Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File:                     ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier:          0HXw+BcogN4AtNO3TzUukF3a0iSTBQqQRuKxIUxpD+s=
Subject key identifier:   D8:B8:6C:1B:43:59:B4:7C:91:0E:77:21:11:71:00:72:D4:1F:22:79
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer:       /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial:       01962E9927EDF01EA5CB147152165D901799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: xfN+779r7l8aP7rVj5T21JXzr3O/TQmDT1ircjCVkto=)
                          2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:27:ed:f0:1e:a5:cb:14:71:52:16:5d:90:17:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=d8b86c1b4359b47c910e772111710072d41f2279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:ca:f3:30:28:e2:c2:dd:f4:37:ae:20:d0:
                    16:54:fe:7b:eb:29:b4:4a:88:2c:6d:0e:d0:6d:38:
                    54:a4:28:26:6a:8d:12:a7:58:b7:5c:78:e4:cd:96:
                    bc:1e:ed:8b:82:8f:e2:84:5a:16:cc:62:ff:33:78:
                    05:a8:d3:ca:36:60:1a:16:c3:d3:06:7c:2c:cd:0d:
                    b3:d8:15:03:02:7c:e8:71:5d:9f:0b:0a:ae:51:f9:
                    89:7d:d8:30:41:6b:e6:66:8c:a2:fd:c2:95:c8:51:
                    9f:9f:73:e7:61:82:56:ff:ea:6f:15:e7:ef:60:bf:
                    ea:2d:36:68:b2:85:7e:9e:39:94:39:ef:95:f3:87:
                    e5:25:12:4f:db:63:78:55:86:a6:a8:37:f2:6c:be:
                    4a:14:f4:63:c9:1b:5b:f5:89:28:54:b6:90:0f:37:
                    31:99:3c:47:d0:bb:36:77:4a:bd:68:d1:6a:e1:a5:
                    66:0b:c6:e7:b2:ac:d2:a6:5c:73:c4:15:f3:4e:2e:
                    14:bd:01:46:e4:b3:bd:c9:33:66:ed:bd:1e:16:68:
                    be:ba:e4:08:6c:05:9f:33:7b:ad:67:ba:57:65:c4:
                    7f:44:a5:77:08:9f:f7:7a:a4:ca:3a:51:98:0e:ff:
                    dc:78:4f:c5:19:5a:02:6d:53:6b:46:c7:cf:f3:06:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:6C:1B:43:59:B4:7C:91:0E:77:21:11:71:00:72:D4:1F:22:79
            X509v3 Authority Key Identifier:
                keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:d5:cc:f9:5b:8b:6c:54:f6:b0:cf:3d:4c:80:cb:f7:22:
         d7:4d:6c:5c:ed:66:4f:a6:cf:71:d4:cb:e3:26:c2:d7:c9:68:
         ff:40:50:fc:c9:bd:fd:1a:a2:72:8a:de:0f:64:2f:8c:95:63:
         7f:40:f9:bf:6a:52:04:17:32:69:5a:51:18:f5:b8:f6:76:c7:
         c6:53:d1:d4:31:0b:6b:93:81:d5:6b:fc:9b:32:9b:22:80:67:
         73:bb:ed:c8:9f:39:3a:fa:c2:34:b3:93:24:ba:38:be:b3:35:
         f2:bf:89:42:bf:15:d9:ca:46:7b:d9:3b:ef:48:d3:86:4d:9e:
         99:a7:51:3b:e7:21:6e:e6:c5:73:fa:ad:c3:f3:2b:2b:09:18:
         40:ce:eb:40:c8:28:4f:84:d3:e9:c8:c4:75:5f:00:93:6e:18:
         92:7b:ce:39:b8:80:9c:db:e0:3e:84:f1:56:78:c9:52:14:74:
         69:c2:3c:28:6e:49:9b:c1:c8:cf:72:1f:cd:7c:78:95:46:70:
         8c:9b:d2:ee:e9:a3:10:8b:30:f4:c2:ec:18:19:28:43:0e:20:
         29:f2:a6:ef:bc:df:df:e7:99:53:b1:ed:a1:9a:44:ed:4f:fd:
         e1:b7:ea:35:c8:fa:eb:c7:07:c0:f0:d8:f0:ef:e2:94:2c:89:
         07:a7:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----