Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
File:                     YnswW6G6vvS_7GhYHkA51BtfcfI.mft (raw, json)
Hash identifier:          TR7xBM2RGLJTnOWh9BLWVhN7dki2ktrnTf3UH8DQmL0=
Subject key identifier:   9B:31:02:C8:8D:8A:2B:5E:36:E4:6C:1C:3A:A3:27:B9:AF:55:56:6F
Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Certificate issuer:       /CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Certificate serial:       01962ECF569FC91222F6228C0CBE84C881CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
Manifest number:          0BFD
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: YnswW6G6vvS_7GhYHkA51BtfcfI.crl (hash: mM7YaAS4nEaruJHbiSpihAvTKE/9WNse+QFr7yGjQSA=)
                          2: qe5ykFg2X3b3t6MuR-AZugNF4JA.roa (hash: lYA0LiGE3mwxqKf8EcIyljYtenHVRof/hSBwfSS+hr0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:56:9f:c9:12:22:f6:22:8c:0c:be:84:c8:81:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=9b3102c88d8a2b5e36e46c1c3aa327b9af55566f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:23:55:4a:80:47:bf:f2:0a:54:f4:fc:3a:
                    aa:36:c4:97:cb:d4:7c:7b:26:ca:19:ea:67:fa:7f:
                    2f:dc:7b:a3:09:0a:39:73:50:ea:33:34:59:c2:b5:
                    3b:6c:ac:27:72:82:92:e9:70:47:8b:b1:cb:e9:cd:
                    f5:38:74:02:69:0d:a7:6f:6d:c4:a7:28:40:df:63:
                    17:66:53:3e:90:92:38:43:87:7f:84:52:c4:f6:20:
                    f0:27:ff:8e:c1:19:bd:a7:33:d3:64:fe:51:02:36:
                    18:bd:70:45:3c:3e:5f:d6:f2:6b:75:bf:c9:aa:0a:
                    07:53:a4:e8:fd:16:f1:0f:49:a9:a5:f5:11:80:3a:
                    5f:ad:64:12:5c:cf:32:16:54:4d:03:0c:5a:74:1d:
                    8b:60:d2:83:f7:65:cb:f7:be:91:33:2f:4f:7b:0e:
                    aa:d8:0e:14:a5:16:e5:10:49:e3:ca:25:d8:7e:7e:
                    a9:4e:84:f5:7f:91:47:12:07:1a:f5:9e:29:4c:87:
                    2c:e3:f5:5e:1b:52:14:e0:cc:75:d7:2d:ad:1e:ff:
                    e3:8a:d8:b2:92:80:1b:89:4b:94:f2:93:42:20:50:
                    b7:60:b8:a1:2a:79:16:0c:af:a8:36:c0:e5:73:f1:
                    cb:94:85:af:d5:28:3e:e5:a1:8e:c9:ea:ee:8a:0f:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:31:02:C8:8D:8A:2B:5E:36:E4:6C:1C:3A:A3:27:B9:AF:55:56:6F
            X509v3 Authority Key Identifier:
                keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:2d:fb:7c:0a:ca:78:31:7d:5b:33:84:d0:2d:42:df:ec:
         d1:e7:07:0d:cf:4a:59:d0:3d:3f:da:b7:8d:31:3f:51:ff:85:
         4c:6d:27:d4:4d:c3:d2:87:5f:e4:4c:a7:c1:01:ac:ab:3a:d6:
         47:76:84:85:27:a3:14:8a:4d:a6:39:16:b3:46:6e:91:ce:37:
         5e:a9:0b:cd:fa:a5:bd:b6:c7:2d:1f:f9:4f:eb:13:0e:68:9e:
         c2:cc:6a:9d:84:37:3f:ea:82:20:1a:f7:a7:af:63:e9:a6:89:
         f1:e1:78:a9:85:bf:08:91:09:2c:b1:95:ad:5f:e5:03:8e:a9:
         31:f5:75:f6:85:61:1d:0b:e4:ca:2c:7b:47:19:af:2b:fd:66:
         66:70:7a:0c:18:c0:6b:53:4d:4d:6f:30:ef:bb:2b:84:c2:8a:
         79:45:fd:c5:f1:81:01:9f:21:5a:ae:17:c6:1d:0f:33:d3:9f:
         95:84:2f:c4:9c:d7:66:0a:4b:de:81:8d:e6:91:96:86:31:e9:
         48:4b:c0:41:a2:4f:9c:b9:17:33:94:a4:1a:f3:7d:f7:6b:1c:
         ae:19:f3:56:f7:b0:2a:32:f6:81:6b:e8:22:8c:c9:80:ba:76:
         85:3c:eb:01:1f:ab:48:8f:5e:71:aa:7c:c1:db:3d:e4:5f:df:
         ca:34:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----