Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File:                     YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier:          HB2mMaNtDeeIlyCKNTlGtw1+wyOYaycXft/aEJ3zqbs=
Subject key identifier:   FF:04:C4:EC:C9:18:24:83:81:E7:87:5E:E7:79:77:D8:FA:FE:DC:9D
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer:       /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial:       01962F068BA9C5893079807FBCE1F14739E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
                          2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
                          3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: +M36USO7OmubX68/ze2cIdJcwk3j4qEtli6jaOTpp5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:a9:c5:89:30:79:80:7f:bc:e1:f1:47:39:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=ff04c4ecc918248381e7875ee77977d8fafedc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:3c:a0:6e:26:43:ce:e7:9d:02:e3:26:7b:
                    f8:62:f4:0b:f1:d9:77:d8:a4:1b:32:50:62:2e:44:
                    d9:64:c8:c4:57:8f:54:0d:04:bc:23:43:1d:84:3a:
                    59:8a:b8:03:2f:52:02:66:4a:6d:6d:bd:80:b8:20:
                    fd:f8:0d:c2:1c:9d:ad:a0:fe:5c:74:5c:9d:f0:32:
                    d2:67:67:f6:dd:e1:3e:c5:c5:09:51:25:c2:09:65:
                    39:70:21:94:5a:d4:13:c5:ac:49:57:12:5b:67:5d:
                    17:a8:a9:92:ab:6e:ac:0f:ec:f4:6c:bb:b9:e9:10:
                    02:7c:d0:c8:13:1e:91:ef:50:20:40:29:72:41:c5:
                    ed:13:49:1b:18:07:52:5e:ef:cf:54:f2:58:2f:a5:
                    6e:f6:57:47:fd:e5:5e:d7:3e:79:75:ab:aa:ce:45:
                    26:84:cc:b4:63:2f:e4:6d:d9:5e:fa:67:d1:7c:fe:
                    73:61:5d:de:04:da:56:54:a2:04:d6:e2:45:b8:a3:
                    f9:27:a8:b6:ef:e1:16:a4:f9:c2:b4:e3:99:29:44:
                    69:8d:80:b9:95:e3:72:0d:c3:25:4e:13:24:d7:65:
                    ec:4b:46:db:fc:f0:5f:48:13:74:4c:db:de:08:78:
                    11:f3:8c:c2:45:15:cb:31:41:09:40:e4:aa:18:ef:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:04:C4:EC:C9:18:24:83:81:E7:87:5E:E7:79:77:D8:FA:FE:DC:9D
            X509v3 Authority Key Identifier:
                keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:10:0a:f7:5c:8f:33:5d:29:69:94:3d:23:f5:c3:83:14:
         b3:a3:ce:44:7b:9d:32:11:21:bf:f7:ff:44:88:46:57:1c:72:
         5f:b1:d5:8b:7b:9f:d4:f5:e1:56:29:7f:14:79:52:2f:2c:00:
         3b:21:7e:e5:a2:62:3d:e1:5f:c4:05:81:99:56:28:eb:e7:79:
         a0:32:75:f2:8e:68:13:f9:3b:7c:de:09:37:1b:43:cb:70:56:
         8f:e2:35:b1:e8:3d:4c:20:e1:c8:ad:80:4a:2e:31:2f:01:a4:
         f3:fe:7c:d4:65:ad:df:11:8a:fa:1e:5a:25:a6:c5:f6:03:97:
         e1:82:c8:a4:57:48:be:41:d0:47:16:32:bd:4e:31:fa:c5:c8:
         e6:0b:2a:5f:9e:1a:4c:4a:e8:e3:c5:c7:6c:d3:01:64:3e:ca:
         aa:3f:10:a6:04:46:85:09:3e:ba:93:17:73:f3:a8:a1:1a:49:
         a2:1c:c3:61:4b:68:8e:27:3b:c1:82:63:8a:d1:9d:d6:0a:17:
         b2:46:15:89:0e:45:93:7e:6d:f2:8a:b7:95:b9:f7:46:3f:c7:
         41:18:fd:78:b4:b0:c9:cf:ad:5d:a4:ee:df:3a:07:b0:b4:25:
         b4:ba:f6:0a:54:ee:23:8b:7b:08:38:16:c1:15:23:61:30:b2:
         3b:78:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----