Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File:                     YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier:          OWKcfkUKoTnGNwTu4b8mEHUJ6UXaq/FlIkf1jRaKYp0=
Subject key identifier:   E9:2E:84:A8:C9:B9:94:8E:EC:81:BE:B2:4B:CC:3F:8A:A8:5C:01:73
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer:       /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial:       01962F745DCE851ADB2316D480CC9A25BC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number:          0569
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
                          2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: 7y3sZMtEqsDwGweP7u19fEwZtrdd9Rr22zC+LtlpStI=)
                          3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5d:ce:85:1a:db:23:16:d4:80:cc:9a:25:bc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=e92e84a8c9b9948eec81beb24bcc3f8aa85c0173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:44:32:75:29:9a:d8:65:df:08:fa:f0:e6:
                    2d:e8:c7:e7:f0:bb:92:70:1f:0d:e8:4b:24:5c:c0:
                    cc:fb:35:73:d9:6c:6b:81:f7:31:7f:5b:ef:d2:e5:
                    98:9e:97:0e:e3:38:37:dd:96:fe:fe:9d:7a:5d:14:
                    ee:d5:21:c6:da:5d:65:ec:c1:cb:ee:26:ec:01:21:
                    9e:02:4f:8e:f3:14:f3:1e:b0:32:e5:af:07:2d:d5:
                    07:56:44:2a:78:af:59:60:e1:60:c8:b3:08:fc:0f:
                    6b:55:fd:06:d1:aa:00:d3:33:bc:88:58:8e:46:8f:
                    c8:01:71:bb:cf:cd:db:fd:88:c3:3d:59:c5:c3:d1:
                    61:65:2a:07:11:2b:de:14:6f:b2:01:fd:8f:94:37:
                    ef:c0:24:fc:86:fc:17:6f:c0:32:43:cd:5e:f3:ea:
                    f2:70:ad:9d:33:f8:c0:c8:a5:59:b5:cc:37:c5:e5:
                    74:ec:f7:12:56:8c:98:4f:60:37:9a:d8:f1:b0:72:
                    1a:40:32:34:35:24:3f:1d:86:8a:1c:b5:8a:27:86:
                    d6:c6:81:ff:0d:9c:6a:1d:7d:71:94:b5:3a:fd:35:
                    32:7f:42:92:f8:fb:f8:b1:7b:e1:eb:fc:ae:69:ae:
                    29:38:53:b7:71:be:77:61:f5:d3:a8:2a:ee:bb:23:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2E:84:A8:C9:B9:94:8E:EC:81:BE:B2:4B:CC:3F:8A:A8:5C:01:73
            X509v3 Authority Key Identifier:
                keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:d5:a4:68:26:1c:43:d4:4f:cd:8b:09:85:c0:d5:a0:e2:
         c6:cb:96:ba:3a:d2:99:ba:6f:2f:9e:0a:f5:80:23:1d:af:04:
         bb:b6:6f:bf:69:1e:86:65:54:ec:d5:b4:e6:c2:6b:4c:3c:64:
         fb:c8:9f:7b:11:6e:98:1d:79:2f:ba:f4:6f:16:ea:bf:f8:9e:
         90:d3:c7:2b:7b:ed:d1:88:74:4d:ad:7e:1c:c9:48:a8:2b:ed:
         14:e7:10:8a:ee:cf:f1:73:b8:25:53:b5:84:63:dd:f1:99:d1:
         0a:07:f1:24:c8:32:96:be:eb:7c:dc:52:92:d5:2a:80:4b:1d:
         1a:3e:e0:94:c5:b3:da:1d:ca:18:92:5a:e7:d1:a9:94:39:fd:
         a9:46:21:b5:2a:95:f0:f8:30:0f:58:17:10:5a:e6:14:20:a0:
         09:bf:e4:4a:f7:d2:a7:ce:0c:e8:5a:8d:03:24:63:cd:bb:28:
         70:e4:c7:41:87:02:94:f7:61:29:40:40:87:45:88:3c:4f:f9:
         cb:b7:76:41:7c:ef:a2:c7:01:68:7f:07:cc:ad:81:fb:3b:88:
         80:6d:9a:d0:94:97:79:5f:4f:40:d1:e2:0d:00:84:17:a0:f5:
         79:7f:92:dd:e9:1c:ba:88:1b:04:11:8d:34:f5:c8:bf:aa:2c:
         60:00:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----