Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File:                     yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier:          iRmNWV3s2Jz1BFYZM0+iyPd/Q+mxpfvnZGWWSUyfm7k=
Subject key identifier:   D7:98:08:AB:B0:0C:1B:B0:BF:C5:1A:31:AD:EA:2E:17:96:05:F0:58
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer:       /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial:       01962F7471713990A3492CCD9EFEDAB6A148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number:          095C
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
                          2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: Et3y7etYi2JOTfFXo55muSE/jSAMbAwDdk9G3OR2t5I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:71:71:39:90:a3:49:2c:cd:9e:fe:da:b6:a1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=d79808abb00c1bb0bfc51a31adea2e179605f058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:a2:62:c8:15:34:3e:1b:b3:b5:8b:a9:88:
                    84:f6:a6:89:9f:70:27:0a:b4:14:95:06:68:19:2f:
                    e8:07:26:b3:ad:03:8b:3e:67:c4:3d:41:72:a8:3b:
                    23:e8:0e:55:6c:0a:d7:28:69:7a:a2:42:e1:cd:25:
                    34:ce:6b:61:1e:99:98:82:90:7d:bb:01:3c:0b:42:
                    2c:62:11:20:de:67:1e:d6:8a:06:f1:60:5c:31:90:
                    60:5b:1d:87:e5:ff:1b:a9:29:0b:da:df:6a:8d:1c:
                    5b:80:15:f7:47:83:85:63:66:25:51:88:0a:1a:c8:
                    16:09:29:aa:cd:c5:27:1f:71:83:0f:74:a0:92:65:
                    dc:53:cb:d2:70:fe:d6:57:5b:59:92:ad:1a:d1:39:
                    9e:9a:cc:ce:e1:2c:09:b3:57:01:d3:c0:48:a5:5a:
                    4b:f0:71:f1:70:77:c5:b2:c1:98:56:26:0a:67:9a:
                    7e:8d:2f:5a:03:e8:4b:08:0e:4d:fa:99:fd:83:a6:
                    5a:67:c2:4d:37:3c:c0:68:f5:bf:c8:cd:35:06:bb:
                    d1:94:54:7e:c3:28:1b:d9:c2:5a:6d:c6:55:19:e9:
                    a6:90:54:08:2c:f6:71:68:bb:d5:16:e7:12:b5:69:
                    8c:99:d4:fd:a8:a6:92:1d:f6:75:2f:8e:21:dd:31:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:08:AB:B0:0C:1B:B0:BF:C5:1A:31:AD:EA:2E:17:96:05:F0:58
            X509v3 Authority Key Identifier:
                keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:d3:88:b6:8f:3e:b6:3f:00:a8:49:5d:8d:be:0d:ad:85:
         0a:8d:41:7c:c6:e8:54:f6:71:44:b5:3a:89:89:9e:6f:6f:21:
         73:ca:a1:b2:66:e6:f1:67:e9:13:15:4e:23:9d:86:02:8d:e1:
         ff:53:c9:bc:21:07:8c:6f:bb:70:93:a7:37:a1:35:7c:9e:4a:
         ba:b8:e4:db:a0:1a:23:39:b9:e9:06:91:73:71:6f:8e:00:56:
         e6:e0:6c:e7:d3:0e:6d:16:9f:7d:08:61:78:aa:a5:f6:8b:7c:
         24:7d:e3:82:b5:52:a1:cb:6d:5c:b8:91:12:9e:f2:dc:c6:48:
         80:fe:d3:a5:18:40:cc:64:9f:6f:3c:3a:1d:8b:e4:99:a1:f4:
         31:0c:5d:d9:43:d4:87:af:ba:9f:0a:8b:03:7f:47:b3:8a:0e:
         24:52:b0:a8:ae:37:22:08:d8:58:97:d9:b3:a0:09:74:ae:14:
         5e:3b:f6:ff:6a:ff:5d:21:da:0c:f6:7b:02:01:68:70:3b:bd:
         1b:b9:ca:3c:5f:8e:c0:df:f1:57:5d:c0:14:9e:09:9e:84:c1:
         8b:a8:40:3b:4e:16:a0:c3:a7:6b:48:7c:eb:5a:f6:33:77:81:
         58:a9:60:6c:80:13:05:e0:c2:47:48:27:9d:99:b4:4c:c5:41:
         0e:73:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----