Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
File:                     RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json)
Hash identifier:          ag1ToAQesLEclHVwU+C+xcmm8BiNLPkqm7Wbi5Zuit4=
Subject key identifier:   C6:67:0D:73:FC:AD:B4:70:CF:81:3A:9B:A5:5C:36:88:AD:37:7A:C6
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Certificate issuer:       /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial:       01962F06F4005A5637336C5ADE606A780786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
Manifest number:          01A4
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: zfUAbs1Eb9uMS7Trb5Jog8reZ4FG53wSIe12PFQvdvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:00:5a:56:37:33:6c:5a:de:60:6a:78:07:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=c6670d73fcadb470cf813a9ba55c3688ad377ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:b0:cf:be:56:a4:0b:28:a1:6c:d4:5e:5b:
                    74:b6:ea:7e:8c:22:36:ee:b5:bb:0a:be:04:b3:cc:
                    bb:b3:e8:5f:94:45:c7:f2:dd:c0:1d:6b:3a:d5:af:
                    a3:93:f8:65:64:95:e8:5b:3a:ed:03:6b:b6:32:fe:
                    7f:b7:7f:85:fb:43:52:e4:79:53:b5:8c:52:6d:7f:
                    3f:be:48:c9:e1:65:4c:4e:de:4f:ac:7f:74:80:d9:
                    54:44:76:e3:99:59:53:22:9a:71:44:5f:1e:eb:53:
                    d6:24:a4:22:76:44:2b:bd:6d:62:e1:92:0f:98:b3:
                    73:bd:16:09:62:0d:7b:04:a3:3d:1b:54:0e:cd:70:
                    19:70:d7:ce:9a:6d:1f:c2:4a:aa:34:c2:03:89:de:
                    89:8f:a4:a1:18:5e:0b:e8:0a:0a:59:ee:89:f6:65:
                    dc:a4:32:b5:80:ea:fa:e1:f6:af:32:76:fd:6b:eb:
                    d9:1e:99:62:d3:82:2c:a0:45:62:41:7d:5d:10:de:
                    7c:02:2b:fd:79:28:fb:5a:b2:1b:de:c1:c2:02:d3:
                    93:e0:1e:83:91:54:d6:6e:b3:cc:d0:0e:0a:59:bf:
                    01:a1:b6:57:13:cf:d3:da:db:a6:58:ac:42:49:2d:
                    07:76:7a:58:1b:d6:55:f8:4e:37:77:19:ed:55:27:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:0D:73:FC:AD:B4:70:CF:81:3A:9B:A5:5C:36:88:AD:37:7A:C6
            X509v3 Authority Key Identifier:
                keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6f:0a:db:39:a9:e6:a7:5f:06:c0:19:64:e5:70:8b:f0:9b:
         23:85:72:68:db:54:b6:fd:1b:13:35:e0:35:e6:f1:79:49:75:
         84:01:87:60:df:e9:76:f6:7a:d7:e3:be:6b:8e:38:62:d5:17:
         da:96:5d:c0:99:e7:d3:45:e0:ff:95:8b:b9:ec:45:1f:d2:88:
         13:fb:ec:95:fa:02:eb:67:95:16:5b:49:94:32:84:aa:70:b5:
         f8:e5:b5:25:dd:e3:cd:92:41:f6:e5:c6:76:1e:fa:02:e9:54:
         50:27:84:f7:e0:22:27:26:38:8a:9a:16:1a:12:8f:c4:35:8e:
         b7:d1:42:12:40:dd:97:63:93:d0:9d:22:68:c6:f2:b0:a6:fd:
         44:48:0a:c8:4a:29:f8:91:5d:9a:a0:43:5b:88:3f:41:c5:90:
         bf:f8:66:bd:23:b3:ae:76:ad:f6:8e:8d:af:15:32:a2:b8:ba:
         b9:7a:bd:ac:43:7d:5f:83:5e:1a:02:6a:a3:92:13:9c:99:ca:
         ab:4f:70:dd:85:f7:ea:76:bb:e0:69:98:8a:c2:23:13:39:fa:
         42:c3:41:39:2d:0d:65:da:17:8f:46:d4:0e:36:0a:1d:59:42:
         f1:d2:96:76:fd:90:fa:0a:fb:ce:31:f4:7b:a3:f2:a2:cc:45:
         ad:54:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----