Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File:                     YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier:          KCrrcshOeQsTyn/XyNFLtNYFKEW9oEXQxM8h1SW2FcQ=
Subject key identifier:   2B:6F:A2:12:D9:15:BF:E5:5D:FE:E5:5B:0E:2D:CE:D1:AD:7E:E0:5C
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer:       /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial:       01962E2AFB9729B4C79A42F17415C3A1CB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number:          122F
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
                          2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: W0EWk3h51/S6z/paCLPRw3MCFAbpwsrGH7kSU6m5irQ=)
                          3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fb:97:29:b4:c7:9a:42:f1:74:15:c3:a1:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=2b6fa212d915bfe55dfee55b0e2dced1ad7ee05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:96:13:51:fe:e2:4d:17:c3:58:30:f5:68:
                    c7:83:93:b2:6e:6d:a3:7b:c3:03:a7:af:cb:1b:55:
                    47:60:81:f2:f4:ff:8a:4a:86:0d:6c:0d:25:64:42:
                    72:aa:da:17:cf:04:38:6b:2d:bd:48:f2:4d:7e:34:
                    f3:51:3d:41:0c:9f:40:90:bc:1c:be:eb:ef:ec:9f:
                    5d:10:97:29:37:4e:c6:62:98:ac:6c:bb:df:b0:a4:
                    34:e4:d2:1d:d0:03:00:7a:ed:e7:22:8c:7f:52:bb:
                    74:01:19:fb:f6:5a:a9:01:1a:64:66:5c:2e:f2:16:
                    37:3c:d0:5b:8b:de:41:7d:13:9a:34:87:5a:95:8c:
                    9f:95:e2:00:8a:2a:0c:7b:cc:22:df:e7:d0:e9:d2:
                    c0:52:a1:82:66:d8:8f:00:ec:34:ac:40:c8:e6:b5:
                    53:b1:14:bf:34:fb:da:80:e4:57:72:6e:80:01:a3:
                    45:6e:2f:81:a9:4b:6e:39:c1:80:41:cb:83:68:57:
                    1f:c5:4a:ea:b5:3b:09:ca:f9:f3:18:4d:4e:77:d8:
                    fa:01:b8:3b:90:91:55:83:bf:2e:f8:73:9e:81:37:
                    a4:90:67:f6:2b:57:af:43:3f:08:9c:02:41:7c:73:
                    e9:79:0f:fc:6e:15:66:91:81:ab:50:e6:cd:67:17:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6F:A2:12:D9:15:BF:E5:5D:FE:E5:5B:0E:2D:CE:D1:AD:7E:E0:5C
            X509v3 Authority Key Identifier:
                keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:50:88:f1:62:b5:d7:d4:3d:45:25:95:fb:47:75:60:c8:b7:
         47:34:82:58:2f:a1:28:80:78:07:9e:0a:cf:79:64:4e:ed:55:
         da:ff:c8:6c:34:f7:18:22:1d:2a:92:70:89:01:84:05:c9:5f:
         1c:09:a1:29:b7:42:b6:b3:c2:c0:f4:fc:55:35:be:2b:d4:01:
         d6:12:e4:84:76:4f:f7:8b:d3:da:d5:cd:0f:59:62:46:80:90:
         cd:12:30:54:76:78:19:cf:3c:50:b7:b2:9b:8d:a3:07:21:1b:
         7a:bc:d8:d7:e6:67:b1:79:c7:87:d0:0f:29:b4:9d:c1:c4:03:
         dc:22:b3:b2:55:d0:6b:52:97:7a:73:d0:a5:56:3e:3e:64:7e:
         b2:dc:6a:b2:f8:ba:b6:d7:fd:d0:7d:60:71:f5:39:aa:95:27:
         7f:8b:57:f2:d6:55:b6:72:6c:3d:72:fc:00:65:5b:51:57:e8:
         2d:6b:73:f7:70:fb:8a:92:46:5a:21:28:fa:24:9a:fa:29:c6:
         1e:38:d4:79:61:c2:98:f6:31:4f:b3:96:0f:fa:9b:a0:53:4d:
         2c:d0:ee:1c:2e:2f:1a:a4:3c:8f:d2:a6:7d:70:9e:9d:15:fa:
         8a:a6:0d:6c:8b:c5:b8:8c:ab:84:ea:2f:2c:2d:11:90:64:c2:
         86:08:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----