Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File:                     yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier:          dwQulU4CYa7xVUUq3eyIBEJqaFInBJtmpz7GysWA0qw=
Subject key identifier:   3A:3E:5C:5B:A9:97:AC:2C:EB:8D:D8:0E:9B:91:2F:1A:4B:D9:F3:2C
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer:       /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial:       01962F06B7E70CBF1DE32469D793BDC9964A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: BLdYk2kIvuHmYKbilaEgVE4Ejl/zq9Xc4VHX1P7hFFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:e7:0c:bf:1d:e3:24:69:d7:93:bd:c9:96:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=3a3e5c5ba997ac2ceb8dd80e9b912f1a4bd9f32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:87:54:24:de:c8:d4:fc:3a:4b:3b:f5:67:
                    12:4e:67:c9:05:66:e5:d4:64:ed:78:7a:9e:81:af:
                    1e:32:e0:3b:28:af:45:ca:58:45:3e:b2:24:e6:b9:
                    98:98:a4:8f:aa:99:ee:6f:48:ba:f3:66:42:38:db:
                    31:ac:a3:bb:8f:0d:8c:8e:0d:48:34:43:d3:c4:c1:
                    4c:fd:00:48:c7:9f:3c:16:5a:aa:24:30:26:ee:3d:
                    6a:4e:52:f4:42:58:f2:e2:fb:da:80:5b:19:1d:09:
                    a0:c7:7b:f5:d7:14:6d:23:42:bc:e0:83:a1:62:c7:
                    93:9a:68:2f:32:6c:f8:0b:54:bd:d1:7c:f7:dd:4e:
                    61:cf:4b:4d:b8:f6:dc:8f:60:31:27:3d:d7:97:c7:
                    4a:b4:4a:2d:b5:8e:1f:76:1d:35:59:b6:4b:72:f2:
                    c8:30:51:f2:99:cc:c5:61:bb:40:18:43:9d:2b:b3:
                    2a:25:8d:8a:d0:7d:62:38:63:c2:79:2b:ad:57:8a:
                    bc:c8:fd:02:c7:7a:a3:05:87:1f:a4:57:cd:b0:0d:
                    ec:3d:47:92:07:18:12:cd:c5:78:c7:a1:b3:64:4a:
                    a2:a0:fd:7b:e9:2b:42:25:3e:87:70:3d:26:2b:18:
                    0b:d6:af:d6:8b:e2:f8:9f:86:e6:f8:af:79:93:91:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3E:5C:5B:A9:97:AC:2C:EB:8D:D8:0E:9B:91:2F:1A:4B:D9:F3:2C
            X509v3 Authority Key Identifier:
                keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7c:4e:1c:2f:ea:d1:8f:9b:1c:f7:25:76:8e:e9:26:81:d9:
         bd:a8:7b:fc:a7:dd:81:2a:47:70:73:53:a2:28:42:0f:44:5e:
         2e:28:f7:46:23:89:64:b4:30:26:d0:83:16:8e:bf:f0:fb:c0:
         40:e8:5c:92:de:89:f0:cc:6f:a4:40:2d:3f:f3:8b:99:44:9a:
         4c:44:d9:c2:3a:d7:db:47:26:d4:6c:de:2d:2a:1a:1d:10:eb:
         1f:32:08:04:f9:52:b5:0f:a2:69:ce:11:ea:04:ca:fe:31:ab:
         b8:ed:1c:27:58:ad:1f:fa:37:f8:61:aa:b3:22:73:3f:2f:20:
         8d:3a:bc:8f:49:42:5b:b8:04:15:d3:99:4b:d4:4d:ff:15:f0:
         92:6b:9f:59:f3:b4:1c:c7:b0:00:49:66:dd:2d:f8:a8:68:08:
         e1:7c:f6:52:e7:91:27:ac:17:33:d2:cc:2f:eb:9a:92:3d:89:
         47:66:9c:79:56:af:e0:23:b6:59:ce:50:71:52:55:88:35:ff:
         2d:b4:c6:a3:cb:52:08:15:a3:7e:c1:e8:f0:68:06:32:8a:8d:
         a9:7f:c1:d2:8f:01:65:ae:03:3f:49:8c:33:07:f3:d1:f8:b7:
         f3:b1:81:96:fe:ca:b9:c7:5c:b6:76:2b:bc:a4:49:b7:50:c0:
         27:3f:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----