Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File:                     yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier:          LubYBcqBPKgxehkmGuBvJVSHd/YVJgliPV3qpeaOY08=
Subject key identifier:   A5:A3:86:47:A6:C0:01:6A:76:EF:17:41:24:86:41:56:C0:F6:15:7E
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer:       /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial:       01962E2B24808877E390A688F1A014E09BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number:          07B7
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
                          2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: sTXnAzRnXyXpa6iWTTWMRmBKOqaUYZHc/DWPP0tbolc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:24:80:88:77:e3:90:a6:88:f1:a0:14:e0:9b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=a5a38647a6c0016a76ef174124864156c0f6157e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:38:92:d3:10:4c:a8:5e:32:37:e6:51:1d:
                    46:fa:fa:6e:ea:93:89:4f:52:52:d8:67:b1:a9:dd:
                    1e:43:d6:81:a9:8b:52:ba:66:48:60:86:27:f8:5d:
                    ff:3d:c3:04:f7:39:0e:ec:c3:30:81:4f:62:79:8b:
                    9f:56:62:ed:ea:aa:23:ae:96:ae:38:65:24:6f:4c:
                    70:8f:5b:db:a3:76:7c:11:78:ed:3b:87:a0:45:2c:
                    10:17:d8:4b:06:65:90:5a:67:fd:c7:ba:ac:b7:e8:
                    5c:86:f1:1a:03:6b:4f:2a:6f:4e:67:bd:df:ce:17:
                    74:85:88:78:df:d7:1f:31:e0:c0:bf:8f:fc:70:60:
                    07:23:93:b7:90:b8:a5:b4:4c:6d:f0:d5:e7:72:7c:
                    f0:08:40:5d:52:dd:17:4a:2c:75:59:9c:75:b6:5c:
                    86:a1:40:df:47:28:19:64:e5:18:e5:55:ab:d8:98:
                    4e:03:5d:19:4c:a1:bf:bf:f0:9e:90:af:d9:6a:e8:
                    1e:03:10:7d:73:c3:4a:1a:c9:2e:e9:92:4e:65:1b:
                    24:ed:72:be:cc:3e:c8:ea:43:89:68:fc:92:74:8f:
                    44:ec:9c:83:10:11:a3:fe:da:49:d2:31:04:ed:b0:
                    04:c8:b6:5f:a1:bb:5f:f7:6d:df:bf:cc:60:02:97:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A3:86:47:A6:C0:01:6A:76:EF:17:41:24:86:41:56:C0:F6:15:7E
            X509v3 Authority Key Identifier:
                keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:29:62:2b:a4:31:a8:3f:ea:d2:8b:da:b4:37:fe:88:a8:
         a7:a0:2f:c3:53:cd:a5:67:ed:bd:7d:24:44:59:45:b3:d2:52:
         6e:b0:0f:92:38:96:71:07:aa:3b:bc:68:3d:ca:26:60:08:b8:
         e1:19:3f:76:6c:6c:b4:aa:1a:01:92:7e:b1:77:eb:34:5f:1d:
         a9:0a:8d:9c:38:8a:3b:b0:54:9d:ae:c0:32:cf:84:95:86:84:
         a4:8b:72:26:64:47:c9:e7:da:ca:31:ff:66:ad:de:15:9a:6d:
         b9:c4:d9:85:b3:cc:af:bf:5a:75:31:30:49:ee:a1:59:ec:fb:
         ba:be:0e:38:5f:8d:aa:ef:04:2a:2b:e8:36:e5:fa:7b:07:d5:
         39:b6:19:7c:8b:2c:26:82:8d:d0:b1:8a:a4:d1:76:2a:9b:9c:
         a9:24:ba:f5:2d:e0:cd:2f:c6:10:43:e2:ed:f5:cf:86:d0:72:
         a1:78:5e:fe:70:72:fb:34:9f:a6:53:17:5a:b8:db:8b:89:df:
         2f:5d:90:6e:5f:cf:c0:66:d5:f4:bf:1c:7d:ba:65:d6:50:72:
         78:22:78:fb:06:39:1b:e2:9a:d3:76:a6:8e:92:91:02:10:02:
         f5:9f:0c:34:82:e9:c5:db:53:04:e7:9c:8f:73:7c:ab:be:0b:
         c2:d5:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----