Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
File:                     yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json)
Hash identifier:          dwvzZVQD+VT6W7stnuZbJvznHYdhRuY7PbB/TyJ3onM=
Subject key identifier:   81:C3:40:B8:62:0C:CB:8F:E4:18:7D:02:7E:CC:32:A3:75:1B:B3:85
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Certificate issuer:       /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial:       01962F070A5314A62F47B3A88E0F5D368767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
Manifest number:          45
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: _8GeUycs83lRu9jroip2TNtqpH8.roa (hash: xKuAFuMNSLN3xOnIRiVJqWVq/u5hK123DBKLWdaFAC0=)
                          2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: SKElErWupHxO6wD0OydBNmz51zUxUZduUEOUfdlwSls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0a:53:14:a6:2f:47:b3:a8:8e:0f:5d:36:87:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=81c340b8620ccb8fe4187d027ecc32a3751bb385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:66:ff:bb:55:76:74:f7:3c:98:fb:50:15:
                    85:23:6b:4a:2c:7e:54:d9:7d:48:0d:21:2d:33:41:
                    ab:84:16:c7:e7:69:34:c8:c4:bf:ac:c4:c8:f8:99:
                    88:09:4a:fd:4c:c0:71:4d:ba:d2:d8:04:8f:f8:31:
                    91:fb:ea:1f:6e:38:4f:2c:11:8f:ab:24:ab:80:ba:
                    59:19:07:58:5f:84:5c:1c:fc:09:8d:58:ed:d7:ef:
                    33:3e:ef:fe:0b:aa:72:1d:e6:8d:30:50:d5:cc:f9:
                    e5:ce:50:f4:d0:c1:49:19:6d:ef:8e:6c:d9:fe:f5:
                    87:0c:3b:b8:e0:67:05:a0:1b:7b:c3:30:2d:f3:19:
                    2c:ba:59:d8:4a:3a:cf:0d:9f:60:e2:f5:84:9c:1b:
                    2d:af:0f:a9:91:8a:37:b4:b9:fb:01:d2:f1:d8:d2:
                    a4:ac:05:70:8b:10:7d:c0:c3:bc:6b:4b:f3:61:02:
                    89:fd:59:f5:1f:eb:44:b2:1b:1b:a2:5d:9c:f0:2d:
                    34:29:28:14:6e:a2:82:0b:83:cd:54:ba:2c:e9:74:
                    24:a2:64:c1:df:0d:e7:0e:ba:34:f8:1c:57:9c:a8:
                    2d:76:f0:be:ba:4f:d9:39:df:6f:55:14:dd:73:5d:
                    8d:3a:6e:a0:18:69:17:79:52:76:22:09:7b:6c:1d:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C3:40:B8:62:0C:CB:8F:E4:18:7D:02:7E:CC:32:A3:75:1B:B3:85
            X509v3 Authority Key Identifier:
                keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:c2:65:93:c2:aa:92:ca:92:20:6a:fe:9c:0a:d4:3a:13:
         f4:77:d3:5e:21:3b:e1:d4:54:9a:89:f7:1b:3d:84:bc:af:ae:
         79:94:83:34:e4:22:c7:e5:56:66:cc:82:2d:98:2a:15:57:26:
         61:db:f8:91:72:68:51:09:e5:ad:17:11:52:a3:4a:a9:43:1a:
         95:16:ae:e9:82:e4:21:30:ee:79:5b:98:3e:a7:1d:85:83:e2:
         01:ee:71:34:53:50:a5:16:3f:42:8e:af:f8:51:9d:28:1e:1c:
         42:39:7d:ec:73:3e:82:e6:fa:ea:15:03:80:eb:81:75:fe:39:
         12:f7:37:79:e2:70:07:85:fe:98:5a:c4:41:06:cf:b0:49:ea:
         92:77:fb:1c:4c:f8:ee:61:ac:9e:26:a5:1b:58:64:1e:77:59:
         53:a1:e8:1c:10:3f:47:20:67:7e:97:b1:29:07:f0:ec:14:97:
         00:db:c9:4d:e8:de:94:ab:ad:18:1a:ee:c2:98:a7:03:3a:57:
         39:6c:e5:15:ab:87:cf:37:6c:e5:e1:6c:ae:90:13:ae:0f:5f:
         fe:6e:1d:c5:4f:2e:ca:d9:10:8d:b4:a6:b3:f4:52:6b:af:2c:
         79:aa:e7:a2:99:3c:38:52:2e:ef:1c:ed:8a:6a:2e:6a:50:a0:
         c5:27:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----