Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File:                     YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier:          wHLnSaebflqbsfG01IL7T94zbp+pDA5/v8ad/XEI/88=
Subject key identifier:   C4:B3:36:34:14:7D:74:B3:D2:1E:24:60:B0:18:9F:F8:BD:81:DD:44
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer:       /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial:       01962FAB8A9D2F4B6B7A95F905601A958F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number:          035F
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: FYyJuOlatGIlA61s4f07XUGlkGY.roa (hash: Py+5NmYVZfVm5rbvNCZVmCmJkN1lML6LlEnI73AYMuo=)
                          2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: 7L+jBOfyQGvTbSbqPFFddaGpRw+veV6WCTmnufFZJrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:9d:2f:4b:6b:7a:95:f9:05:60:1a:95:8f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=c4b33634147d74b3d21e2460b0189ff8bd81dd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:35:f4:af:84:5d:55:09:b8:c4:dd:45:4f:
                    47:cc:37:dd:cd:ab:5a:66:8a:52:c0:c2:ce:8f:fe:
                    e7:6c:72:8b:5b:13:82:d7:88:23:a9:5a:f2:28:8e:
                    59:c5:f9:6a:0f:aa:b7:99:08:d3:f4:54:66:0b:35:
                    3c:f9:9a:ab:a2:9a:ff:26:4a:37:1b:2c:7a:7f:1c:
                    f9:7f:ea:6b:14:e2:e3:69:1e:c4:ee:59:85:c0:17:
                    f4:b9:52:d8:85:5a:f6:ed:12:63:4d:a4:f5:1e:4b:
                    1e:d2:0f:d8:80:6f:e8:13:2a:af:f4:05:3c:dc:61:
                    de:8b:7e:28:8b:79:79:c0:f2:17:08:38:26:1b:ca:
                    d9:31:d8:fd:f4:23:4e:52:45:d8:71:61:2d:45:83:
                    fa:08:ab:b6:e0:c6:67:99:77:e7:33:0b:3b:41:26:
                    77:85:29:8d:c2:64:5c:bb:7c:b1:6b:a1:65:5d:75:
                    bc:6c:98:c2:d8:87:24:1b:52:fa:74:a1:ff:99:23:
                    64:76:d8:3c:e8:db:7c:44:88:ae:84:5b:a6:06:82:
                    85:4e:ef:92:34:6c:48:be:b7:27:c1:e0:d3:ee:77:
                    cb:ab:79:70:6e:d6:2d:55:93:a0:cd:57:e9:7a:f4:
                    29:af:81:1f:d5:a3:5a:57:b1:4b:92:e4:be:09:69:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:36:34:14:7D:74:B3:D2:1E:24:60:B0:18:9F:F8:BD:81:DD:44
            X509v3 Authority Key Identifier:
                keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:f2:24:ce:40:37:f4:00:e1:16:b2:f9:5e:2f:9a:52:70:
         0b:0a:19:4a:16:9f:bd:a1:a5:8c:98:f8:34:87:5a:48:9d:28:
         b6:c2:49:27:74:c3:ed:73:19:2d:6a:07:cb:71:c9:4e:d5:5c:
         da:ca:98:86:ee:10:61:aa:22:54:01:e5:af:88:5c:8c:6f:4b:
         a1:0d:a8:a5:58:58:be:8d:f2:27:0c:75:07:7e:21:1b:68:d0:
         93:07:d9:fe:32:72:29:3c:19:72:26:eb:bc:5a:77:c6:49:18:
         4d:9d:a6:9b:ab:f6:52:f9:e7:f8:8a:40:46:03:1f:9e:bf:f5:
         12:a1:ee:2d:44:90:29:e2:71:22:36:70:c5:08:2f:ef:2b:97:
         ad:49:f0:bb:ce:d5:1d:81:f0:33:9b:2f:1b:21:4a:a5:01:b8:
         44:50:03:dc:3b:9a:64:a4:20:3e:bf:a0:03:4c:1a:37:a5:64:
         17:09:0c:5c:3d:5a:31:7c:58:00:de:73:ba:6f:b7:9c:0a:06:
         7f:cd:63:5d:6e:79:9c:9c:f0:ef:c0:97:e3:a5:79:fc:52:4b:
         8c:2b:bd:75:87:f6:74:51:3c:cb:ac:30:cc:e3:b2:28:d6:4a:
         b6:a8:da:2f:e8:ef:fc:21:d8:de:3d:67:ef:06:bc:8b:c2:e1:
         a1:c4:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----