Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File:                     yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier:          okQAtonjPylH7hiTlCnUyujzVm5ozJbBl0aRWiwzt+E=
Subject key identifier:   B0:C5:74:4D:FE:D0:61:2F:5C:D2:EC:3F:B6:E2:30:62:6F:96:8E:13
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer:       /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial:       01962DF3C898469F7DC06FE442263953BA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number:          0C1A
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: Notf8xfdCB98W17uF8DyEZXaKD4.roa (hash: Php02ygExlsiQ8rFpeIHuq+3hV7Ago1mfAxcB+vPXnY=)
                          2: e2ra7SZuMEl8qkkfBrD8bYWazhM.roa (hash: /u1YY2ApTixT8z+lVFj8LhVszE9MVXTJO+7jjq0U+4g=)
                          3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: ZT76LYFLn6MKwsgQFF8J6HikJN1UDypH61OZVCzS+Oc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c8:98:46:9f:7d:c0:6f:e4:42:26:39:53:ba:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=b0c5744dfed0612f5cd2ec3fb6e230626f968e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:2c:23:13:99:d5:2e:f4:11:b7:0f:61:eb:
                    de:45:ea:a6:bf:07:d3:f5:3f:27:c4:5e:97:cf:6b:
                    c3:7b:93:4c:ba:ce:fe:04:71:e8:70:86:1b:b2:e5:
                    a4:3e:ee:f8:28:30:67:3d:74:6d:32:e0:ee:50:db:
                    a4:62:fa:1f:fd:31:83:ea:8f:79:01:6d:0d:37:92:
                    ca:32:8c:25:32:d0:00:8f:c9:e5:b9:61:5d:3f:da:
                    39:59:7f:19:ec:f0:a6:1a:f4:0a:81:b4:bb:7d:59:
                    2d:bf:65:6b:fc:5c:41:c2:e3:b1:f2:ec:d1:c2:d5:
                    e8:32:67:23:26:6c:ea:99:35:90:e4:b9:6d:45:26:
                    31:87:f9:93:fb:cd:be:70:70:2c:78:08:ca:33:61:
                    d6:76:49:b2:02:e6:f9:aa:35:98:30:ee:e0:31:1e:
                    29:29:8c:d5:a1:f1:ee:5a:48:ee:0b:c8:ce:c2:29:
                    16:8d:cc:6b:f0:f5:c2:6d:10:03:e4:b2:4a:24:91:
                    8b:a6:ae:16:cd:b8:a5:40:ff:47:5a:f6:b6:f1:1e:
                    a3:2d:9c:a3:4d:bc:28:ab:66:72:f5:7f:f1:51:45:
                    89:4c:af:22:16:71:42:11:4d:69:48:d9:37:e0:b9:
                    e7:9f:da:cf:db:73:40:9c:d9:15:db:1e:0c:b3:4a:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:74:4D:FE:D0:61:2F:5C:D2:EC:3F:B6:E2:30:62:6F:96:8E:13
            X509v3 Authority Key Identifier:
                keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7d:42:a7:35:55:72:42:1c:8b:e4:d3:b1:4a:03:71:92:d9:
         87:32:82:3e:6b:49:3c:cd:ab:28:bb:e7:79:2d:5c:7e:60:ad:
         42:af:c2:d2:b4:44:58:c1:50:ef:7c:c4:b6:4d:dd:a8:cf:06:
         ee:c7:9b:c1:7e:c2:d9:20:fc:70:14:dc:33:d6:da:57:f6:7d:
         f5:fa:c9:72:d1:f8:18:97:6d:c2:7b:c5:14:d9:a3:13:18:3b:
         21:17:80:ee:1b:fa:fc:db:62:6a:ed:30:7f:f1:72:f4:90:5b:
         8e:52:14:b3:a8:60:fb:e1:f2:6d:e0:cd:be:09:6b:94:a5:4d:
         db:e2:d7:d0:ca:ff:60:f0:fb:c7:56:b8:4e:bc:68:a8:4e:e3:
         bc:55:98:fd:fa:a2:8d:02:7e:44:f8:e6:86:45:fd:61:86:b8:
         70:ad:ac:2c:20:d3:5b:ef:1e:ba:eb:ec:ea:c4:d8:00:57:23:
         06:c5:fa:c9:15:72:63:fe:63:dd:b3:e7:09:e4:c9:46:5e:d6:
         63:a0:3b:ab:5e:7a:91:a7:1b:2e:f9:5a:ed:d6:d5:c0:62:72:
         0e:8b:65:f4:4f:a6:c9:d9:08:ab:39:49:a7:9f:4c:f4:f1:dc:
         da:4b:dc:a6:dc:2a:ac:b2:ba:a6:36:3a:e9:5b:00:6c:db:e4:
         2f:e0:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----