Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File:                     YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier:          PpV4TKWHNZ7ve6d5hwrXB1qp8cVhuCTzN6rQRDb2SB0=
Subject key identifier:   AC:2A:E9:07:73:C8:F2:52:8C:85:4F:F4:A0:AC:7D:5B:C1:43:6C:29
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer:       /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial:       01962E2AD4667EE7EE96E980D01F31045104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: P9enlJyu28VuVP4Zi4mvJKZtNo4WCkLbi74/pLzesDE=)
                          2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
                          3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d4:66:7e:e7:ee:96:e9:80:d0:1f:31:04:51:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=ac2ae90773c8f2528c854ff4a0ac7d5bc1436c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:b7:bb:0b:ef:2a:70:af:23:2f:25:46:82:
                    b3:d2:fa:57:2f:7b:0d:2e:4d:4f:17:39:8d:87:8e:
                    f4:d8:92:d3:e1:09:40:e9:a9:ce:05:ef:7c:42:66:
                    07:26:bb:48:dd:86:bf:d6:54:5f:8f:e3:43:8f:e7:
                    8e:04:81:7e:f1:58:84:72:c3:24:26:07:62:f8:92:
                    75:0a:80:cb:95:ec:0f:16:c1:68:43:a6:31:14:e5:
                    37:33:1c:21:38:21:40:e6:f5:30:e7:1e:76:3d:d2:
                    dd:ec:8d:ac:c6:33:fc:70:6e:47:25:37:e0:f2:b2:
                    02:fc:69:fe:d1:34:1f:72:c5:53:0f:76:e4:32:a8:
                    e7:d4:ff:bb:01:cb:c1:eb:a5:72:a0:45:6c:52:09:
                    ec:6d:8c:23:75:30:69:3e:44:87:ae:65:1d:7c:87:
                    f9:54:ca:14:89:77:f5:ae:66:5a:1b:ac:d8:76:8d:
                    1a:ea:f8:91:98:d5:d5:fe:e7:42:c6:5e:b3:8b:e3:
                    5d:04:b4:28:1e:95:b4:bd:cc:36:29:dc:e2:58:e4:
                    6b:f8:9c:c8:2a:c6:85:95:db:80:96:59:fd:23:4a:
                    e1:3b:4a:92:22:db:3e:3a:0e:85:3e:c3:7c:27:52:
                    33:c6:db:77:d3:b5:be:72:5c:fe:44:23:f7:9d:82:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2A:E9:07:73:C8:F2:52:8C:85:4F:F4:A0:AC:7D:5B:C1:43:6C:29
            X509v3 Authority Key Identifier:
                keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:c4:01:de:74:9f:a4:7c:af:42:bf:ee:8d:57:ab:d0:da:
         4a:e7:f4:ea:0a:60:ff:74:4a:87:4a:f4:72:83:5c:d0:6a:2f:
         54:eb:f9:f7:a9:72:67:05:89:3c:2e:00:bf:f3:75:1e:19:40:
         26:85:18:26:b0:9d:cc:2f:55:30:31:23:ab:57:ff:28:f5:b8:
         73:6c:a1:df:38:eb:17:20:f6:5e:cf:66:13:34:52:e5:e5:da:
         4e:67:dc:8a:77:e4:3d:9f:3a:50:dc:ab:36:77:ad:8f:a6:38:
         53:48:d9:9b:9c:7f:76:6b:f5:36:af:cc:96:93:58:b3:2d:1b:
         f6:70:b5:8e:b8:dd:10:9b:1a:d9:45:05:ba:d3:d2:d1:a2:fa:
         c7:ec:8c:8f:e2:d4:e7:d1:36:0a:dc:e6:72:7e:d4:59:ee:83:
         f9:17:7d:66:7f:e0:3e:de:a7:b4:66:0f:34:3f:f6:18:da:c3:
         11:7d:d0:f7:1e:38:42:2d:67:4b:f9:53:49:d1:2f:59:f6:08:
         d2:aa:f3:e6:fe:85:fd:d0:f9:dc:50:f0:1d:3d:c4:e0:8e:36:
         4b:31:e6:54:05:ed:92:5f:dd:b3:2e:c8:48:c4:b3:db:ba:55:
         c1:19:66:45:50:2c:f7:26:eb:4d:71:d3:37:67:19:f3:cd:f9:
         48:0b:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----