Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File:                     ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier:          nwCH+Ym1DaMWJUZnuplPgHQXQagS5eRnlEb1m2Q6cwI=
Subject key identifier:   80:FD:40:2E:62:1F:0E:8A:2C:0E:A9:15:60:B1:1F:45:DF:F2:EB:8A
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer:       /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial:       01962F3DA0796DFF588436FA58E860E30FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number:          1450
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=)
                          2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: cWX0XI6Qasw36fuIQQvfnOtzg5iFFAlHMKG7KhtMJvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a0:79:6d:ff:58:84:36:fa:58:e8:60:e3:0f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=80fd402e621f0e8a2c0ea91560b11f45dff2eb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:6e:be:0d:6e:8f:2d:b6:42:3a:41:a5:2e:
                    c3:87:73:2e:87:9f:2c:52:81:d0:35:ee:c6:b4:3b:
                    75:de:f8:96:90:88:3b:f4:3b:68:8b:d9:ac:8c:f6:
                    ca:92:08:d9:a3:26:8c:ee:91:36:5e:88:42:78:10:
                    b0:53:48:08:df:b6:57:ce:03:9e:39:0a:ba:96:6b:
                    f8:c8:f2:51:e4:89:e6:66:8d:e9:0b:68:bd:e0:7e:
                    40:b8:c0:5f:ad:51:ae:7c:90:55:13:55:f5:73:00:
                    ed:db:5b:3c:a3:cd:38:99:05:c5:68:32:79:f7:db:
                    81:96:80:88:f9:0e:b6:09:ff:6a:23:f7:89:eb:d8:
                    93:87:6a:67:d4:0b:6e:36:96:4d:f0:bf:f6:03:d7:
                    5d:67:53:48:a3:27:16:c9:74:20:5e:64:e5:90:82:
                    26:7e:ce:f2:dc:64:56:7a:f5:fb:dc:c1:d8:73:ef:
                    49:cc:33:0a:02:b1:33:0d:2f:43:f0:a4:c9:21:bc:
                    05:30:65:9c:dc:b5:5a:b0:d9:7c:95:5c:c5:0c:d4:
                    26:c8:d1:60:f4:51:3f:79:11:86:1e:ed:cd:e1:8b:
                    7b:32:22:a5:04:4a:e9:26:fa:6f:c3:1a:fd:21:a1:
                    61:4f:5d:5b:73:12:23:97:d1:c0:66:a0:93:54:57:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:40:2E:62:1F:0E:8A:2C:0E:A9:15:60:B1:1F:45:DF:F2:EB:8A
            X509v3 Authority Key Identifier:
                keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3b:28:26:04:38:b0:ab:87:63:c1:bd:b8:43:90:82:5d:ad:
         e6:35:42:c4:16:3a:e6:79:c8:ba:0f:2e:9e:8c:b6:a9:26:5f:
         12:06:6b:50:e5:c7:3c:4a:6c:4c:f8:90:c5:9d:00:77:01:c3:
         e6:a0:c3:7c:05:09:f6:ed:d4:14:da:16:a3:c1:58:66:be:a6:
         50:81:54:2d:35:de:f5:1b:4e:25:37:fe:09:f7:98:14:c3:87:
         82:50:db:2f:bd:0f:6a:50:9b:b1:dc:f0:66:29:d2:32:b7:a8:
         7c:8b:de:7a:f5:3a:17:c6:cc:61:77:e9:8d:19:b3:7d:38:74:
         d7:0e:f4:e7:b3:a3:c0:9e:17:c0:73:fc:65:5f:a3:e0:07:f8:
         6f:e0:f7:4a:5b:c8:d6:40:95:27:e3:55:c8:4f:c5:99:5f:89:
         42:46:53:d5:d0:e4:ec:05:e7:55:de:b1:8d:1c:a7:72:68:14:
         70:2f:3b:6b:a0:fd:2f:46:54:0f:2c:e0:e8:76:22:18:ba:0c:
         8a:fe:97:4d:49:a2:1a:f9:b1:6b:b3:ac:58:5a:8a:b9:74:36:
         72:f7:6b:81:b8:1d:a8:b1:54:02:26:f3:b6:3d:28:7e:da:b0:
         74:6c:a9:9f:9c:95:29:69:e6:da:d6:95:12:13:48:3b:77:2e:
         11:66:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----