Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File:                     yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier:          oFxzdPhKlhV709jRIxBQuwF/FnlHaQGlSL4Zf6c5o00=
Subject key identifier:   CE:9D:A7:6A:C7:B2:B4:56:B3:A1:CC:B0:20:62:F6:A2:18:32:95:B8
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer:       /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial:       01962F3D83BA40984AC152950B10EDB6FB53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
                          2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
                          3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: /yJ2GxB5KwCMfvw/xfqF7M6mdzWpbo8aCv4PHMXjoC0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:83:ba:40:98:4a:c1:52:95:0b:10:ed:b6:fb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=ce9da76ac7b2b456b3a1ccb02062f6a2183295b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:a8:fd:38:87:a4:c8:ef:1d:6c:28:2d:b5:
                    f3:ee:9a:e7:87:3d:ab:0a:f5:60:5e:78:3e:df:e6:
                    27:00:98:6c:75:02:24:a6:ec:8d:c3:74:f6:6a:bb:
                    5a:d2:0d:74:d2:9b:13:09:d3:6f:a3:2c:43:49:78:
                    b5:ef:f3:5c:26:20:2b:2e:04:76:10:51:dc:c5:65:
                    d1:1b:87:fd:64:e3:67:c2:a7:5b:da:4c:58:0c:0e:
                    4a:46:7f:99:05:41:0e:56:cd:e8:92:f4:30:31:ee:
                    80:56:d8:01:3c:b7:e5:76:9c:f3:56:aa:56:e7:2a:
                    c8:cf:83:11:4c:c8:bf:26:a9:d8:c2:db:47:c5:2f:
                    d3:5b:08:a9:f3:db:79:86:26:ca:26:cd:77:56:c8:
                    e7:1e:e5:8e:44:bf:c1:04:c0:7e:28:da:a7:f6:51:
                    1e:3e:fa:a0:db:a7:03:71:64:65:22:0f:bf:95:2e:
                    63:4c:67:26:85:a5:16:ed:8c:44:ca:1b:a7:87:b2:
                    8a:8c:49:47:91:3f:c2:9f:f5:53:78:39:83:ae:be:
                    19:e9:0c:ec:ef:52:32:01:7b:70:c1:a9:92:47:89:
                    82:d9:54:94:c7:3c:3f:0a:5a:9e:c4:f7:c6:dd:69:
                    f2:7d:c2:96:3a:0e:68:1d:55:fd:6f:3c:d1:2f:a5:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9D:A7:6A:C7:B2:B4:56:B3:A1:CC:B0:20:62:F6:A2:18:32:95:B8
            X509v3 Authority Key Identifier:
                keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a3:42:99:46:c0:12:a2:a9:49:fc:4c:3c:7e:e4:67:aa:8f:
         9e:a8:90:dd:1a:f6:5f:97:f3:0d:e7:1e:a2:03:b9:44:12:16:
         b5:13:76:1f:3c:30:03:bc:b0:b4:47:c7:a4:2c:82:aa:8c:97:
         84:42:3b:75:ff:f8:7f:6b:c9:87:d0:9f:1f:7d:d7:b8:fe:76:
         f0:c9:7e:3a:29:0e:a8:87:09:8d:64:9c:ee:6c:08:bc:dd:38:
         8c:a0:c0:fb:4c:f3:11:c7:58:56:75:ea:c7:d5:26:75:4c:a4:
         77:e1:3f:d5:01:59:50:89:82:fe:ca:5a:09:b4:d3:d0:8f:70:
         47:30:b5:ae:c1:c7:8e:3f:bb:e7:11:6e:69:ad:84:96:c2:13:
         72:5d:22:3c:10:53:66:cb:6e:fb:c7:72:fb:ff:98:6c:1e:21:
         0f:b2:f4:15:3e:75:48:ab:44:40:77:40:ce:18:7d:87:92:3d:
         c8:37:49:03:a7:18:21:c1:fa:38:5d:e4:ad:77:37:5d:13:0d:
         94:f4:32:01:21:f3:3a:85:88:61:e4:c4:b2:1e:62:db:37:c4:
         6e:8b:f9:5c:bb:d1:2c:26:06:f3:f0:08:41:f9:ec:ca:2d:d0:
         30:01:43:74:25:a9:03:4a:2e:0c:26:56:7f:8c:7f:b6:c3:04:
         a0:78:b6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----