Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
File:                     syj-JYobm_YUimzg6KcS8YhAkEw.mft (raw, json)
Hash identifier:          czqyLpZ3cFs2ZgMy+kGPfuVNjkvdIqloVD7oUORfaCk=
Subject key identifier:   71:FD:78:CE:26:7C:23:BD:AA:79:5C:6E:92:E5:0F:65:D9:65:C5:6B
Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
Certificate issuer:       /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Certificate serial:       01962E61931B58E6461CF2F0B42CB6D7C3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: GYSp_rz4QZbgBr-HBOcTzpt3X4M.roa (hash: NAF/Nb6XJXh+vrFmr0juFvf2KFmgS/SmKavb4eqn3DQ=)
                          2: syj-JYobm_YUimzg6KcS8YhAkEw.crl (hash: fupcMGFwmFx+WfJSqzau96eKOF2UrXksDPUtAcJEok8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:93:1b:58:e6:46:1c:f2:f0:b4:2c:b6:d7:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=71fd78ce267c23bdaa795c6e92e50f65d965c56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:45:3d:40:48:41:d3:7d:84:84:50:2f:9c:
                    80:86:ab:40:7f:6e:db:7d:e4:43:b5:04:c1:07:5e:
                    96:41:df:cf:9a:98:23:a5:3f:4a:d4:d6:13:44:84:
                    fa:b5:9f:fe:ce:51:5e:79:c4:f8:c3:bf:b6:78:3c:
                    ab:0b:60:76:fd:55:cb:7e:5d:43:e4:5b:64:35:2b:
                    61:5e:d8:1f:42:4a:3d:7a:00:21:ff:52:e5:6a:26:
                    39:9d:dc:3f:57:4b:9e:04:32:7f:6f:e4:f2:55:e0:
                    22:79:62:3f:9c:55:8b:5d:cb:01:de:db:25:73:5b:
                    d9:d4:2b:d4:1c:c9:99:0b:86:45:72:bf:4c:c6:63:
                    25:38:2b:ef:34:2c:69:5d:a6:aa:c9:86:79:f4:99:
                    4b:36:3b:08:94:ad:31:0c:2d:88:b1:46:a7:ab:8a:
                    12:69:57:bd:dd:e5:7f:97:7e:03:a7:1c:ee:1d:3f:
                    c9:e5:87:4d:7f:08:84:21:68:ec:f0:c9:fa:d1:0a:
                    a8:a7:23:90:e8:3d:c0:b3:6d:a7:c3:5c:08:0c:1c:
                    51:a0:7b:48:f8:ca:cb:e8:93:92:b2:bb:4c:af:f3:
                    ef:06:9b:2e:01:9e:87:e9:a2:30:b4:83:7d:71:4f:
                    84:6d:75:d9:2e:5a:56:38:d4:c6:0c:5c:00:aa:b0:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FD:78:CE:26:7C:23:BD:AA:79:5C:6E:92:E5:0F:65:D9:65:C5:6B
            X509v3 Authority Key Identifier:
                keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:41:db:97:7b:8d:7a:69:60:12:b9:ee:97:9d:15:80:4d:
         7a:c3:76:03:5f:6a:54:f2:f4:16:2c:74:d3:5a:2f:23:bc:3e:
         6d:23:34:f8:7f:68:11:45:ee:e1:22:93:72:fe:a9:be:ac:a5:
         9c:29:48:f7:91:08:78:d8:86:50:dc:2f:c7:6e:52:53:c8:5e:
         cf:ac:25:63:93:ac:65:67:82:a2:a8:1a:76:46:cc:ca:80:b4:
         eb:88:18:eb:d2:87:10:e0:9f:6c:dd:c7:63:da:aa:7a:90:d6:
         6a:9e:24:97:5b:77:19:5e:5d:21:04:a6:f1:2c:6b:56:5f:c7:
         43:4d:73:69:74:75:b6:bd:e2:37:1c:9b:4c:6c:3a:89:ec:61:
         0d:80:f5:a9:5d:a1:8f:36:9c:cb:6e:8b:62:fe:4f:33:8e:0e:
         36:94:e2:7b:5c:8a:63:e7:c2:de:d3:3a:5d:74:2e:26:43:28:
         1d:10:31:f7:72:2b:d3:38:87:0f:a6:71:b1:97:ac:63:38:2f:
         85:66:2e:9b:58:07:29:9b:73:ab:af:74:f5:83:15:7e:f8:39:
         5b:a1:0f:a7:d0:bd:c4:20:c8:19:4f:3d:57:94:d7:1e:f0:52:
         7c:2f:7d:33:12:f1:e5:2d:fd:9a:c2:cc:ca:a4:de:4d:ad:ee:
         4a:b3:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----