Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File:                     y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier:          Hg7HzJXPwDb1E/kUHCROE5F0nQmr5Grw8n1jVdRvY+E=
Subject key identifier:   58:72:DF:63:D9:89:CD:8E:FD:56:4B:76:73:1B:A2:F5:D6:8D:5C:F7
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer:       /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial:       01962E2ADC32439209A3C7EBFEAFBD49F65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number:          044B
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=)
                          2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: aOpNuRzPiJIU/0enV8d9l3sQbA7hj9BsFjJUWVtnRy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dc:32:43:92:09:a3:c7:eb:fe:af:bd:49:f6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=5872df63d989cd8efd564b76731ba2f5d68d5cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:24:83:fd:f0:e2:0c:ff:1e:f3:68:dc:c5:
                    a5:ed:f9:c3:9a:c7:1f:71:be:a3:c4:d9:65:ba:03:
                    c0:43:3b:c6:d7:a1:a1:d5:ed:24:79:88:ac:46:82:
                    8e:0a:01:0d:61:10:87:9f:aa:e4:f2:aa:02:49:8c:
                    26:b4:f8:90:92:2e:93:cd:d9:55:24:84:94:00:fa:
                    4d:2f:4f:71:c8:7a:57:9c:d8:1d:f6:20:de:21:ae:
                    74:b6:bc:62:40:25:ef:d4:f5:e7:07:8d:38:44:b2:
                    15:e8:a1:ba:9e:77:8b:9d:71:3b:3c:14:3b:85:cf:
                    7a:be:28:50:c6:c4:9e:13:6b:e5:59:f6:fe:d0:3b:
                    aa:24:1a:19:61:db:9f:d7:41:c7:7d:d8:2b:97:c2:
                    8c:bb:68:b8:f8:79:f2:5a:2c:ed:c2:49:8b:5a:a4:
                    22:9c:a0:61:5b:f9:54:6e:e8:9b:13:ad:70:80:df:
                    36:42:36:e6:12:f7:34:0e:a0:3f:7a:42:2f:53:fb:
                    b6:9b:1c:73:51:e8:14:30:81:60:0c:20:38:64:53:
                    c9:3f:93:e1:da:3e:6e:a0:0e:a8:ec:85:47:b9:16:
                    75:9d:15:bf:b0:54:58:71:e5:f6:ed:4a:54:eb:97:
                    89:26:27:be:25:06:01:1e:9b:a5:d1:f4:e9:b5:30:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:72:DF:63:D9:89:CD:8E:FD:56:4B:76:73:1B:A2:F5:D6:8D:5C:F7
            X509v3 Authority Key Identifier:
                keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d6:39:0f:dd:fa:13:c5:59:77:a4:0b:b2:ac:19:b8:64:74:
         67:ad:76:e7:60:cc:92:e4:e7:3f:12:7f:e9:7d:a3:53:36:30:
         d1:e1:5c:3b:de:27:51:4c:4d:b1:a7:95:22:08:fc:3a:ee:85:
         e5:64:20:06:62:12:86:d6:bf:eb:9b:f8:54:7d:b0:d5:ac:2f:
         3d:7b:c7:3c:50:7e:dd:6a:be:61:da:5b:19:61:f5:4e:c9:25:
         c6:03:37:9a:bf:3c:59:c9:0a:38:e5:f6:6d:93:18:7b:6e:f6:
         31:1b:99:23:0d:4e:76:26:22:43:99:a0:7d:f9:fe:b4:61:54:
         cc:ec:dc:22:89:17:34:6e:c6:f3:a3:0d:47:5f:86:24:32:81:
         a1:43:30:73:6f:f4:e6:e0:a6:9c:00:3b:87:97:ec:7a:15:67:
         dd:4d:36:ba:8e:e4:cb:87:0e:42:2b:a2:76:e5:a7:ae:f6:68:
         15:91:21:9a:97:35:60:15:55:0e:45:04:06:a9:c9:fc:d0:4c:
         06:3b:cd:14:62:e4:f4:55:63:48:50:fe:d9:ce:8b:ba:3a:d7:
         ed:1b:a6:5f:88:1d:53:97:b8:6f:01:7c:e4:46:72:d3:ce:ba:
         e3:c4:fd:ec:cf:5d:d7:3b:17:db:89:80:0b:ec:02:3e:a4:d5:
         05:5a:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----