Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File:                     Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier:          DT/gl0EUWyzP4/CS7a3/6YhBmniqDbYYFhVBmGQagCs=
Subject key identifier:   7F:FC:60:A2:2F:F4:A5:3F:82:A7:4D:AA:4E:9D:87:B7:36:40:D4:81
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer:       /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial:       01962E2B2BDCB9EFDF22AFE407E56D90330C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number:          1238
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
                          2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
                          3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: lEOhc/9kOthONc44kpHEuLH5LUoOFYeCF5x7SEKwbIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:dc:b9:ef:df:22:af:e4:07:e5:6d:90:33:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=7ffc60a22ff4a53f82a74daa4e9d87b73640d481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:d9:d0:c0:f4:78:d8:4f:40:71:14:fd:8d:
                    e9:0d:e1:4c:4d:cf:db:3a:ce:f4:76:08:82:d3:24:
                    72:f8:08:a6:10:83:d7:8b:26:6e:81:24:58:55:53:
                    c6:2e:ce:7b:cb:8e:79:fd:e9:8f:14:55:23:79:69:
                    ed:63:dd:19:07:11:48:2c:09:e0:19:fa:33:42:69:
                    63:1d:89:ce:ab:72:88:1f:82:5f:21:b3:d5:e5:73:
                    e5:bc:cf:23:39:c8:4d:bc:c2:ad:73:3b:8c:af:ed:
                    93:94:ab:a8:0b:aa:c1:ca:3c:92:2f:82:5a:bd:07:
                    14:00:14:2d:6c:c6:0d:17:c8:16:47:82:4d:88:31:
                    7e:ff:9c:62:81:80:18:74:53:62:73:b2:19:80:1a:
                    0f:16:ef:cd:51:88:0e:28:df:51:87:db:e4:ba:a5:
                    95:40:05:ae:9b:2d:e9:c6:30:91:7d:7e:5d:c7:e7:
                    e7:a8:8f:fc:0a:7c:d9:c9:45:32:fd:cd:8b:42:be:
                    fb:1a:76:c5:81:9e:d3:fb:8c:92:70:a7:57:48:30:
                    d2:10:ef:de:98:f4:5a:76:ef:89:0b:7d:82:0a:40:
                    81:73:ba:21:ab:69:d5:8f:a6:2c:da:11:18:a3:6f:
                    63:bf:f2:2e:81:58:cf:ba:cf:0d:ba:7d:66:8c:1e:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FC:60:A2:2F:F4:A5:3F:82:A7:4D:AA:4E:9D:87:B7:36:40:D4:81
            X509v3 Authority Key Identifier:
                keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:80:0e:80:b1:88:83:fd:03:78:50:2f:ef:28:16:eb:21:18:
         4e:4f:2a:51:88:2f:e7:43:c8:bd:a2:21:32:97:57:03:16:4e:
         6b:d4:bc:a5:33:03:13:61:55:35:3e:c8:12:0e:db:88:c5:c1:
         be:b2:7a:aa:26:48:17:e9:5d:39:1f:aa:85:3a:d7:e5:70:d5:
         86:89:94:94:2b:13:65:fe:66:15:72:fd:0e:9a:ae:fb:66:1e:
         93:ab:4b:cf:fb:5d:89:60:19:af:62:cd:f8:ce:4c:e6:20:09:
         58:6a:6a:2f:4d:94:e3:fe:01:82:b4:ab:36:f9:c5:42:a0:fd:
         44:22:80:9a:21:6a:51:0f:e3:50:17:48:78:58:e2:34:19:55:
         0b:24:8e:7a:8b:49:6d:8e:03:88:64:1e:03:1f:a3:4a:e5:96:
         ef:c1:b6:b6:77:58:d0:ce:84:89:a2:40:2f:29:9d:56:28:c4:
         d6:03:24:f1:72:cc:ec:d7:8d:10:58:88:ec:35:6f:35:3c:47:
         7b:a9:ce:1e:bf:2d:0b:58:4e:db:d4:f5:ab:4e:bf:5e:b5:6d:
         d9:24:d7:bb:01:8b:5e:e7:31:77:33:3d:15:95:f8:b1:e1:06:
         0b:f4:67:78:fe:92:e7:cc:c8:35:73:c6:64:e5:19:bf:9b:59:
         6b:2f:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----