Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File:                     yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier:          py+yJ9Itxup4ou9JplLrVajyA0+ggKne+jVd5iC9VZw=
Subject key identifier:   F1:15:24:94:9A:17:54:A4:8D:69:25:86:65:86:D7:EC:7E:B6:DD:D2
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer:       /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial:       01962ECF88E53BA39A980F96977B9C2E78CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number:          0B2D
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
                          2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: fg04eyrsnUaIEUzL8mNy2HuN73SUTvusEIh3K7UQzvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:88:e5:3b:a3:9a:98:0f:96:97:7b:9c:2e:78:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=f11524949a1754a48d6925866586d7ec7eb6ddd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:9f:0d:47:80:05:61:88:12:61:c3:67:42:
                    47:25:0f:c0:8b:46:0d:7b:d4:bd:8f:98:02:4d:9b:
                    b7:5b:9d:de:d6:11:28:ff:55:e4:8a:81:2c:ea:fa:
                    4e:5a:4d:93:f8:da:f9:0c:d7:57:4a:ac:99:a5:f3:
                    61:1a:1d:a3:39:7c:7e:55:6a:fc:60:01:ee:c2:b4:
                    42:2a:e8:06:46:4c:ed:5a:99:77:47:4e:7e:7c:f4:
                    fc:e0:c4:7c:92:86:fa:0f:63:bc:f3:db:b7:b4:15:
                    31:36:d0:40:46:0a:82:e8:6e:8a:6f:53:aa:6d:05:
                    ee:7a:12:4c:e2:12:f4:99:87:c5:35:39:80:5a:a0:
                    d9:20:c0:17:cf:51:d6:be:f1:91:07:e3:ae:ca:72:
                    43:42:65:48:39:80:b5:6e:9e:70:51:f9:dc:20:46:
                    ce:1a:a1:cd:52:99:44:fd:2b:10:b6:47:12:bb:77:
                    4c:57:16:07:9f:d2:ac:88:a5:9b:2e:4b:2b:aa:19:
                    fc:35:bc:b3:16:e4:64:12:63:9f:b0:6a:ac:7f:ef:
                    04:d8:d0:6a:d9:8a:10:37:50:ff:0b:d0:59:58:6e:
                    ae:49:34:ca:7b:d5:f4:56:b7:e9:42:55:5c:29:5b:
                    6f:87:6d:c5:48:f5:60:d8:fd:8c:bc:7c:c3:9e:4b:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:24:94:9A:17:54:A4:8D:69:25:86:65:86:D7:EC:7E:B6:DD:D2
            X509v3 Authority Key Identifier:
                keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e0:e9:09:79:b4:14:a9:e3:f9:64:9f:64:ca:a0:49:78:07:
         b8:ae:18:9c:e3:c9:24:17:1e:02:42:93:79:cc:62:aa:5c:0a:
         8d:68:c4:fe:89:07:73:20:fc:90:a7:e6:a1:0e:45:b6:d9:fa:
         cd:39:86:eb:b9:1b:ea:c9:26:2d:03:fd:5f:e0:42:c6:ca:8e:
         be:b0:28:f5:47:d7:90:03:29:78:12:58:56:68:d1:c0:1d:de:
         2d:f5:e1:d0:91:34:09:c3:8e:a6:14:0a:19:7d:d1:72:70:b7:
         5b:16:8b:32:df:dc:e1:00:c5:a5:cf:3c:da:bd:24:0c:d3:2e:
         2c:e6:6c:ba:8d:2e:0e:63:30:df:6f:ef:49:22:c1:c6:83:ad:
         13:d0:e2:80:2b:c2:dd:dc:54:d6:38:19:63:7b:00:ba:e1:76:
         f4:a0:c9:26:85:c3:dd:a8:19:ec:1e:f6:07:7c:9e:d8:9f:74:
         39:ee:83:d5:47:8b:ef:a7:a1:1c:77:cb:50:cc:1b:72:8b:1b:
         17:7f:cd:5e:21:f1:10:71:5e:80:e6:d5:7c:dc:f9:b7:7d:27:
         f6:60:78:eb:2b:32:43:bf:bb:3a:1b:b1:d3:40:a8:15:e3:f2:
         7f:bd:e9:ce:06:6f:a4:17:f6:32:78:44:97:85:fd:98:4e:80:
         6f:36:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----