Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File:                     CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier:          /+LZhenlWsZ0Hp2SCMmwP99T117t581uBPf0iugdPpg=
Subject key identifier:   F9:87:40:05:66:93:C3:76:8A:A3:00:97:70:C0:E9:0E:39:6F:6B:08
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer:       /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial:       01962E986585485CCD08E8DB3D1E7E348AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number:          0BB5
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: 7C5SuCC2IZkxP/IZBw5Xq5g+68arf0XZUSb1EchecdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:65:85:48:5c:cd:08:e8:db:3d:1e:7e:34:8a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=f98740056693c3768aa3009770c0e90e396f6b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:61:8d:a6:de:d3:b3:fc:46:62:87:b6:ab:
                    f8:9e:dd:94:84:e9:b4:7b:97:fd:d0:09:9e:05:0b:
                    c9:00:df:ca:07:ce:1e:32:1f:de:06:91:12:da:de:
                    b1:f3:1b:43:35:70:10:21:44:39:ea:04:26:7e:6c:
                    f2:9a:f5:84:3f:f4:b3:3d:39:8b:2c:30:85:52:93:
                    aa:47:3a:2f:d8:0a:00:d6:9a:09:bd:ed:4e:e2:94:
                    5f:1a:b0:c3:d0:8f:7a:ac:62:42:f4:98:43:88:70:
                    bb:43:2c:ff:e8:a3:5a:ac:0e:45:81:52:a0:e8:fd:
                    26:00:83:69:35:7c:48:9a:23:b2:10:94:e3:8a:63:
                    fd:76:8f:ab:bc:b4:56:be:70:09:f5:af:d9:14:d0:
                    20:48:9e:33:2b:9d:fd:68:fe:eb:6c:b1:e4:6d:55:
                    ad:30:cc:b8:11:12:21:c6:3c:88:c4:c8:e2:5c:6a:
                    c8:8b:36:4a:41:2f:b7:29:17:eb:6c:32:13:bb:e6:
                    01:50:6e:aa:d6:58:36:13:2b:42:1a:c7:6f:fd:a9:
                    c0:fe:21:58:c1:98:7f:9b:13:55:e2:74:11:f7:50:
                    34:c5:40:dc:4a:8f:3f:21:dc:d9:77:1c:69:9c:ce:
                    9e:a2:db:d5:f7:9a:46:58:66:e3:18:6b:50:35:82:
                    13:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:87:40:05:66:93:C3:76:8A:A3:00:97:70:C0:E9:0E:39:6F:6B:08
            X509v3 Authority Key Identifier:
                keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:96:5e:09:c0:10:1a:36:64:b7:a1:53:ff:c9:f2:6e:63:
         5d:0c:6b:f3:f0:af:24:a4:9f:05:ef:7f:b4:ae:07:06:7d:39:
         13:0b:c6:c0:a0:60:be:c4:a1:35:e4:b1:58:e5:15:2e:70:47:
         44:86:77:e1:9e:68:f8:52:f1:ff:f8:7f:64:3f:66:e2:c2:ab:
         5d:d6:b2:03:6e:ff:d2:b4:1e:f3:1b:95:49:99:c0:64:64:07:
         4a:e1:8c:ca:2f:b6:76:4a:7f:3a:c8:b2:7c:69:34:97:18:7d:
         1b:e8:45:63:18:0c:70:b4:ef:87:e9:e0:4e:f8:a1:90:ef:45:
         0d:75:11:7a:84:a4:ee:5c:98:b0:16:f2:ed:87:df:06:dd:19:
         4b:44:55:98:45:34:d3:f2:39:ff:f6:ba:3f:64:3c:96:d7:7e:
         ab:02:9a:2b:71:e7:98:27:bc:5a:44:92:2e:12:89:3b:b2:b1:
         d3:a9:b1:6e:9f:d6:68:5c:3d:92:46:3f:46:1e:d0:99:84:25:
         4e:5a:ee:0a:d6:43:2d:78:ea:95:ff:9e:99:90:f0:46:61:b0:
         87:da:39:8b:5c:06:e3:36:a8:3f:46:a5:42:d0:de:00:12:d9:
         c7:fe:d0:14:0e:2a:88:e4:7d:df:a8:7f:d8:29:1b:50:8f:b9:
         b0:54:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----