Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File:                     yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier:          Eo+UL8axSCCPMgbDA5C4VnYz/QuG8dfX1R/yq45LnwM=
Subject key identifier:   BB:85:4A:68:BF:ED:3D:EE:15:85:75:1B:5F:34:14:87:D4:55:96:36
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer:       /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial:       01962F74E15863B0FBB2E06145DBA1C08623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=)
                          2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: 6GSiG4Kit5dO/qRixwxn+tGGffA8PB4G4yPciyoTy3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:58:63:b0:fb:b2:e0:61:45:db:a1:c0:86:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=bb854a68bfed3dee1585751b5f341487d4559636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:a1:e9:38:a2:24:97:4f:19:72:28:de:67:
                    c8:f0:7f:26:58:a8:f6:de:69:ff:6b:e8:8a:4d:80:
                    8c:d8:9c:2a:a5:33:37:94:b4:e0:73:f0:7c:57:11:
                    24:f8:d1:7a:4e:f6:a2:d8:80:4e:da:ba:9a:c6:c0:
                    06:0c:b5:a1:4a:93:f7:1a:93:00:66:7a:30:35:ca:
                    ba:fc:4a:30:d1:cc:87:2a:cd:00:a2:f5:41:ea:a8:
                    c1:d9:c7:e5:ec:bc:df:78:c6:7b:71:82:c8:70:1f:
                    30:c7:55:d1:ec:7e:ed:65:ab:42:21:90:77:28:0c:
                    0f:2e:5e:39:34:05:eb:42:2f:fb:86:a1:41:42:8c:
                    bc:2a:64:f1:ac:3b:36:f9:3f:8e:34:aa:ee:5c:56:
                    9c:b9:10:f2:85:4d:8d:8d:d2:66:93:59:31:91:32:
                    f6:e8:54:61:c8:5a:eb:14:5f:5d:59:6a:c4:50:2b:
                    ee:c9:ba:3f:7d:43:1d:15:5f:36:da:13:da:d8:9d:
                    e1:3e:1e:b7:c6:eb:01:cd:64:3d:33:94:07:97:42:
                    d6:10:37:59:f8:2d:7c:54:73:06:9c:36:19:45:ff:
                    0e:7b:91:f2:06:f9:f7:8d:d1:e2:7a:7f:25:7c:e5:
                    e9:c0:ca:36:09:06:21:91:b4:47:29:2d:06:02:33:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:4A:68:BF:ED:3D:EE:15:85:75:1B:5F:34:14:87:D4:55:96:36
            X509v3 Authority Key Identifier:
                keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:dd:49:d6:0f:21:b9:ab:0e:a1:f2:5f:e9:54:1c:ae:31:28:
         26:65:23:73:e2:f6:d1:1f:62:3a:ba:7d:ab:23:a6:86:3f:df:
         4e:56:83:5a:a0:02:df:b2:02:fe:16:80:8c:b7:41:5c:cf:20:
         46:b3:55:4a:bd:d1:fe:69:0f:e1:8f:c8:ff:55:2a:b9:fe:99:
         a4:ef:1e:f2:44:97:d5:19:91:5c:b6:5c:a1:2e:fc:b4:c4:d0:
         56:1d:36:b2:fd:cd:64:fe:c2:17:4f:b7:71:ec:5f:31:be:6b:
         eb:a7:ae:0b:51:bd:d1:4d:4a:40:e2:12:66:12:bf:05:dd:8c:
         39:b2:f3:04:7b:6f:9c:09:a9:20:62:fd:c4:01:d5:6d:fb:b7:
         4a:8a:e4:d2:39:c5:eb:82:53:de:ab:17:d0:6f:db:46:00:50:
         bd:cd:f2:56:4a:41:c7:98:ff:18:17:a5:a6:49:b9:63:df:a7:
         23:b0:1b:cf:a7:03:25:9f:c3:e2:29:ae:d0:12:e1:39:44:ce:
         ce:e4:5c:ce:c7:55:4b:4b:3e:fd:f0:20:94:e3:28:df:23:7a:
         9f:56:88:df:0b:33:ed:6b:c2:03:cf:7b:40:a4:0e:0b:99:8a:
         60:4f:c2:cc:08:b4:68:9a:0d:4c:59:fa:6d:8b:7e:d8:c6:23:
         8c:8e:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----