Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File:                     Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier:          5HDJ2o2wmosYnrg2JI8ixCrYnHUQRVYi60DUf9XxMU8=
Subject key identifier:   59:BA:7A:D2:AF:EE:EC:60:B0:8C:7D:1E:DA:7D:02:64:0C:94:07:7F
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer:       /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial:       01962E2AC83727FEDDCC70D4E706ADE6667F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
                          2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: vc2tsYmp3zH3gD5wYyeEx8nMvoRe0S8N/lyRIaZOZXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:37:27:fe:dd:cc:70:d4:e7:06:ad:e6:66:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=59ba7ad2afeeec60b08c7d1eda7d02640c94077f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:96:fb:51:c1:58:1a:13:34:4f:8b:67:e2:
                    4c:30:b6:cb:93:25:50:c0:90:e1:48:02:27:09:fa:
                    3c:92:e9:c6:7e:75:c9:7b:62:51:56:f9:a4:e4:89:
                    ef:79:d9:29:ea:bc:85:e2:7c:39:11:4b:a6:25:77:
                    b6:8e:2c:88:23:2d:3c:a2:b9:9e:f5:4c:14:16:f7:
                    7e:3f:39:5f:d1:7f:22:88:57:f3:24:39:91:11:9b:
                    ac:49:6d:da:da:61:e9:e4:d5:d3:9c:f2:b5:73:d9:
                    f3:12:60:6c:7f:b9:c3:81:00:3f:1b:17:bc:2f:b3:
                    85:c0:1d:41:db:4f:73:0b:8d:3b:ea:d0:37:51:70:
                    27:a8:55:49:c8:0e:ec:28:3f:3d:e7:41:3d:5e:28:
                    5d:e7:01:37:0c:fb:b9:9c:9d:23:2b:11:c0:ff:d6:
                    b1:20:54:fb:9c:b4:4a:37:5f:bb:14:c4:5e:54:14:
                    e1:4d:fc:b1:57:ac:99:9e:ce:3e:1a:e3:14:5c:05:
                    df:c6:2a:bf:40:27:62:57:06:53:63:c6:23:d5:47:
                    af:09:c4:1a:f8:d2:63:2b:3e:dd:0b:f9:f9:4a:6d:
                    91:79:f5:3e:21:c6:a4:69:c0:2a:77:3f:7c:18:ed:
                    34:5c:80:d8:50:39:e3:74:f3:35:02:fd:1b:b2:bf:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:7A:D2:AF:EE:EC:60:B0:8C:7D:1E:DA:7D:02:64:0C:94:07:7F
            X509v3 Authority Key Identifier:
                keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:29:af:6e:e1:d7:45:8d:88:be:bc:1d:de:a7:1e:72:91:94:
         33:f0:cd:80:cf:04:3b:e0:3a:48:76:50:11:8d:82:26:ad:27:
         e9:c9:e1:c5:cf:c4:42:ee:bb:04:d4:4e:20:c1:81:ee:d8:33:
         d8:00:77:98:58:6e:3f:15:fa:15:cc:20:15:4e:38:1d:1b:00:
         ed:fd:c5:fa:7f:6d:f0:50:72:4f:6e:77:0c:0d:68:ba:a0:71:
         a2:0e:04:57:f8:61:f5:6a:f3:65:5e:94:d9:f1:cd:d4:ba:01:
         2d:7e:03:52:25:8a:26:58:c0:6c:af:00:c8:69:62:07:63:3f:
         0e:cb:1a:45:0a:ab:90:84:38:07:67:e4:ec:e5:ef:b2:79:40:
         19:88:65:6d:71:7a:10:10:8f:83:b2:a8:97:a4:5d:9b:0a:5b:
         0c:a9:60:23:cd:8d:5e:3e:d6:3a:a7:80:75:f7:5f:11:3e:8e:
         f3:78:5b:81:8f:22:7f:69:4a:61:10:54:b2:d3:f8:b0:6e:1c:
         dd:ca:5c:53:44:cf:f8:1e:f0:e4:dd:da:46:1b:40:78:8d:78:
         0f:d2:fb:64:ad:c0:a4:48:55:5a:3f:e3:23:83:57:a8:95:9f:
         54:64:e8:fe:46:95:08:fa:f6:8d:e3:c2:a2:b6:f2:51:cd:84:
         4c:ba:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----