Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File:                     YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier:          1bY01uI8Zlx4ulEuDuIGDoqves7CXGk4vqXeBXlDwTg=
Subject key identifier:   E5:1F:2B:D7:19:02:2C:63:98:D5:FB:65:FC:AE:66:F4:15:82:5B:2B
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer:       /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial:       01962F3DD6DCB6D3A94AE8D4FF5802C3CC29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
                          2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: Z+WRaTEJZnNxztMKZwaqFlQKy8qlsk37J8A4sFHnHVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d6:dc:b6:d3:a9:4a:e8:d4:ff:58:02:c3:cc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=e51f2bd719022c6398d5fb65fcae66f415825b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:0a:b9:a6:b0:10:84:91:02:aa:77:3f:a9:
                    04:30:d5:ff:5e:97:da:ce:4a:dd:bf:86:23:45:61:
                    e5:18:9a:86:9e:ad:c6:a0:8d:eb:34:00:c4:d6:71:
                    2c:83:ef:c6:a5:52:e7:dc:cc:0e:f1:f7:58:30:ef:
                    e6:1e:69:53:51:10:62:4b:69:6b:80:a9:7f:42:f6:
                    2b:a0:83:4c:77:f0:3e:66:25:08:34:90:0d:02:16:
                    3f:5d:34:3c:a5:e7:ac:ec:96:03:b3:02:3f:ce:46:
                    8a:d1:78:c2:f7:9f:5d:c3:62:73:fe:d0:ad:d4:cb:
                    f6:9d:75:77:9b:2a:2c:09:47:e7:9c:b6:60:ff:26:
                    26:4e:e2:29:4d:c7:20:18:79:fd:c6:bf:af:bd:1e:
                    9b:23:9a:3e:8e:4e:fa:27:78:d4:ae:b6:4b:bb:cf:
                    6c:49:90:55:45:fe:9b:cd:ca:82:10:8d:0f:7f:e8:
                    de:87:87:47:4d:80:81:78:4e:9a:64:5a:16:f9:13:
                    ad:70:35:4c:46:c3:eb:3c:b6:6e:b7:0c:f6:69:5a:
                    6e:80:59:f3:fe:44:bb:42:d4:a5:44:d2:2c:0d:d3:
                    6a:b1:70:ae:5b:29:b9:99:79:e3:55:eb:12:c0:39:
                    c4:6c:38:72:26:df:42:19:f4:7d:8f:df:5f:77:0c:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:2B:D7:19:02:2C:63:98:D5:FB:65:FC:AE:66:F4:15:82:5B:2B
            X509v3 Authority Key Identifier:
                keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:eb:63:7d:c3:40:47:49:6c:ba:42:19:fb:f8:63:24:5b:39:
         8d:15:00:f9:40:bc:08:76:8b:8a:da:bf:c7:4a:ca:29:7b:b6:
         87:ef:b7:9f:5d:0a:ed:5c:6e:7c:55:5e:7c:d0:7b:ac:e1:68:
         46:f5:1b:c7:76:5c:05:52:4b:e7:2b:44:52:4f:bd:c0:e3:48:
         b9:ea:63:e1:86:5e:eb:13:82:86:b9:80:2d:6b:78:1d:5e:67:
         d8:5b:85:cb:c7:b8:1a:7c:7f:ca:a0:11:a8:24:3a:c0:09:3d:
         7f:ef:9e:92:eb:02:69:de:3d:c7:82:08:a2:ec:68:b4:9e:e7:
         a8:73:44:ee:a1:a5:da:ed:f7:7e:3b:22:1a:51:74:80:92:c8:
         d4:90:3d:b9:0c:37:28:07:e9:d0:b8:90:dd:e9:a2:99:94:7b:
         23:1f:6c:ba:18:1b:0c:2e:ea:09:b7:f8:5d:20:82:c3:18:bc:
         87:df:e5:10:2c:c9:f3:f5:41:46:49:4a:d9:24:88:54:eb:44:
         4f:d8:68:42:21:7c:cd:9b:37:6b:8d:73:c5:78:16:ab:31:8a:
         3d:fc:9c:9e:8b:49:50:64:cc:1e:38:3f:76:6c:36:f3:ae:a4:
         df:10:0d:1a:28:9f:f7:f2:dc:ec:20:0a:2b:50:36:63:9a:3b:
         77:ae:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----