Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          AJB9hEhWscjThuPkgUBr0j2dotOJdSqOv/ZNVel9skU=
Subject key identifier:   4A:D7:50:4C:08:C7:F1:C7:82:87:5A:64:DF:28:2F:C6:1A:50:B0:4F
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       01962ECFBEAA66905A46D059F80ED3F1F4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          10F5
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
                          2: XPfq9Ksy6q7hVKZWhH3FoNqx86Q.roa (hash: 3p+0gWVqjqBFv0JOtQexk0uil6MhFKHRsK6+Z95GMq4=)
                          3: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
                          4: gdv0H1VOQqEC1g3NPKKSe4k3m8c.roa (hash: SQr6HXuQcMmwRyJVvHRUD8exv8UImT2IUgeTeEYqV74=)
                          5: x5P0EDTdVktqZKkEboWB0PM5bas.roa (hash: r1ZTmgOlTkgzyPjFRQu4X4TsA76Y2Iw9iuXpWXvKbw0=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: oaxIVNvTLXqFjZ36cK/ViIwaQ5WvrJRqOV7dZx/nl7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:be:aa:66:90:5a:46:d0:59:f8:0e:d3:f1:f4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=4ad7504c08c7f1c782875a64df282fc61a50b04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:15:ba:a9:d6:37:18:7e:16:99:48:0f:57:
                    0a:97:76:4e:fa:9f:64:0b:77:9f:bd:d9:12:0f:b5:
                    6a:23:00:0f:c4:6a:ab:68:ba:0e:7f:17:61:4d:a5:
                    11:44:17:1a:38:46:ca:1d:99:e4:0a:c9:ca:1e:30:
                    50:73:0d:c0:be:72:b5:92:0e:44:0d:ec:1a:e2:89:
                    9d:e4:1d:34:56:ef:52:f2:46:56:19:83:72:4c:e0:
                    ab:81:aa:45:3c:6c:2e:22:7d:40:10:97:17:85:3d:
                    c8:a1:ba:50:a8:22:fd:9d:7a:18:05:d5:50:35:46:
                    0f:b0:1f:7c:88:79:7e:9c:11:4d:d4:91:ff:70:76:
                    4e:5b:9d:90:bd:d0:a0:15:3d:1a:ac:fc:6e:7b:2a:
                    30:fd:3f:8c:79:d6:a4:00:52:ec:04:bb:71:2d:63:
                    fe:e5:8c:7c:5e:39:ce:94:bc:38:78:90:8e:cc:63:
                    72:73:a8:a2:bd:8f:76:f8:33:b2:09:2b:9d:33:cc:
                    e3:67:9f:76:54:2b:06:70:c1:74:12:ab:20:d0:5d:
                    67:3f:c9:23:3d:2c:82:f3:b4:b8:89:ec:f1:2a:2b:
                    17:95:26:20:d8:51:5d:a8:79:1f:e9:c1:e0:40:61:
                    b7:d9:59:58:e7:57:51:57:b8:e5:ad:2a:d7:2f:71:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:50:4C:08:C7:F1:C7:82:87:5A:64:DF:28:2F:C6:1A:50:B0:4F
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:a7:0c:de:23:15:05:a6:97:1e:07:29:31:55:eb:b8:49:
         68:22:35:76:78:58:fa:28:34:8f:26:a9:ef:cf:95:8d:e6:57:
         6e:a3:05:20:cc:35:55:33:b7:a6:7d:c7:17:91:99:7a:87:f2:
         68:d3:28:4c:25:84:b6:5f:9e:44:d4:ac:1b:0e:14:b9:9b:95:
         bb:33:65:2f:78:13:19:16:5c:17:1e:4a:a2:54:31:a8:60:24:
         86:ba:b3:5a:99:44:cf:29:77:01:2b:ee:22:7d:a7:ce:0c:f9:
         c2:d2:78:d4:76:9e:dd:00:79:33:33:89:04:2e:5d:0f:4d:06:
         5e:ca:a8:29:b4:4b:e4:ae:87:76:f1:06:87:e7:bc:cd:2f:6e:
         25:64:70:5f:95:d8:e6:ea:ed:8f:33:ac:f4:f8:4a:b6:fc:46:
         7b:3c:12:e2:88:90:fb:48:f3:50:b4:80:bc:dc:25:ad:ae:e3:
         57:4b:16:cf:ca:21:e2:4d:b6:44:8f:01:73:44:db:27:3a:d9:
         e6:49:da:1e:61:19:a0:d0:fa:60:09:e0:36:3a:9e:85:b0:4f:
         63:86:b6:95:b4:34:ae:79:b4:c5:37:6f:11:ad:4b:e5:98:48:
         2a:d8:e1:11:a9:12:ac:7f:6d:e3:ea:d5:96:f5:a8:e6:76:d0:
         44:82:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----