Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File:                     yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier:          6JSFPNh2NZECYDGfnWMDczc/Nq59SLcn2vo+6MeeN/4=
Subject key identifier:   C0:62:C3:56:CC:77:95:86:7F:62:61:43:B4:4E:A7:EE:C1:B5:D9:7A
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer:       /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial:       01962FAB63D1EC717539629E999D7D9EBDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number:          0566
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=)
                          2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: sr807XYbsHo4hCpiDth/bbE350Jc5bmgRI14Anz5bJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:d1:ec:71:75:39:62:9e:99:9d:7d:9e:bd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=c062c356cc7795867f626143b44ea7eec1b5d97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:88:69:23:50:6f:90:84:74:49:98:5e:8c:
                    c0:ae:53:67:ee:7d:cf:18:7d:3b:b0:8a:98:e4:f7:
                    19:0d:b2:b2:12:a1:a1:a4:f3:e7:ba:f9:d3:cc:e4:
                    58:e5:6d:97:31:05:6c:0e:73:77:4d:a1:54:bf:a9:
                    8e:13:cd:01:55:3e:ec:99:47:a6:ef:e8:61:75:94:
                    87:d8:e0:1a:03:2b:32:ec:62:22:51:9f:55:c9:50:
                    ba:09:b2:9b:a2:56:82:cd:8f:ab:38:1c:d5:b1:ba:
                    f0:b5:46:f5:c0:05:6f:bd:7b:d1:3d:ba:f3:ec:58:
                    f5:c4:ca:04:da:ba:3c:d9:4c:54:68:ae:5f:0c:88:
                    3f:f1:2a:25:17:cb:b0:e4:2f:c6:7b:05:7b:47:20:
                    a2:52:6e:72:f8:6a:86:8f:d6:c1:f5:4c:84:09:d1:
                    81:c8:f1:69:62:b0:63:2a:ec:e9:6d:13:00:b5:c3:
                    fe:ed:94:5d:2c:5a:6b:35:4d:5a:d8:bf:52:59:56:
                    06:66:2e:82:1b:36:cb:26:a2:9e:6d:eb:2e:45:04:
                    d9:48:32:6f:ad:82:de:5c:a3:65:95:0e:e5:fb:d3:
                    d2:37:ad:16:f7:78:9c:de:80:dd:c4:ef:80:32:27:
                    86:90:62:0f:91:21:fc:0e:23:c9:3b:98:67:8c:5c:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:62:C3:56:CC:77:95:86:7F:62:61:43:B4:4E:A7:EE:C1:B5:D9:7A
            X509v3 Authority Key Identifier:
                keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4d:63:50:3b:43:b2:27:ab:e6:64:62:19:fb:50:ec:0c:66:
         42:8e:52:ff:e8:46:15:6e:28:72:2f:75:aa:17:cd:5b:26:34:
         6a:1d:e1:99:84:f7:7e:d8:f3:f6:a8:6e:38:1d:e4:8f:6c:dd:
         70:1c:0b:5a:b8:4c:1e:52:0a:ee:0e:9a:0e:e0:f1:74:00:44:
         71:cd:33:50:59:66:a1:77:3f:f2:6d:06:f3:74:19:7d:69:e8:
         fa:cd:e4:53:0a:28:4e:ba:b2:ae:4e:76:ca:7d:ec:8d:da:c0:
         c6:39:83:f1:aa:93:81:03:04:06:27:88:d6:95:8c:1c:df:dc:
         19:a0:9c:bd:57:0a:2d:0a:a7:59:52:70:4d:3a:91:fe:8f:a0:
         fe:79:3f:b8:78:d2:5b:00:1b:0a:3c:81:93:25:2a:e7:ee:f3:
         00:fe:e6:61:e4:69:38:f5:39:37:47:db:a6:5f:42:f8:22:b7:
         51:d3:74:c6:a1:f0:0c:f2:da:e7:ec:5f:91:e0:3f:f3:ae:cd:
         45:15:89:cf:ba:42:fe:56:72:98:c4:4f:5f:9d:64:91:b2:bb:
         ba:be:5e:5c:ac:8d:90:ce:74:f8:d9:c8:22:ac:a4:88:19:0a:
         72:3c:fb:fc:64:c0:de:3c:e9:78:36:f3:d4:d7:66:43:44:4b:
         05:9a:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----