Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File:                     YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier:          itCwMCCeH+UhHKq6u9QoItzwa3ZsK9syBxb2Yk6uO+E=
Subject key identifier:   AD:7F:93:F4:30:5B:A3:0F:98:E5:F6:10:C3:E7:74:CC:98:AA:70:3B
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer:       /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial:       01962E98B7812850AF92EE922321CD4C15C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number:          08AF
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: audgS9ap1mkhmlA8OPjdiaK8DrUItwPYJPcN2Ygf/Gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b7:81:28:50:af:92:ee:92:23:21:cd:4c:15:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=ad7f93f4305ba30f98e5f610c3e774cc98aa703b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:fa:68:27:3c:68:04:21:f5:e9:78:17:c3:
                    22:e3:23:c6:3c:1b:28:ea:6c:71:94:91:ff:4e:55:
                    66:27:53:7c:5f:e8:34:26:f1:0a:75:65:e7:ed:6e:
                    85:ec:14:75:fd:2e:a1:9a:16:6b:dc:13:63:3a:93:
                    15:83:2e:b6:a9:ed:90:b6:dd:f1:6d:3d:1e:f0:f9:
                    ae:29:ba:b6:fd:1e:13:bf:7f:df:d5:08:bd:fa:ed:
                    3d:3e:59:5b:f0:43:92:94:67:95:36:15:39:30:92:
                    b0:e9:b1:23:71:fd:76:f1:ad:5e:f3:02:95:d1:26:
                    c0:6e:c2:81:4f:8f:db:88:a2:b1:63:ba:b8:58:5a:
                    4e:cc:85:a6:5c:c7:81:87:7b:b5:e4:f3:23:64:d3:
                    c6:7c:48:91:38:00:a5:12:0d:d6:3e:57:83:27:67:
                    d1:c6:f8:4e:f9:8c:59:63:36:fa:e6:23:f7:16:0a:
                    42:2b:51:56:ca:60:c7:1f:86:1a:97:4d:a8:5e:fc:
                    f3:4f:6b:fb:f9:49:36:a4:72:f6:c5:08:72:2d:14:
                    35:b9:0a:c2:24:2c:c6:95:5a:82:a4:d5:2e:42:cd:
                    bd:2a:1d:92:5d:d4:ab:7d:29:06:a7:41:77:9f:9d:
                    cb:29:80:da:48:1c:7f:9d:01:14:26:11:aa:e3:79:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:93:F4:30:5B:A3:0F:98:E5:F6:10:C3:E7:74:CC:98:AA:70:3B
            X509v3 Authority Key Identifier:
                keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:11:e7:cb:b9:84:26:c2:99:94:66:8a:f8:be:55:dd:98:b7:
         cf:a8:f6:0d:c6:75:fe:31:d4:c0:8a:83:dd:a1:c3:35:a7:7a:
         5d:4f:7f:54:cf:9b:22:4c:80:8b:af:4a:42:a9:68:4d:53:5b:
         9e:6c:4b:d5:a2:71:9f:3f:33:19:c9:ea:cf:87:88:5a:64:58:
         77:65:9c:63:36:01:1f:34:d5:de:9b:23:f0:46:f0:67:00:a6:
         a3:d6:4e:ec:cd:c9:5c:38:75:f3:79:30:3f:4b:4e:dc:36:09:
         84:7b:bc:4a:5c:f0:38:fb:af:ce:cd:ff:e4:7f:6f:a4:15:e9:
         8f:94:0d:2d:4d:6c:8e:1f:74:4a:90:c4:77:0b:a7:7d:d2:07:
         97:64:f6:6d:0e:41:2b:2e:24:95:f9:1d:6b:78:b9:3c:d4:9e:
         24:1e:4f:73:90:67:15:7b:48:ad:cf:cc:c5:5f:63:08:5f:ce:
         fb:53:ca:85:d6:cb:89:c6:5e:54:e1:3a:7b:6b:b2:7d:31:2b:
         c3:d8:dd:73:b5:60:8d:c1:e9:15:9e:0f:92:4e:2c:f2:da:01:
         56:b8:5e:7a:fd:17:ad:dd:29:a9:0e:dc:12:0b:56:9a:88:5a:
         59:ee:d8:04:eb:0c:80:72:e8:87:94:ff:bc:0b:0e:11:69:83:
         0f:30:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----