Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          WisSIsOOqkTHpYMhrDClbr/qeAAU1vFHaRvdFkRZzjI=
Subject key identifier:   FD:FA:89:9C:89:61:4A:C2:DF:5E:E7:B5:8B:B6:D5:AE:9B:7F:A4:CF
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       01962F74C1D43C6A3EF4B4E473503CA921A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          0C79
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: EgC2WhXqNoMSQ8S5wzn3koj1XEStiFda+ieXQPBSg9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:d4:3c:6a:3e:f4:b4:e4:73:50:3c:a9:21:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=fdfa899c89614ac2df5ee7b58bb6d5ae9b7fa4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c3:9e:9d:9d:14:55:7b:a2:d8:6c:23:1d:bb:
                    08:cd:30:69:bf:8b:2f:1b:b1:7c:67:fa:84:67:76:
                    f3:1d:b4:82:8d:61:dc:50:8e:e4:02:45:a1:48:2e:
                    df:17:f6:4c:80:df:3e:1c:cb:6e:74:1f:9d:27:33:
                    a1:58:c4:4a:b5:47:84:36:70:43:0d:a4:a8:76:03:
                    8a:54:06:ea:55:a2:5e:14:fd:c5:b2:7f:6b:44:de:
                    cd:c6:16:4e:80:f1:17:e7:ec:a5:56:8b:c7:f0:07:
                    d7:82:7d:9c:f9:e4:65:3a:63:04:ac:e3:05:46:2d:
                    9e:ae:cc:1b:e1:8b:36:71:ec:67:31:58:c4:9c:f1:
                    c0:ed:3d:f8:46:fb:f7:19:7b:0f:ca:50:2c:26:46:
                    32:80:63:93:46:d2:7b:11:c9:c5:37:7f:ac:86:80:
                    e6:ef:36:95:15:b5:bd:b5:c0:f7:5c:ca:01:4a:e2:
                    bb:40:9d:e9:55:b8:86:38:c7:92:42:28:66:96:66:
                    b1:3d:8a:b7:a0:d6:81:bc:57:07:2c:04:a1:41:be:
                    12:ce:58:8d:42:51:e5:ee:93:40:26:af:fd:68:91:
                    2e:fe:95:90:c3:d5:99:0a:e3:82:fc:58:82:d2:30:
                    6a:7c:08:68:56:2d:49:53:fc:eb:f0:ac:22:a5:7d:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:89:9C:89:61:4A:C2:DF:5E:E7:B5:8B:B6:D5:AE:9B:7F:A4:CF
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:be:62:c2:b9:50:48:75:f7:56:62:76:64:4d:8c:3d:e2:5a:
         c3:06:ad:7f:65:55:dc:5d:ca:9d:0c:36:3d:25:8c:9b:9b:c7:
         18:5e:95:5a:63:88:1f:39:61:f2:f4:1b:a2:22:cd:85:61:b3:
         52:66:c9:27:3b:0e:50:54:88:b4:4c:35:30:4c:d1:d8:4c:4b:
         71:ce:37:46:e1:cc:f5:c2:61:cf:b6:c7:41:fa:5c:65:6e:00:
         a2:0a:28:ce:b0:df:ce:80:95:55:bc:4f:7e:28:6c:34:71:50:
         b5:b8:e1:28:7d:40:bc:7c:5d:af:60:1a:4f:38:24:54:b1:74:
         7a:d7:b0:ad:d1:c9:85:ff:82:7e:c9:58:34:99:26:28:e1:a3:
         01:6a:47:59:13:77:a4:1a:f6:7f:85:18:89:0d:72:d6:b6:20:
         4f:08:6c:78:7f:11:33:cf:1a:a0:e8:c7:8e:8f:d8:ff:81:6a:
         88:cc:24:f3:d0:c8:46:5a:9a:21:de:d4:f3:a9:91:eb:6d:da:
         62:31:bd:02:cb:9d:4c:7e:89:6c:6c:c6:65:56:be:ba:3f:5e:
         4d:f4:93:34:4d:38:9d:87:82:cb:47:38:a4:f1:e5:89:8f:61:
         e9:98:bf:6e:9c:c7:08:01:b9:b6:82:47:1e:99:a6:5d:57:1a:
         2e:1f:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----