Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File:                     YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier:          3hd4hSt6NHg/rl4TR6n4tSn35qXAB1Jxx7gbPjstdYQ=
Subject key identifier:   79:E9:BD:98:EB:47:9B:0F:06:14:59:C8:3C:6D:51:C6:51:47:4D:5D
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer:       /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial:       01962F064D21000F2BCF3695F0428B8E2A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number:          0A7D
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 4ohGnWINC3iPFe6nDpOqBOx7d2s.roa (hash: 9AbJKb6HLl4DZwmq7R7PVZTsMXxo/QDCXs2EgLL85AU=)
                          2: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: MtdCzC7S//xaOK+xsjh/jE8d7D1SAhcI8rSQE8CmGRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4d:21:00:0f:2b:cf:36:95:f0:42:8b:8e:2a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=79e9bd98eb479b0f061459c83c6d51c651474d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:67:7e:6b:3d:7c:75:3a:12:d9:bf:62:80:
                    87:e9:d7:7e:c0:90:2a:87:8d:f9:35:b1:b2:0e:b0:
                    77:b9:53:ca:e1:5d:75:de:5d:44:f4:06:fa:38:2e:
                    06:01:36:de:34:e8:72:8b:8b:34:49:b7:6a:65:90:
                    b1:cb:02:e4:3e:73:de:a7:1f:f7:21:b9:4b:37:5d:
                    b8:cc:75:75:8c:aa:1a:89:64:e8:4b:6f:53:c7:54:
                    61:7b:67:d7:be:4a:cf:d3:ec:0a:20:ad:3b:87:3b:
                    31:9a:ec:8a:38:88:9f:6c:6d:ec:ac:fd:8f:a3:3a:
                    b7:3e:b8:34:12:70:5b:8e:31:1e:fd:09:10:c3:c8:
                    52:cc:e8:ab:9a:14:fc:cc:73:05:8c:a5:af:a3:ee:
                    96:a3:77:a0:08:06:4c:72:4d:56:40:4e:e1:34:95:
                    a4:ad:b4:bc:e9:00:66:03:43:d2:c4:3e:68:bd:d2:
                    09:ce:9f:3f:ea:91:25:a8:6f:94:3c:a8:00:68:81:
                    c8:c1:cc:f0:c6:61:73:6f:bc:13:6a:3a:a9:1e:02:
                    e1:29:4e:31:e3:cf:5e:52:21:dd:0c:cf:5a:a6:f0:
                    ea:77:6f:08:1f:3d:8a:1b:d4:1d:a5:ec:2c:1f:22:
                    f4:21:69:23:4c:b7:2f:80:1c:98:7e:51:6a:ab:f8:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:BD:98:EB:47:9B:0F:06:14:59:C8:3C:6D:51:C6:51:47:4D:5D
            X509v3 Authority Key Identifier:
                keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:04:39:4c:6b:9e:e7:7c:2e:31:cb:db:fd:59:a1:23:f6:
         00:2f:98:1e:8c:a8:3f:08:ad:e3:f9:71:ff:84:cc:3a:ee:7e:
         2e:d8:6b:f6:58:a7:1e:bb:05:87:b5:01:7b:a0:cd:3a:78:f2:
         27:8f:06:b5:e0:b8:cb:9b:c4:d3:82:2f:ea:fd:3b:c3:cd:eb:
         09:12:3e:ae:2c:0d:e9:58:1e:be:7d:7a:d2:5d:01:e2:77:a9:
         21:67:00:d6:ef:44:a3:84:3f:79:17:b2:05:ac:7e:62:c3:48:
         13:f5:ae:e1:62:65:de:ac:a5:9b:e3:e8:1e:30:74:2f:03:90:
         0d:ea:aa:cb:0c:8e:df:f4:7a:c7:70:35:f4:d9:f4:85:d3:eb:
         54:87:ae:b6:18:b2:79:f3:66:90:2a:ad:df:cd:a5:60:b8:0b:
         77:cd:91:b8:01:14:2e:bf:1a:87:6e:b3:fe:21:1e:b4:58:e7:
         da:df:9f:9d:82:46:d4:a9:b8:70:47:38:0b:cc:71:8c:83:f4:
         68:94:2d:38:7c:d2:f2:74:14:5c:54:25:94:87:5c:57:9a:b0:
         10:3c:bd:a8:ef:84:90:ca:15:c3:f4:53:36:c9:9d:a8:a3:45:
         fa:08:36:ad:ab:62:da:72:6e:3b:74:e7:e9:d5:bc:7d:89:3a:
         68:c4:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----