Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File:                     Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier:          mS11KZeVOMgdsrryhoVcQtZFljZgNIc4TfXQvL26X/M=
Subject key identifier:   24:ED:FB:34:70:6B:DA:9A:60:70:79:51:CB:65:24:22:D9:24:B4:13
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer:       /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial:       01962E2B4521B0DB7B6923A3AF0ED910F9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number:          11EE
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: zyqs7uJmupH9s4DuBt28wXELzciD4pzy6J0eIOXbvyQ=)
                          2: uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa (hash: EwwfvCJkfqVqVmU0gYHOqumHmaTFzwTDUQGR86XAOZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:21:b0:db:7b:69:23:a3:af:0e:d9:10:f9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=24edfb34706bda9a60707951cb652422d924b413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:a4:a5:43:79:87:d2:b9:d5:80:de:0a:5f:
                    c3:50:3c:d9:ab:43:3a:1b:a0:2d:80:90:60:48:3e:
                    82:c9:de:97:97:6d:f5:ca:7e:80:d5:54:42:08:3a:
                    a3:a0:bc:0e:fd:f7:05:b4:eb:1e:b4:18:00:a7:e3:
                    59:fe:f5:c1:d5:82:ce:22:e2:15:30:77:74:d0:8f:
                    e7:c0:bf:93:2d:9c:ef:cd:e2:d8:95:e3:89:e5:9e:
                    5a:71:76:b1:c3:21:cb:2a:d0:ad:1d:bf:8f:ae:4a:
                    d8:5d:4b:90:84:ca:73:c9:be:07:ae:38:f4:97:73:
                    ad:8d:21:f6:0c:38:45:a5:3b:02:bc:60:25:ff:d8:
                    5e:6e:8b:35:8a:bb:a2:c6:9d:9c:6b:e9:45:6e:2d:
                    45:77:7a:0f:9a:8d:6c:4a:be:52:39:81:b0:38:6c:
                    c1:e9:8c:09:61:ea:d2:ca:d9:19:02:9e:fa:9d:23:
                    44:bd:34:5c:04:83:60:3c:51:ac:73:3c:f4:35:45:
                    c0:07:fa:35:a0:1e:2a:b4:ef:c4:b1:31:76:d8:23:
                    35:29:26:5a:82:6e:f1:e3:ba:bf:eb:60:2b:2b:d5:
                    19:8d:bd:26:e5:fc:f5:cb:65:db:c0:58:41:bc:4a:
                    ca:6a:91:ba:9b:2e:a0:0a:fa:05:5e:da:89:ca:53:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:ED:FB:34:70:6B:DA:9A:60:70:79:51:CB:65:24:22:D9:24:B4:13
            X509v3 Authority Key Identifier:
                keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e4:36:1d:1f:0d:b9:1c:f9:3e:ba:e4:91:f7:1f:43:37:6f:
         7e:aa:b0:57:27:cf:55:09:cd:65:5c:9b:e0:51:92:3a:6b:27:
         cc:f4:4d:2e:a3:aa:98:31:d3:ea:d9:e9:3c:d2:64:5b:52:51:
         07:8c:bf:18:92:26:01:10:de:8f:de:4f:c9:36:68:21:7e:49:
         69:3b:20:be:f2:ad:13:a5:57:fa:c4:70:c8:78:68:e8:79:3e:
         a0:1c:4b:d8:35:eb:2c:96:f3:a6:9b:16:b9:37:e1:19:df:55:
         59:ad:a3:87:47:09:93:f2:2d:60:a6:1f:28:e4:53:14:a4:9b:
         c7:b3:1d:a6:45:be:41:65:91:39:51:73:79:7a:d6:54:d9:76:
         ae:6f:e2:65:8a:68:ce:c9:e8:5c:21:10:f7:10:56:39:e5:4e:
         eb:a2:81:16:35:de:24:dd:67:9b:a9:d2:b2:20:7b:4d:4b:e9:
         56:19:aa:3c:b1:f6:dc:41:61:9e:79:16:0f:69:51:15:fc:a1:
         ee:f4:86:c5:82:a1:e3:dd:85:2c:c0:c0:a6:6d:67:ff:be:20:
         2e:b0:b3:14:66:22:20:26:1c:9b:a2:41:f6:65:11:ac:ab:79:
         ea:ec:79:37:ba:9f:c3:d0:22:1f:1e:59:54:bf:6f:4b:d5:35:
         81:20:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----