Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          gUelgfGBjsg+jGy4UqBhB2qMS+fSnpW3Byqjz50t64A=
Subject key identifier:   D0:AF:2D:4C:F1:6B:C2:25:54:F6:AB:4E:FB:74:22:89:08:AE:68:2E
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       01962F06B39DD59A4928152530403F014EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: OcynBSVoAzEHDbG7xqJ4TAn0oFSKwkeeQYrshJlrl7s=)
                          2: zuoKD31gcVRQUR2NG9ebmxdQlUY.roa (hash: 6Yq+wArquNdBN7wmHKv+2fAgO8zmiD+Zj0gA9mY9jzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b3:9d:d5:9a:49:28:15:25:30:40:3f:01:4e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=d0af2d4cf16bc22554f6ab4efb74228908ae682e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:52:a8:19:d8:32:66:72:62:ba:a4:1a:78:
                    91:01:b6:02:3b:47:25:0a:57:1f:2a:c1:48:2d:e3:
                    ab:c2:d3:ca:a8:35:d0:23:83:f1:32:74:3a:c2:5e:
                    aa:b4:76:4e:2f:d4:86:28:cf:97:4a:44:19:1c:0f:
                    67:30:77:2b:1a:07:11:0e:4c:71:82:df:40:b7:c9:
                    1d:a4:75:02:a9:08:8b:c3:45:df:f3:09:eb:a1:4d:
                    e1:8f:1f:3a:d6:bb:1d:3f:d8:3c:e1:a6:58:d3:eb:
                    a9:3b:33:7d:5d:ee:d3:16:46:fc:a6:6b:27:ba:4f:
                    25:9b:4a:0d:7f:3d:0d:d2:60:c2:94:20:f8:c7:41:
                    0f:07:fe:5f:9e:c5:9e:69:27:58:c7:48:1d:4c:fc:
                    bf:b8:a6:42:1d:a0:68:eb:84:1a:da:a0:e7:fa:6d:
                    c8:17:f4:6c:25:5d:12:97:1c:ff:b9:2d:e5:42:12:
                    3d:fd:53:7f:88:56:8d:c4:eb:43:ac:0c:4a:31:05:
                    83:4e:cb:72:88:bb:2d:1f:43:01:00:ce:cc:7d:f8:
                    62:9a:2e:9e:da:e7:d0:89:3b:cc:c5:bb:5a:d5:52:
                    ce:ba:70:bd:1d:10:52:fe:35:35:94:66:5d:8a:e1:
                    32:3f:fe:6b:f8:4a:a8:e1:b1:a7:60:93:49:d7:9c:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AF:2D:4C:F1:6B:C2:25:54:F6:AB:4E:FB:74:22:89:08:AE:68:2E
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:26:18:e3:36:42:e4:da:48:76:b9:5d:8f:17:4b:e3:98:2a:
         5e:09:41:b3:79:0e:8a:db:35:8b:66:6b:1d:dd:c9:5e:09:10:
         58:9a:2b:da:4a:02:6e:65:4c:6f:13:e2:c1:71:10:56:70:80:
         f2:cb:77:45:ab:09:99:0e:47:e6:6a:6d:79:61:e4:d8:55:c4:
         14:64:13:f1:a4:23:08:99:2c:91:00:17:ed:00:09:4f:1e:0a:
         be:a7:86:ac:44:e7:d4:2a:01:ee:f6:a7:b2:04:22:2f:27:75:
         27:74:6a:00:2b:db:09:2b:ad:b0:76:c9:cc:dc:3f:b1:86:15:
         e2:1f:09:22:fc:ab:4a:7c:1a:5a:b1:45:de:ad:30:72:88:70:
         bd:bf:92:c0:73:d1:1e:3d:8e:5b:ad:0f:0f:da:d5:65:ec:96:
         78:02:75:4d:aa:0a:f9:b9:5d:c2:a7:4f:61:49:9b:87:d7:5e:
         d9:e3:68:9c:2a:9b:82:6c:d5:42:ac:80:5a:fb:b9:a8:b4:5a:
         23:45:8e:20:1c:54:ea:78:e5:72:8a:e2:ed:92:dd:59:1c:fa:
         e7:3e:b5:d8:92:fe:d7:91:79:7b:e7:48:8a:2b:ce:a0:2a:33:
         99:68:29:a6:f4:16:3b:08:6e:20:bd:13:d6:b0:ec:4e:16:47:
         49:8a:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----