Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File:                     YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier:          2M98O+nSOTESUMIaaw5ZSJcqXJ9FFrLu0nx+eGMLLwo=
Subject key identifier:   CB:D2:5C:06:D8:35:EE:D5:42:90:80:53:4C:E3:78:74:F6:73:10:76
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer:       /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial:       01962F0646356266AC00A953F3FF371B3364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number:          0F5A
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: e1XAJMOFucSO5FUeHs6JmNDsx3s1gdzkAFZad3YrAZM=)
                          2: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (hash: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:46:35:62:66:ac:00:a9:53:f3:ff:37:1b:33:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=cbd25c06d835eed5429080534ce37874f6731076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:38:b6:19:a3:68:7b:9d:7d:ee:cb:fa:51:
                    17:18:14:d1:0d:57:be:57:ab:75:98:be:d4:3d:c8:
                    c4:6e:7b:a8:74:f0:88:49:6e:95:91:7d:97:4b:96:
                    3b:08:3b:b4:49:25:96:a7:7d:98:33:b9:6b:9b:e4:
                    db:6b:22:b6:bf:a0:30:6f:e1:43:a3:fa:ef:e0:58:
                    f9:00:ae:af:87:44:24:6f:06:a8:97:cb:5a:23:20:
                    9c:a7:94:4d:34:9d:b0:b1:dc:c5:3a:d4:a5:ef:47:
                    d5:ea:6c:7f:57:31:a8:21:8b:bf:b2:58:42:8a:74:
                    d0:68:85:12:a5:34:b5:5a:92:c6:8f:54:da:20:be:
                    f9:f9:78:37:2b:0b:d1:00:99:f5:c0:cc:71:1d:9d:
                    e6:ad:d1:32:70:1d:b3:15:93:20:be:c3:5d:1a:19:
                    1e:42:0c:ee:22:e1:0d:94:59:ab:f6:72:5a:b5:06:
                    55:15:61:eb:12:4d:9c:fa:65:ef:e4:9e:98:e1:f0:
                    00:b8:de:cc:8b:e1:86:2c:91:bf:2a:94:e5:91:8d:
                    4a:2c:cc:c9:7e:9f:46:33:6e:cb:c1:18:15:8f:c3:
                    f5:61:18:5e:37:18:3b:af:6f:fb:3f:3a:22:7c:a0:
                    5e:8c:fe:65:e4:02:8d:c0:6a:7c:4f:6d:49:f3:30:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D2:5C:06:D8:35:EE:D5:42:90:80:53:4C:E3:78:74:F6:73:10:76
            X509v3 Authority Key Identifier:
                keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:d3:dd:86:ff:80:a4:2f:d7:dc:f0:1b:9b:31:c3:cd:bb:
         45:16:95:1e:7c:75:56:a6:00:2e:ed:11:74:c8:b0:36:04:af:
         0b:7c:ec:2a:ca:89:0c:bf:08:64:f5:85:fd:af:b7:b3:a4:1c:
         8a:39:f3:c7:3c:76:33:1c:2b:5c:38:6d:ec:03:3e:1f:b2:d1:
         32:a6:12:7d:2f:b8:2d:2e:b3:44:d4:5b:40:86:78:5f:6a:20:
         5d:39:88:3a:5a:95:2b:f2:1a:9e:64:bd:65:c3:07:77:3d:ab:
         7e:79:f2:d6:f6:a9:ac:91:d7:99:3e:34:c9:d2:04:c7:f4:99:
         cd:2b:56:e7:80:b8:e2:56:0d:ab:3a:04:d4:19:bc:7f:d7:e2:
         db:3c:7a:51:69:e4:20:54:11:e2:b0:24:47:ea:b0:b3:56:93:
         cb:ba:01:43:8a:f0:c7:c4:f6:36:fc:11:80:51:70:71:a9:ef:
         2a:a6:eb:a7:82:36:57:03:41:75:a4:2e:9f:3a:af:f2:17:ba:
         05:3e:28:f2:c8:ad:05:dd:17:30:fe:78:ff:88:22:4b:14:72:
         57:dd:a8:4c:fe:a1:41:54:e4:04:fa:c6:7a:3e:ad:90:cf:53:
         56:34:eb:57:cb:60:6d:d2:12:92:d7:8f:be:37:40:12:5f:01:
         c6:0a:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----