Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File:                     YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier:          nsgl9rTiWPNqvdHQ/9ZkmDvo+9B+DoF9hTbOjieyLfc=
Subject key identifier:   DD:00:40:15:7F:FA:B5:B1:3D:2A:DC:B3:46:0F:40:97:17:D7:8F:58
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer:       /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial:       01962FAB0AE86F3DEE4D8BF552468C43027A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number:          0D09
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: MFqn3NlrirjwpUUjb+HkgjeiljtJU493SculMb110ro=)
                          2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0a:e8:6f:3d:ee:4d:8b:f5:52:46:8c:43:02:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=dd0040157ffab5b13d2adcb3460f409717d78f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:6d:f6:a2:29:85:88:91:97:a0:8f:02:28:
                    1a:ac:68:f1:ac:6d:19:2a:e6:be:f6:ea:8b:93:8f:
                    d4:b7:55:2d:3c:32:d7:a2:a4:f5:6c:a5:61:87:ad:
                    90:6c:6b:e3:e0:d1:52:ec:f3:dd:50:1a:72:ef:0a:
                    68:47:24:79:19:e0:2c:fe:69:79:f9:90:36:2d:88:
                    ef:95:15:22:9e:66:7a:4d:64:6d:6c:24:50:81:92:
                    18:97:07:08:65:d2:30:c6:df:f5:64:ef:2f:f3:a8:
                    a2:60:89:3c:45:2f:b1:0e:4c:e9:e0:4c:f0:d6:b6:
                    d0:91:d4:fd:ee:a4:cc:4c:40:da:7e:b2:be:22:aa:
                    eb:fa:6e:97:de:41:32:19:52:5b:a9:e6:06:cf:2e:
                    c8:4b:4a:40:b7:8e:8c:69:f8:3d:2c:1a:f4:f9:24:
                    9a:aa:8d:02:84:40:06:5e:8d:fb:bf:02:fe:01:01:
                    fd:ff:ad:27:6d:90:73:77:c8:69:32:a9:46:ee:c0:
                    b7:2a:6a:41:2c:71:8d:fe:66:89:73:11:45:8a:eb:
                    69:b1:8e:f3:cf:e2:30:0f:87:1f:c9:42:ba:73:bc:
                    8a:87:9a:5e:8e:7b:50:6d:8a:89:8d:c9:2c:ae:5f:
                    dd:46:ba:eb:6b:e8:92:6b:f9:76:bb:8b:6d:29:6f:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:40:15:7F:FA:B5:B1:3D:2A:DC:B3:46:0F:40:97:17:D7:8F:58
            X509v3 Authority Key Identifier:
                keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:46:f9:51:43:25:49:ca:06:76:7d:bd:0f:16:5f:e3:a1:eb:
         f5:b3:72:c1:c8:21:bb:cf:e6:77:ed:5c:1c:74:47:6b:d5:c5:
         70:a8:e3:0d:b3:ac:ef:ff:b7:d1:af:dd:d0:1c:f3:d0:53:58:
         f7:3c:c0:7c:0b:dd:ac:10:9f:01:8b:c9:58:ae:d9:07:11:88:
         43:8d:2d:af:22:c8:3b:1d:d2:0d:a6:8e:32:a3:bf:0c:bb:61:
         ca:2c:1c:e9:26:3a:14:08:c5:29:3e:0d:c5:ec:c7:88:4c:ea:
         2c:eb:64:b7:cd:ee:cd:7a:26:46:33:02:d3:48:ff:89:53:68:
         43:fa:89:38:3b:2e:21:f2:03:4b:88:60:83:3a:a5:fa:02:32:
         78:1e:b0:f7:80:7d:12:73:0c:e2:f0:33:e3:8b:a5:fe:ac:a8:
         72:b5:91:2d:a0:83:1b:ab:66:97:c3:5d:1c:ad:e2:d9:ac:3d:
         4d:a0:ef:07:c9:dc:57:ad:0b:c0:6b:ad:c6:e9:93:4d:9f:74:
         67:15:e1:c6:e7:9d:cd:da:fa:8a:11:ab:34:4f:f9:95:39:34:
         3e:9d:b9:55:a1:81:9a:a3:21:64:89:d7:fe:1b:62:5d:1a:fb:
         2a:10:94:db:e8:98:cc:28:e0:7d:f0:ce:fa:38:82:e7:31:42:
         d2:06:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----