Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File:                     ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier:          +DizN0NuqPyRsN+Hcve2SUs3kiLanAMo+DXGRKiOZb4=
Subject key identifier:   B2:43:74:C6:CA:8A:1B:BD:60:CF:14:09:6D:C9:49:81:69:1B:3F:38
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer:       /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial:       01962FAB336FCC8CF5C258DE9CF21BB01F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
                          2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: tYlIp/5iiIZV+Rxg+7SqMHCfjnxErm5dUQk187TtVrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:33:6f:cc:8c:f5:c2:58:de:9c:f2:1b:b0:1f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=b24374c6ca8a1bbd60cf14096dc94981691b3f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:1f:0c:d4:cf:9e:73:e4:bb:be:48:54:54:
                    31:5d:b8:36:95:85:f6:09:cd:e5:99:f8:10:d5:1e:
                    c9:5a:7f:d4:63:e0:03:4a:70:ac:3d:5e:ce:b5:78:
                    47:0a:5d:5a:19:83:97:ed:13:f2:e9:27:4c:7b:c6:
                    03:bb:8d:9f:22:c9:89:82:da:30:95:24:d6:fc:ee:
                    e9:cd:ae:f0:e1:48:21:f3:2e:56:fc:e4:24:cb:94:
                    d3:b6:17:46:c4:86:c1:30:d7:60:7c:2b:e5:71:1c:
                    22:f3:76:e5:c4:6c:86:29:7a:e2:f2:88:a2:c0:7f:
                    7f:a4:0f:17:f7:fb:17:56:6c:10:57:b2:0a:00:84:
                    db:5a:b6:ed:eb:e7:3f:9c:4b:4f:28:23:21:a6:bc:
                    91:dc:d0:f5:a2:04:35:db:bf:7c:fb:2e:40:d9:44:
                    c1:81:af:2b:9e:ac:93:c2:1d:36:1d:fc:d9:01:b7:
                    46:37:39:f4:1e:01:57:c8:8d:f5:0b:3c:c7:19:d2:
                    97:26:b4:54:ac:26:61:6d:ac:e9:aa:c5:97:dc:6e:
                    7c:8f:53:7a:74:1e:37:d8:8a:a9:95:11:92:4a:7e:
                    45:7c:32:5c:f7:0e:45:a9:81:b8:e7:da:77:9a:9c:
                    37:3a:25:6b:6c:73:31:84:2d:02:8b:b8:0f:30:0c:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:43:74:C6:CA:8A:1B:BD:60:CF:14:09:6D:C9:49:81:69:1B:3F:38
            X509v3 Authority Key Identifier:
                keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:37:a9:21:a8:34:90:aa:3d:19:a1:af:eb:71:f5:13:fe:
         9f:67:89:6a:0f:df:6c:d7:cf:db:2c:11:e2:ff:a4:88:d9:a5:
         2d:66:b8:07:b8:83:2e:54:7c:e8:e6:7a:d0:0e:d3:70:92:61:
         d3:71:aa:42:b1:80:41:e6:e1:0e:60:d3:57:e5:02:e8:86:db:
         34:6e:83:61:0e:50:42:51:7e:41:66:00:e5:f2:27:d2:a6:2a:
         b9:93:8f:d0:da:c5:18:c3:99:0c:56:d0:fc:ce:03:fb:75:a8:
         72:0e:15:46:26:99:00:62:b0:ab:d6:4c:9b:e6:a8:52:d3:57:
         0f:2d:b3:a2:04:8b:64:77:30:da:50:fc:53:f8:ad:82:47:13:
         f0:4e:18:8a:6e:c3:53:d2:fc:9b:ee:61:e2:e5:65:43:a5:80:
         a4:97:af:00:c4:a9:2f:eb:08:e2:c0:86:d3:81:d3:cc:76:15:
         aa:c6:21:39:fb:c7:53:f5:e2:71:38:8f:b1:b7:be:3e:61:d1:
         e2:a9:a7:1a:bb:07:ec:f6:68:db:e2:ee:b5:37:d1:0c:fb:81:
         ff:be:d5:55:b9:f2:87:fc:1f:d4:23:e0:41:fb:99:94:aa:90:
         a4:90:ee:11:03:e2:51:63:21:10:5d:ff:59:a8:56:3f:5f:4f:
         e3:ad:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----