Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File:                     Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier:          S87ASLGhuPYegC0Pc8kwCyZBIeRKXOqxlFsaDvvzJ8k=
Subject key identifier:   61:C2:0C:80:E8:18:BD:F1:D6:FE:9D:EE:44:55:19:2F:6F:A4:69:6F
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer:       /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial:       01962DF3AACA09805F9EF22F05AE48F46FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number:          0AE7
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: EeYsxpNCwGTpIaIB52/6h3/7rByPFUXoNjlbawf3Ryo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:aa:ca:09:80:5f:9e:f2:2f:05:ae:48:f4:6f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=61c20c80e818bdf1d6fe9dee4455192f6fa4696f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:0a:ab:96:76:1b:c1:99:82:40:b7:b2:75:
                    42:1c:ac:44:7a:81:ba:7b:87:78:d3:99:4e:30:3b:
                    f0:26:99:99:35:df:4e:ce:88:f2:5a:2e:99:4a:43:
                    79:15:ed:04:e1:51:2d:71:f0:28:62:bf:61:a9:9a:
                    c6:1d:47:f9:1f:b4:4a:c7:70:a9:41:90:c9:d4:ca:
                    4d:c4:b6:56:6b:87:f4:22:e1:51:4a:ba:bf:d0:4d:
                    db:3a:af:16:01:33:09:20:4b:df:13:c5:4b:64:6c:
                    79:1a:ea:49:c8:d0:bb:23:ae:2b:ef:d6:ea:41:2a:
                    01:b0:b3:ba:58:62:93:30:d6:61:06:6e:b6:15:81:
                    f0:06:7a:ee:1b:50:4e:6e:8d:37:0c:2b:61:55:5d:
                    9e:01:5d:d3:90:be:89:a4:d2:25:78:e4:5f:bd:d8:
                    ad:03:18:78:e0:d0:8d:85:7c:ae:74:ab:91:5f:75:
                    a9:cf:db:a6:35:bd:52:71:c3:04:7a:bf:ea:b2:56:
                    03:8c:cc:e7:e7:ba:53:65:f3:77:49:73:56:85:6f:
                    24:61:f9:46:0e:fa:c7:ff:57:62:b4:c2:fe:98:d7:
                    13:62:63:82:52:59:30:3c:d2:b6:37:32:3e:24:f0:
                    77:dd:9b:a3:49:c9:08:29:62:cf:de:73:08:6e:93:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C2:0C:80:E8:18:BD:F1:D6:FE:9D:EE:44:55:19:2F:6F:A4:69:6F
            X509v3 Authority Key Identifier:
                keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:be:9c:92:d3:a5:39:54:e1:53:3c:d6:f9:78:e4:11:c0:4b:
         5e:4e:7f:52:2b:47:fd:11:85:52:ae:80:2b:80:61:84:6a:b4:
         ab:e3:b1:f1:db:02:99:e0:c8:14:a5:4f:9a:56:69:71:8d:d6:
         d2:20:33:e1:f1:a3:8f:b1:26:ac:cd:58:25:09:ca:f9:5c:b2:
         48:aa:78:63:27:2b:f3:ec:71:46:84:48:2d:47:18:b8:b6:7a:
         be:dc:06:2d:93:db:ed:21:37:ae:6f:df:ee:8b:de:b3:39:2e:
         53:94:f9:19:dc:f9:7b:c4:97:b9:ab:e6:1d:9a:9b:8a:bf:90:
         00:e2:e5:b1:a3:93:8f:ab:e0:79:3e:4d:80:2a:74:6c:12:95:
         72:72:75:6e:ad:53:0b:35:a2:bf:a8:9e:2b:03:74:f5:08:d9:
         8c:cd:81:16:1a:76:f0:14:46:3b:c7:42:4d:82:6c:28:96:b8:
         b7:c9:7a:8a:16:30:1b:eb:d9:7d:2d:a4:1a:ca:5f:3c:d5:d5:
         48:e3:fb:1d:ee:52:5a:7f:ea:53:da:48:7f:74:29:34:15:94:
         82:6c:21:d1:bb:4e:e7:2e:e2:b3:92:c0:7f:76:e5:80:f5:e8:
         81:eb:2a:d4:fb:1e:93:23:5e:c9:dd:c9:b6:5b:00:4f:ad:b7:
         8b:a4:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----