Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File:                     ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier:          UeYbNSS4VYrMPc68GFLym9sYpK7E6l+EDVJPmOBoXt4=
Subject key identifier:   25:34:39:3A:F2:7B:B6:83:8B:3C:99:9D:3A:0E:98:E9:53:97:C3:27
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer:       /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial:       01962E2AEA24EC1CF412DCCB73E7C296F3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number:          14D7
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
                          2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: aRU3CcakSQzy6PSTMlJVotWWRGeOqJqGxAQbN7+fwyY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ea:24:ec:1c:f4:12:dc:cb:73:e7:c2:96:f3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=2534393af27bb6838b3c999d3a0e98e95397c327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f1:2b:35:e8:de:7f:28:d4:bc:c5:94:f4:f6:
                    64:cd:03:91:c7:46:ed:f8:76:c8:9b:61:e2:cb:fd:
                    e5:3f:07:e5:43:73:a8:68:6a:e4:ef:3a:b7:e7:88:
                    13:77:b6:60:fe:a5:63:c9:82:34:3c:69:7c:a3:4f:
                    32:45:ba:0a:0b:4b:f5:19:91:68:f8:b0:0a:7a:40:
                    72:74:3f:a4:05:3b:bf:3f:8e:69:35:74:a5:b4:ac:
                    e8:1c:f2:df:17:30:b1:85:b6:0f:c8:bf:58:63:31:
                    81:e6:0a:55:3e:13:1f:b5:b9:00:fa:9f:6c:d7:9b:
                    bd:91:0d:41:18:a7:9b:84:b1:8c:28:4c:f7:f5:02:
                    00:ba:23:22:e2:96:06:8b:31:20:f4:6b:08:af:84:
                    0d:b6:64:ec:9e:79:8a:0f:1d:d8:b5:98:a5:d1:3f:
                    39:de:d7:af:ce:da:1b:5b:b4:aa:4d:c6:87:7e:33:
                    2c:5f:f3:3c:74:3e:b8:37:ed:65:e4:34:ab:05:c0:
                    c4:55:00:9f:f8:7e:5f:b9:a7:a5:11:b9:32:ac:5f:
                    b9:2a:09:e1:fb:1a:1c:07:70:47:82:ec:8f:66:b5:
                    9b:20:79:bd:39:a0:7c:d2:34:a3:21:f2:44:a7:55:
                    52:ce:99:95:83:88:9b:af:b8:1c:a1:53:5e:15:a7:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:34:39:3A:F2:7B:B6:83:8B:3C:99:9D:3A:0E:98:E9:53:97:C3:27
            X509v3 Authority Key Identifier:
                keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:27:31:e3:05:82:75:e2:b1:f8:5e:82:86:0d:4d:5b:6e:79:
         68:94:56:e3:79:81:90:0b:9d:44:d4:f2:e3:fa:8a:32:17:e3:
         f6:77:43:39:db:d5:3c:f2:68:a2:83:cd:1b:3d:29:62:c3:0a:
         2c:68:6f:77:9b:4b:bc:38:50:64:c3:70:e2:16:4f:bf:fd:ec:
         45:59:70:d4:d0:77:8d:62:e9:48:02:47:c0:98:c8:45:08:3b:
         b2:51:e4:43:3e:1a:26:b8:28:fc:a0:e7:06:0d:35:3d:09:4a:
         a2:d7:1a:62:0e:fd:1f:5f:b1:db:2f:f3:af:8f:0f:04:00:11:
         be:c8:a1:24:eb:41:f4:bc:72:a2:b3:eb:c2:2e:b1:c2:9c:17:
         d2:ca:f5:d8:41:07:60:5e:a4:ef:82:82:db:6e:f8:44:ee:91:
         a8:05:c6:b2:00:ae:82:29:1f:ab:98:d9:42:94:00:60:58:2d:
         76:c3:99:5b:29:40:c5:04:ca:35:26:d8:cf:cc:01:15:b3:a6:
         99:27:30:81:43:58:7c:9d:fb:66:3d:82:87:a0:f0:9c:d4:ca:
         3c:16:6e:90:24:94:8f:6b:cc:84:a6:39:84:b9:59:fe:fd:3c:
         cb:f7:dc:be:8e:6d:ee:7b:b5:97:6a:5a:3a:0a:50:32:05:b2:
         32:96:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----