Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
File:                     cybGPef_oxXiAl1pZw11dSWf98c.mft (raw, json)
Hash identifier:          oUc+rUY6bAmyx61rER+UjF8gt4wgcejYsDTCLrylf1M=
Subject key identifier:   A7:5D:95:DF:13:94:C3:15:FF:C9:C1:82:ED:D0:B4:B0:AA:22:34:CE
Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
Certificate issuer:       /CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Certificate serial:       01962F06680D74FC7C5C78A89BA263AF8E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
Manifest number:          0528
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: cybGPef_oxXiAl1pZw11dSWf98c.crl (hash: CANOqHl76KZ68nOLtVs2OZuHHNT96/ZVZYD4q1Hpl4U=)
                          2: ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa (hash: wMiYBEmRQakoObcIju3eVEr8bEdfvqRbzn+KIxKAXDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:0d:74:fc:7c:5c:78:a8:9b:a2:63:af:8e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=a75d95df1394c315ffc9c182edd0b4b0aa2234ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:87:15:69:e7:7e:d4:2a:98:aa:6b:a1:e0:
                    84:e8:f1:8d:b8:14:07:55:6d:8a:2c:8a:0b:e8:99:
                    95:60:2c:de:7d:4d:9a:be:1e:c1:d4:9c:c7:fa:b3:
                    d5:a2:0c:31:02:a3:d0:a8:a1:60:2a:5e:d6:6a:44:
                    f7:f7:bd:27:5f:76:2d:d3:0c:c9:ce:46:ad:ee:02:
                    82:b5:b4:70:e6:c3:ee:53:28:ee:5a:fd:cf:9e:2c:
                    1b:03:af:bf:27:34:86:df:f6:98:01:36:2f:1b:95:
                    5e:e1:21:e1:78:95:27:8d:c3:67:e6:99:f5:4f:d3:
                    20:4a:6e:b8:5e:2c:8f:05:9c:50:5d:66:db:88:35:
                    cd:9e:3c:a0:4b:72:ad:c1:a5:b8:45:84:ad:45:3a:
                    d4:fd:2f:f3:52:90:08:5f:47:cc:dd:93:8d:9e:f0:
                    d1:07:17:33:1a:c4:63:da:9e:73:d0:be:20:b2:6e:
                    c0:ad:f2:6a:50:47:b4:a6:4f:4e:02:75:bd:45:76:
                    4c:e1:04:22:bb:eb:e4:de:b9:b8:4c:ef:f3:79:4c:
                    ec:b1:c8:5a:20:90:1c:d0:8f:fb:de:d1:b8:07:c6:
                    e1:92:e0:89:ae:39:34:20:de:00:66:8f:b9:92:24:
                    79:43:84:87:b2:a7:bd:ad:86:0e:cb:c9:c9:6c:f7:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5D:95:DF:13:94:C3:15:FF:C9:C1:82:ED:D0:B4:B0:AA:22:34:CE
            X509v3 Authority Key Identifier:
                keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:fd:45:8c:58:af:4a:f3:56:d2:fa:c8:38:b3:6b:e9:b3:
         5a:48:9b:87:cc:d0:0d:b8:8e:0a:a9:57:b6:45:3b:af:ff:52:
         89:26:71:56:cb:0b:3a:cc:25:69:7a:85:21:b9:3a:34:5c:68:
         58:92:b0:53:37:b4:d3:f5:69:5b:e2:3a:72:de:cd:31:51:c3:
         e5:31:a0:cb:49:5d:9a:0e:bd:20:18:4e:cc:7a:94:1c:b7:d7:
         87:be:b0:69:e3:85:26:3e:52:aa:a6:5b:92:fe:e9:39:70:e9:
         d9:00:45:d2:c3:e6:2e:80:cc:69:a2:75:23:c6:cb:81:de:02:
         c1:50:15:28:60:7a:66:8c:48:7d:34:f5:b9:52:e2:df:94:14:
         88:0d:c1:3e:db:1d:18:f5:4d:63:0c:f4:7e:d6:f3:8a:d0:03:
         16:90:6f:9a:e9:ec:53:a6:61:dc:38:0d:d4:00:95:bf:94:aa:
         02:4e:d6:c0:68:e8:2f:43:79:7f:3b:55:25:3f:ff:08:c7:37:
         cb:c1:50:a8:86:67:07:b0:b7:2e:dd:fa:5f:46:f0:7a:e0:47:
         f0:29:c4:6e:6c:99:91:a6:90:9e:41:91:7b:f0:66:af:4d:a5:
         ee:6c:b5:31:19:ef:a1:31:9f:e9:f1:67:59:06:fb:aa:ca:26:
         a4:16:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----