Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File:                     yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier:          telZU55GE4YXfREg2WlVgoROjWuFxVitsZ2uLqW43cM=
Subject key identifier:   11:0B:F4:D3:46:C1:5F:FF:F7:00:39:3E:78:C2:C4:9F:CC:19:98:00
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer:       /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial:       01962DF3B1157AC0069427C9EEFF030C9A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: CIsZyO4sYlxS6zxs93wo-C0_kOw.roa (hash: ioxln7YvRG7zaRY74N5lo8NJZPbsX7Lowl9YoqVb2QM=)
                          2: SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa (hash: ItBZnQTRFfvhdaqeW1Co9+W+Nd7SvqU9wrygJFtBPMk=)
                          3: jX1iMEMhj6_WdXTUBq0GlWaaV20.roa (hash: 8QCHzWOckFZKqXALiiMy/qW6wfPGm8V2LBqLIdFNZH8=)
                          4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: NM4xAOBQYzPfHS28qcFco/GTlxrcauffr3+MbAaI5Vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:15:7a:c0:06:94:27:c9:ee:ff:03:0c:9a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=110bf4d346c15ffff700393e78c2c49fcc199800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:45:e6:22:a0:ba:d4:cc:40:51:4f:3e:f2:
                    9a:f1:16:95:bd:fe:f1:4d:0f:09:4d:6e:cb:fd:29:
                    ef:ec:7e:4a:8f:9b:50:f4:6d:f4:47:6d:dc:14:cd:
                    8e:70:f9:33:3d:16:4f:16:da:6c:6a:b8:fa:b7:19:
                    6f:f1:ea:83:0f:df:2f:35:99:36:be:b0:95:27:59:
                    6c:52:02:74:8d:2e:3e:ce:1f:fc:f7:67:08:9a:70:
                    f8:42:14:ff:04:42:4d:f5:c4:1a:0c:15:c7:b3:59:
                    fe:72:fd:d3:b3:fb:75:2c:38:05:cc:a6:5d:0e:4c:
                    ff:c2:08:3f:c9:5e:29:1a:a4:a2:34:40:32:b8:4c:
                    19:2e:ec:a5:11:a4:04:e9:87:cd:16:fe:24:b9:6a:
                    fb:89:73:89:3f:51:49:be:09:47:02:38:5d:4d:7a:
                    ce:96:29:13:05:0e:4a:54:04:c0:e5:1b:08:e5:e8:
                    e4:2e:d2:14:13:c8:5f:5f:71:7f:d4:b9:ce:b5:96:
                    9c:79:19:bf:d1:00:3a:66:be:81:74:5d:99:d5:41:
                    a2:49:7a:44:c3:7e:ba:9c:ed:9d:62:18:04:26:17:
                    4b:9a:62:23:35:5c:aa:74:8e:b7:9e:cf:e5:98:23:
                    8a:6f:70:20:00:40:50:32:7e:b1:3d:75:72:8c:5c:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:F4:D3:46:C1:5F:FF:F7:00:39:3E:78:C2:C4:9F:CC:19:98:00
            X509v3 Authority Key Identifier:
                keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cc:77:2b:cf:6a:4f:4e:2a:ef:c0:c5:2a:6f:fb:84:c2:10:
         2c:7b:b5:0c:7d:b6:f6:6b:d1:21:ed:cf:63:2a:6a:d2:bd:3e:
         70:4d:24:01:21:b8:ee:7c:f1:22:16:d2:72:d2:85:36:39:1d:
         a5:9a:94:34:81:76:3f:bf:49:e5:ad:d7:35:92:ce:0b:34:05:
         d8:bf:aa:a6:35:a6:a7:50:f2:97:43:e8:e3:0a:9e:0c:9d:51:
         41:3a:76:4c:e2:79:36:aa:4b:1a:1a:ea:e9:9d:9c:23:72:74:
         d8:0e:ce:5b:40:9b:9d:94:dd:69:d2:8b:fd:41:98:25:6c:b2:
         25:f3:6a:ed:33:90:cf:76:84:93:b7:4b:db:33:03:10:b9:fa:
         8f:4f:52:8a:71:17:a2:d6:cb:12:41:3f:e4:90:19:0f:c5:38:
         82:52:2e:25:fc:d8:8d:ee:65:5a:aa:c4:63:d4:f8:f4:f3:5b:
         fa:2c:ee:68:ad:c8:f5:82:4d:2b:aa:cf:9f:cd:bf:f2:8a:21:
         9a:b4:f2:85:42:26:8d:ec:fa:0c:83:37:07:63:74:a4:ae:83:
         d8:a4:ea:0d:26:d0:aa:36:8f:80:a3:39:f6:b6:dc:9e:63:6c:
         84:e5:53:68:51:8c:ec:99:5b:a2:1e:7d:55:6c:48:3a:19:6d:
         cb:a3:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----