Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
File:                     yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json)
Hash identifier:          zWXKvupVMLxPoBClScy8lmDa2f56x2SYShkV2k2xBcY=
Subject key identifier:   08:6C:2F:47:98:02:74:3E:E1:24:7C:3A:75:C0:60:E7:F5:80:39:D5
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Certificate issuer:       /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial:       01962E61A4C096F09400C0533B42E7D371C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (hash: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=)
                          2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: DD17JAfR03yYYZk5lDmr+0/aR+8bamiM8LGccTnl7vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:c0:96:f0:94:00:c0:53:3b:42:e7:d3:71:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=086c2f479802743ee1247c3a75c060e7f58039d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:1b:ff:67:6a:77:af:bf:f8:00:51:84:ec:
                    88:20:1d:49:81:6a:6a:2a:bb:5b:0c:b7:74:1c:d9:
                    8b:a0:1e:c5:a4:2e:3a:55:b9:e3:64:89:4c:9b:39:
                    78:24:39:16:a5:3c:19:a5:1f:48:9b:9d:1a:a5:0a:
                    d4:ba:4e:27:7f:dc:d7:f8:cd:f1:52:e9:32:c5:8f:
                    8c:62:e8:88:bb:1c:fd:3d:a1:1f:89:03:42:c6:22:
                    bc:dd:88:aa:20:ae:18:6d:1a:34:14:4f:9b:46:8a:
                    01:62:90:0f:5f:e5:a0:a1:53:b0:62:da:dc:d2:06:
                    51:40:16:70:48:15:c7:9a:04:fb:81:3d:78:85:41:
                    40:ef:1d:76:53:7c:cd:ac:2a:28:8b:c6:67:b6:02:
                    fb:22:3f:33:6c:39:e1:58:84:e8:6d:93:ba:64:c7:
                    31:ef:32:d7:ee:eb:da:fb:92:45:09:81:92:40:62:
                    55:b2:53:40:a6:71:49:c5:b4:47:04:04:10:5f:ab:
                    8d:20:b1:74:31:6b:68:47:73:85:38:59:16:7a:03:
                    fd:47:42:37:1e:ab:e0:e3:a0:5d:28:a0:31:1e:25:
                    7a:bf:51:d1:83:59:c8:21:85:23:86:6f:29:4f:49:
                    4b:03:86:02:1e:b5:bf:f8:16:53:68:c6:5f:29:05:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6C:2F:47:98:02:74:3E:E1:24:7C:3A:75:C0:60:E7:F5:80:39:D5
            X509v3 Authority Key Identifier:
                keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:36:20:fb:1c:db:23:25:a6:45:31:6e:e9:58:d5:a7:ec:
         9d:ca:32:4c:f6:1f:e4:2f:cc:d0:2b:da:fe:48:3f:87:65:06:
         2e:4a:90:3d:ee:81:1a:c5:10:eb:1b:27:e0:41:d8:f4:52:8a:
         c6:fc:80:06:18:87:df:36:2c:d8:2f:4c:52:00:75:ec:cd:5d:
         2b:6e:f8:fd:f6:11:1d:bd:ec:ee:a3:89:01:3d:19:72:5b:8d:
         44:4f:06:21:95:15:44:67:c0:cd:b8:0a:a2:0a:29:cf:b3:80:
         cd:6d:32:bc:f9:dd:fa:22:d9:43:81:58:a2:a6:84:7c:86:b6:
         9e:5c:cf:ca:9b:e7:5c:88:07:e9:f2:97:15:1f:3f:46:df:49:
         37:3c:5d:ca:da:70:fe:be:cf:6b:dc:90:d3:db:0f:3e:bd:f5:
         81:da:25:14:f2:a8:91:61:0f:84:b7:95:29:de:b0:c7:9c:b9:
         5f:a6:af:b2:85:b8:54:a6:1e:f1:04:ac:d5:ed:68:07:1d:de:
         0a:e5:d3:5a:32:47:40:de:23:9e:39:f3:42:d3:9a:7f:bf:a6:
         42:04:5f:8a:20:91:66:9e:a6:97:e1:49:81:ad:75:69:91:21:
         c2:0c:8f:a8:9b:a9:3c:1b:25:ef:96:60:7c:6d:7a:b4:2c:79:
         2f:15:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----