Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          XTLRgMSAUOwRF1mHcR2Z+jwSZMsv6Fy6g0c0Q+hwGiA=
Subject key identifier:   FB:0A:F0:E3:6D:B9:B4:FD:98:D3:26:3C:8F:6A:59:E4:07:6A:09:B8
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       01962F073C8E2BACEAB1456C42C07A7E38FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          12C8
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: ZXare2b3hVKaA/LK+IDsYyFEODLO/PfPIo2zPNYEVO4=)
                          2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=)
                          3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=)
                          4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=)
                          5: oLsRck0rfRJTe_DlIobAHiPybik.roa (hash: HITR6UDaTE4KoI724hxLpPj2e++WnzdsOgqIY7veXg8=)
                          6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3c:8e:2b:ac:ea:b1:45:6c:42:c0:7a:7e:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=fb0af0e36db9b4fd98d3263c8f6a59e4076a09b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:57:eb:60:13:4a:77:56:91:3e:53:d8:ea:49:
                    3e:d4:d4:4c:d7:94:12:bd:9d:86:03:11:1d:59:fb:
                    4c:a7:66:58:60:23:3f:43:3f:0c:00:dd:9d:14:ad:
                    ab:3d:62:e3:c8:a1:4e:71:f2:12:e7:3f:cf:2a:9e:
                    ed:8d:85:2a:fc:67:3f:c3:e4:8c:bf:f1:72:12:e1:
                    3e:09:fa:be:99:79:9c:1c:71:5d:15:1c:02:4a:69:
                    41:4f:2b:b6:ce:ef:71:1b:4b:3f:4d:70:c6:67:14:
                    8b:67:de:a8:28:ce:0d:87:b1:e3:c2:a0:03:df:97:
                    51:bc:bf:d5:58:5c:aa:8b:8d:eb:55:09:4b:41:cc:
                    d5:68:f4:0e:39:61:8c:14:85:4d:8b:bc:f1:15:04:
                    c4:f8:1f:d9:e4:19:6a:3f:e9:f0:ec:bb:ac:ee:ce:
                    ec:15:b1:11:d2:77:65:dc:f9:7f:62:c9:fb:d8:94:
                    72:d5:a4:51:d0:7f:e2:a9:af:da:a2:d3:8a:57:64:
                    8f:1c:20:33:b8:de:0a:df:25:1b:35:b6:3b:eb:82:
                    bc:bc:52:dc:51:03:10:e6:7a:40:50:86:1c:31:97:
                    ba:02:3d:5b:aa:32:2a:4c:27:3f:0a:30:23:c0:75:
                    7a:9f:d9:d2:cd:5f:e6:7e:1d:21:9c:4b:03:58:36:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0A:F0:E3:6D:B9:B4:FD:98:D3:26:3C:8F:6A:59:E4:07:6A:09:B8
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fd:2f:55:23:9b:31:8d:08:39:09:33:14:ef:40:50:c4:a1:
         26:aa:76:a1:57:ff:99:5b:25:a5:dc:ab:db:20:aa:01:44:1a:
         aa:89:23:e2:e8:25:22:0c:d0:b2:5f:7b:69:cf:f0:c0:c2:98:
         d2:ba:74:b0:02:a6:cb:84:08:89:bb:1c:40:60:9f:29:71:91:
         4d:6e:0d:35:d1:94:2d:73:0a:61:b9:61:55:c9:e0:65:10:8d:
         08:59:5d:cb:02:9e:22:d7:34:83:1f:7f:16:9a:12:32:0a:9b:
         54:5d:56:70:07:50:71:27:87:0b:ad:60:a8:02:fc:f6:f7:d8:
         8c:6b:fc:1c:1f:11:28:1f:50:e1:61:d2:99:4c:d3:39:67:89:
         1a:00:12:8a:9c:e3:28:d0:b7:ef:47:f6:02:b9:28:46:4f:a0:
         fd:e2:7f:a8:db:50:86:6d:f3:76:20:1b:ae:fd:fd:b0:2d:49:
         60:ae:5b:52:68:a8:39:03:41:4b:f2:21:5f:e4:8b:cd:6b:b1:
         27:12:0c:86:24:f7:0f:04:f1:7a:55:c0:48:25:4b:52:8a:25:
         96:68:c1:82:d1:60:f5:61:d7:35:db:85:7d:b9:22:ee:a2:2e:
         fc:0e:c3:51:e4:96:2a:92:36:91:95:74:13:f3:bb:c2:86:c6:
         c6:02:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----