7:68:0b:cd:37:72:b9:25:99:24:97:a5:
                    fc:30:23:00:72:ad:84:6e:6f:4b:b3:38:50:a3:51:
                    f4:fb:8a:13:09:8a:15:ea:4a:a2:ce:b3:0a:de:97:
                    ed:cd:12:4c:c4:27:82:a0:88:7a:78:c4:76:30:2b:
                    87:f6:c9:a5:43:d7:5e:a2:e6:c1:0a:77:a9:df:89:
                    31:ab:de:70:6e:61:8a:97:83:e9:66:d5:06:51:3d:
                    54:36:2e:05:a1:f2:5c:4f:00:ca:c4:ef:be:97:72:
                    b0:ad:97:17:55:65:d8:b4:64:81:8b:67:43:66:7f:
                    e5:bb:a8:e4:2e:36:24:c4:e1:88:05:9a:a6:a6:17:
                    c4:44:5d:a5:11:54:c9:44:5e:f0:ab:ee:86:2a:78:
                    82:12:4e:cb:df:1c:21:3c:04:37:95:f9:0b:83:e0:
                    c3:b6:e8:7d:b4:cf:03:d6:18:6f:78:04:f7:e7:0a:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:DF:C8:D2:84:6D:A4:64:59:9B:67:55:32:C0:24:64:D5:31:FC
            X509v3 Authority Key Identifier:
                keyid:CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:18:19:fe:ce:83:cf:e5:e0:90:a3:11:1c:d3:e7:09:f5:7f:
         4f:30:26:a2:07:7e:82:82:87:16:f0:32:57:46:4c:01:b7:11:
         01:3b:1e:9f:ea:d5:37:d5:4b:e9:2d:dd:16:de:e0:12:b8:01:
         b4:cd:7e:11:8f:03:a9:00:bb:f7:13:35:05:e8:47:af:c7:70:
         6e:8e:3e:85:27:2a:14:ea:b2:12:a4:86:db:1e:b8:80:b4:e8:
         ed:fb:94:92:3a:16:5c:cb:26:ab:b5:ff:ac:67:50:7a:26:26:
         9e:2e:45:2a:37:ff:28:a8:04:04:79:34:a9:e2:20:71:d0:7d:
         97:e1:bd:a7:2c:34:4d:7d:77:e0:9c:bc:c4:58:22:18:41:65:
         53:59:8f:cb:c6:53:4a:ee:41:44:90:c3:d5:be:79:fa:f5:4f:
         69:09:44:5c:44:6f:cf:46:38:40:52:7e:b5:38:35:7d:c2:67:
         64:e2:01:2f:fc:b1:e9:5c:ec:3a:49:fb:73:7f:fa:a9:2c:44:
         3e:05:77:c3:69:4a:33:db:c5:cc:3f:73:ee:e5:2f:eb:b6:6a:
         97:d1:91:3c:e5:c8:1c:b8:5f:3f:8c:ca:bf:92:4f:58:59:06:
         41:15:63:c8:2c:b8:fe:c9:07:24:6c:cb:d7:23:30:29:e5:76:
         23:4a:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----