Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
File:                     Yonrndlo7aSnlWTC4GpoOEIpegQ.mft (raw, json)
Hash identifier:          +OLWl0cUeUqZkPRlvbaMnChNCs3ZV5R3N2Ewxe3hLHo=
Subject key identifier:   4E:B8:94:C9:B3:50:F7:80:C9:E4:61:2A:A9:60:11:A3:37:5E:FA:50
Authority key identifier: 62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04
Certificate issuer:       /CN=6289eb9dd968eda4a79564c2e06a683842297a04
Certificate serial:       01962ECFDC8A11521CAFA0B4933E9CA9BBA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
Manifest number:          0209
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: Yonrndlo7aSnlWTC4GpoOEIpegQ.crl (hash: 9a3cYJybN2PbC/QWKVTmKz1uZ+/yQwVQAbkbS94hRbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dc:8a:11:52:1c:af:a0:b4:93:3e:9c:a9:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6289eb9dd968eda4a79564c2e06a683842297a04
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=4eb894c9b350f780c9e4612aa96011a3375efa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:b0:ff:50:bb:e8:d0:a2:14:98:ed:41:82:
                    25:f0:c5:ba:a6:35:50:9d:ad:0f:ed:a0:e0:97:8e:
                    26:27:86:0a:6e:4c:f8:8f:62:14:96:83:0c:ac:1f:
                    c9:31:b7:a9:b1:75:91:74:36:0d:49:46:d0:fa:61:
                    cb:66:f8:84:71:9e:5d:0a:5f:35:c6:66:a1:c2:c0:
                    7e:e4:e8:2b:6c:92:f6:69:d1:3a:40:62:3e:79:4c:
                    20:d9:a0:7a:c4:a0:79:fe:8e:20:7d:32:61:41:b7:
                    56:44:a6:8f:db:1b:b8:29:8a:9f:1a:26:91:b3:f2:
                    d2:67:a9:74:6f:d4:45:61:02:21:aa:3c:db:83:e1:
                    85:2f:81:94:6c:27:91:f1:79:01:87:a1:a5:54:15:
                    ba:08:33:df:dd:33:e7:e3:9a:f8:cb:ee:5d:38:4f:
                    c1:01:32:f5:e1:b3:75:55:e2:42:91:f2:6b:cf:af:
                    d0:55:55:ef:a7:a6:85:9a:a5:68:09:f0:c6:37:56:
                    f4:c2:39:63:2d:17:36:7c:10:d8:ea:80:de:6f:28:
                    d1:ab:ac:0e:35:ae:5e:1e:cb:5f:dc:a3:f9:d6:01:
                    3a:05:1f:f2:6d:ae:22:87:31:2b:b5:aa:04:fc:a4:
                    f4:36:d0:3c:93:18:66:23:03:c2:38:32:8d:d2:9c:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B8:94:C9:B3:50:F7:80:C9:E4:61:2A:A9:60:11:A3:37:5E:FA:50
            X509v3 Authority Key Identifier:
                keyid:62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:84:40:ee:4d:c7:97:fe:5e:27:09:bf:d3:db:22:91:ba:26:
         1e:3b:a4:78:08:06:7a:90:15:e0:30:7f:30:9f:5d:6f:30:04:
         14:83:21:c7:f0:a4:c5:d4:be:5d:e4:75:b6:8c:3b:92:ae:ab:
         a0:72:80:a3:24:0e:29:13:07:45:32:75:d3:0b:1b:1f:d8:ec:
         90:24:3f:56:28:aa:b8:b3:a1:6d:eb:e6:5e:e2:13:c0:d9:55:
         68:4c:eb:d8:7c:6c:09:64:58:f8:49:9f:ec:cc:d3:65:11:64:
         75:25:f3:1e:38:35:f2:ba:09:31:9a:51:d8:c9:df:26:20:6a:
         e3:c5:05:03:c4:cc:f6:5a:29:39:b0:1b:50:95:4b:5a:ae:40:
         2d:18:77:b0:5a:1b:b1:fe:3c:f4:db:79:9b:91:dc:05:27:68:
         fb:dd:62:8a:5e:87:62:bf:d2:59:4c:64:70:d9:df:0c:93:db:
         f1:96:4a:b2:a1:ef:21:eb:64:c6:04:0d:ef:29:d1:bd:ef:9c:
         1a:61:4e:ee:8b:4e:14:f1:5d:73:06:dd:84:97:8c:a8:32:b1:
         e2:4c:7c:ae:33:d5:d7:69:b6:0c:e2:9e:48:f4:d4:eb:54:22:
         70:b2:93:40:43:4b:5d:89:a8:d3:53:c1:b1:37:f5:46:17:a1:
         99:0b:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----