Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File:                     y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier:          /J/H1dyj6+C3HNmROHeU2Q6EfVuU0QXpV3ysYCE/Y8A=
Subject key identifier:   89:11:F6:98:28:71:CD:70:8D:84:AF:5A:EF:DE:D5:E7:D3:66:70:E4
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer:       /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial:       01962FAB9789B5F90B397CD2121F6EF0E302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number:          0571
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: TuQDQ8nJBbYLub1mzr6Exv_MEOE.roa (hash: mNd0eAJJzc4YIh0tYa+bIHu2wbr2Q6C9CMzRK0s5ooI=)
                          2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: AOTh6KRiE9W2jQZic1RQEI1lxmqns0gaDq9Edsj47Po=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:89:b5:f9:0b:39:7c:d2:12:1f:6e:f0:e3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=8911f6982871cd708d84af5aefded5e7d36670e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:bf:f2:32:ab:0a:ce:66:f1:ac:f0:c4:90:
                    dc:3f:f8:db:d3:31:03:a6:cb:99:5b:19:88:8b:1c:
                    10:1d:81:2f:bc:db:1b:ac:72:57:95:f0:b3:56:0a:
                    98:55:1f:43:22:10:b9:b2:37:b4:70:89:78:3a:50:
                    8b:ff:ad:17:1a:83:e5:c9:b3:44:87:ce:75:f3:9c:
                    dd:14:72:da:be:3b:1d:75:6d:a7:d0:4c:b7:1e:6f:
                    61:84:9f:12:78:50:e5:97:b4:72:a6:85:18:cd:fb:
                    29:bb:b0:32:6b:de:3f:98:06:9a:93:39:71:80:11:
                    f9:cb:f0:60:98:65:04:91:60:29:0e:5d:58:dd:e4:
                    d6:98:6f:47:98:ce:d6:fe:d8:d4:c7:8d:e7:1b:aa:
                    77:0f:ba:bc:90:f9:05:4d:5f:67:9f:02:fb:86:33:
                    40:83:b5:7b:55:11:ea:23:fe:9d:19:71:42:fb:34:
                    75:d2:b6:2f:38:07:30:4f:25:eb:5c:5f:46:39:4a:
                    d9:3e:63:4f:28:83:78:42:f5:60:cc:ad:61:3e:39:
                    71:9c:93:b1:75:50:50:7a:b9:90:f2:ab:ee:28:5b:
                    46:ba:a9:11:1b:b7:1b:8d:39:37:c9:a8:a2:22:4e:
                    52:6c:ee:dc:9f:7d:63:f8:aa:2f:6e:b3:c6:be:5c:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:11:F6:98:28:71:CD:70:8D:84:AF:5A:EF:DE:D5:E7:D3:66:70:E4
            X509v3 Authority Key Identifier:
                keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:66:ea:c8:d1:a9:4b:9b:fb:08:21:b0:ab:98:d0:f4:fb:
         64:32:ca:da:c1:a0:07:65:00:e8:c7:08:10:9d:5c:84:78:fd:
         47:7f:57:d4:23:42:87:47:94:64:4c:2d:8b:de:90:8e:10:87:
         36:e2:bc:6b:16:79:36:d9:e0:a7:b0:6b:42:4c:d7:61:42:d3:
         b2:62:4b:81:9e:91:e0:e8:e7:a5:61:9c:fc:c3:15:fe:c4:71:
         0b:52:d1:e1:6e:64:68:0e:94:0f:86:7f:fa:fa:bf:47:ab:35:
         9a:20:65:f4:69:d4:60:4a:c4:65:cf:78:a9:5d:36:24:05:5f:
         9e:4c:89:c6:e9:c3:b3:37:46:98:25:bd:67:8d:fc:4c:53:5d:
         f8:67:8a:da:04:5f:1f:65:d1:70:e5:88:87:d2:d6:77:0b:33:
         16:7f:93:8a:3d:d1:d7:94:69:53:b9:61:90:9f:33:bd:fb:20:
         10:c4:c5:7d:f9:17:d7:90:fd:8e:19:f9:3b:00:4e:b6:86:63:
         f0:99:60:93:1a:3e:10:53:f8:02:35:a7:c4:de:b3:cf:4c:de:
         8b:de:cd:4c:71:76:d4:7e:fd:8a:73:f6:7f:42:cd:a0:c2:7e:
         33:5b:96:52:18:9c:07:22:1a:6b:6e:69:fb:f3:a8:95:75:e5:
         59:92:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----