Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File:                     RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier:          ZVFMxQI8/ql3n5dZoOEDAK+SkHcLG/nUSxQIrRyTdGo=
Subject key identifier:   FD:DE:11:9A:92:BB:C0:F7:C7:06:EC:59:8F:71:EC:1A:28:08:00:9A
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer:       /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial:       01962FAB62FC6409D2D0613D2A6F651F5848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number:          0642
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
                          2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: zpXIKNPdsjnCk23XAAq5j91dThHonW5/mn3LBLmXmlI=)
                          3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
                          4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:fc:64:09:d2:d0:61:3d:2a:6f:65:1f:58:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=fdde119a92bbc0f7c706ec598f71ec1a2808009a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5a:e1:7a:89:20:59:bb:8c:aa:7b:6f:ee:98:
                    d8:5b:b1:56:d1:3c:9c:d9:0e:51:57:40:4c:a0:73:
                    f7:fe:35:e7:31:5b:5e:79:99:b9:d0:3c:34:c2:01:
                    c8:f9:a1:04:b3:1e:e7:dc:28:cb:f9:81:2c:42:c6:
                    43:a8:2b:c5:51:5d:2b:4e:23:ef:17:65:df:c6:13:
                    80:f2:f7:28:3c:24:98:00:1f:57:c7:26:33:74:48:
                    b5:2d:89:2e:10:06:d8:3f:9a:fa:b5:f9:f4:08:45:
                    a2:69:37:d8:4a:29:5f:da:0f:09:61:35:3a:73:c3:
                    1c:6b:96:ed:b6:f9:27:d0:94:83:64:41:b4:96:cc:
                    77:29:fe:52:bb:1c:97:90:ca:e6:47:3e:82:cf:1a:
                    66:2f:e0:3f:d5:7a:4f:ba:7e:69:08:f0:01:13:43:
                    81:f8:c2:4e:ef:1d:0a:41:f5:6f:b3:b1:74:3f:f0:
                    80:9a:21:81:10:7d:76:b4:e1:58:60:d2:6a:b4:97:
                    34:27:7c:21:56:6e:bc:05:73:34:28:dd:c9:9b:bc:
                    e9:c8:55:99:3d:19:92:41:97:92:54:14:26:05:e7:
                    c0:70:bc:3a:78:1a:3d:57:7f:8c:bb:cc:85:73:ec:
                    ad:72:73:72:14:34:84:fb:d3:42:c7:89:bf:dc:d2:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DE:11:9A:92:BB:C0:F7:C7:06:EC:59:8F:71:EC:1A:28:08:00:9A
            X509v3 Authority Key Identifier:
                keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:6e:d8:98:67:ad:27:83:4c:4c:be:b1:24:d6:e7:33:54:
         da:0e:b1:14:23:5a:49:b9:0d:9a:ac:73:81:0a:53:99:b7:7b:
         52:81:55:e1:71:c7:f5:2a:70:b0:cf:36:b5:a6:73:f9:4b:95:
         2c:85:90:bc:25:a9:38:4a:0a:f4:8e:78:5b:86:06:fd:7e:f1:
         f1:e4:45:79:cb:75:78:df:16:f5:10:1a:92:91:35:ff:09:de:
         ae:ff:e3:e4:e2:98:70:ba:bd:28:15:0c:dd:1d:c3:70:65:36:
         0e:9a:eb:48:6f:ee:ad:a6:10:ad:78:4d:a7:fa:af:f0:ae:4f:
         c2:75:02:98:db:ce:d2:1b:48:94:13:85:af:f9:63:9d:65:6a:
         b0:e6:3c:2b:a4:09:e1:68:3e:b3:54:1a:37:76:07:fd:1d:6c:
         32:08:9f:9d:9c:92:11:34:d1:fb:ff:e4:33:17:ba:80:a4:97:
         24:0e:86:5c:cc:91:8c:ad:99:9c:aa:eb:2b:b5:4c:cf:79:c4:
         66:3b:95:a2:7b:92:74:12:75:19:3f:b4:a4:35:c2:ba:3a:71:
         07:d3:4d:6a:20:56:26:c4:6d:ff:02:aa:28:d3:05:08:c8:0d:
         f0:48:6c:cb:d8:d7:62:49:9d:88:db:82:7f:39:54:29:4c:4b:
         21:d4:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----