Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
File:                     Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json)
Hash identifier:          Tj+VTPilAx4iQuQL9IlO6tGtnk2irsqA6A6NynDfBRY=
Subject key identifier:   BE:36:D4:3D:A1:DC:4B:4C:57:08:44:18:DB:A6:67:C2:D7:27:6A:F7
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Certificate issuer:       /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial:       01962E617806D0E12454C175357B9F42E5FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
Manifest number:          0A06
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: bXQXS0PkbUbWB+Zgema2pe4ovMkfg+v59cLDQM+22zg=)
                          2: mD91GJWTGSKSHSgbgQ6P8S7ubME.roa (hash: rmUWh8AmrxJuI/WhfjCkpLYkhkimbTnBeIi7uD7XWfE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:78:06:d0:e1:24:54:c1:75:35:7b:9f:42:e5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=be36d43da1dc4b4c57084418dba667c2d7276af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:33:4a:84:04:b4:b9:b8:17:65:3e:5e:e0:
                    10:51:48:11:99:e9:bf:f5:04:cf:3b:a9:b7:9a:3a:
                    0a:56:dc:fa:ea:7b:a6:34:b9:c0:7f:e9:0d:b3:17:
                    e5:89:6b:94:07:3c:aa:c1:cd:07:36:06:6a:a3:ac:
                    f0:f0:49:fe:2f:d2:62:bf:41:59:f5:1d:0b:bd:0b:
                    9c:34:a7:40:db:1e:03:56:ae:da:af:48:4d:21:10:
                    fb:1a:51:e7:24:b1:ba:96:f0:09:fd:68:1f:10:73:
                    d8:17:2d:79:cc:75:2d:2d:6d:8d:cb:b3:7d:46:be:
                    61:20:4d:27:e8:59:d6:21:fd:f8:d4:e1:d3:d7:f6:
                    fb:35:6f:74:9c:71:13:fe:04:ed:1f:3b:db:1d:2f:
                    8e:b8:17:cb:97:20:4a:52:34:30:1b:0b:fe:61:21:
                    07:99:98:f1:b6:1e:6c:44:2e:6d:7b:f5:a8:f4:79:
                    85:7f:f9:93:b1:9f:03:e9:0f:6a:59:4c:fc:6d:41:
                    48:cb:13:2f:d4:3e:99:af:48:38:ff:3d:8e:a6:4a:
                    cf:6c:9d:f2:ed:ee:1a:03:56:09:f2:6b:d9:5c:50:
                    90:9a:62:37:06:17:ad:6c:9d:5b:07:b6:7c:84:69:
                    50:2a:80:72:84:fc:b4:a4:aa:84:6d:95:fa:52:33:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:D4:3D:A1:DC:4B:4C:57:08:44:18:DB:A6:67:C2:D7:27:6A:F7
            X509v3 Authority Key Identifier:
                keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:db:1e:29:2e:c2:21:e4:1e:37:67:ea:a8:a2:b9:40:1e:d7:
         f7:ee:66:7b:1a:8c:b3:ed:6a:5b:32:5d:6c:3b:44:64:15:07:
         f1:53:e5:d8:bf:bf:3f:b7:c0:c0:86:dc:92:71:f2:db:8e:76:
         76:e0:cc:98:35:a0:d7:b1:ae:ea:17:24:27:9b:62:9b:19:53:
         50:7b:c7:8b:6c:e8:94:c6:35:6f:61:30:c4:e4:bb:1e:5b:ac:
         9d:48:d3:ce:6f:c1:5b:12:40:6c:15:41:60:cb:7b:1c:a6:d7:
         d9:41:9f:c6:d8:ed:5e:0b:46:ea:ac:ff:34:95:34:c2:f7:b2:
         a4:86:29:8b:58:3b:10:8b:26:56:a0:28:0f:cd:d3:8a:de:77:
         7b:da:67:ab:52:1d:fb:a8:80:df:92:59:6f:5d:26:fc:1d:1b:
         1d:00:23:76:77:40:db:33:b3:24:41:3b:6f:a9:4f:1f:9b:42:
         3e:e9:71:c8:9a:82:13:7c:92:5f:d4:30:29:97:86:0b:7b:97:
         8f:db:55:ca:0c:70:03:40:61:ca:a1:69:05:60:60:ca:86:a2:
         41:90:a1:28:9d:9d:d4:84:98:71:52:94:90:ba:bf:da:83:67:
         b6:de:45:cf:c3:24:80:5d:92:73:ad:2c:f6:56:46:f4:db:5e:
         9d:4d:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----