Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
File:                     YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft (raw, json)
Hash identifier:          4V/4fzL5u3RSBggnRm+1n+yQFXEE+L3iboR1vA0PFI4=
Subject key identifier:   FF:4F:4C:ED:D4:D3:2A:86:89:A3:C2:6E:C7:60:8F:10:3E:52:36:D8
Authority key identifier: 60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F
Certificate issuer:       /CN=60a434fd6bff8b6fbb0d52f8da42e91f8a5a292f
Certificate serial:       01962DF419B235AE20E0E19EC6B06D99CFFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
Manifest number:          0683
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: YKQ0_Wv_i2-7DVL42kLpH4paKS8.crl (hash: ew7SgNkYzYn/YqbfNv5RbwJAXa7km3Gy/H61mg2hz0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:19:b2:35:ae:20:e0:e1:9e:c6:b0:6d:99:cf:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a434fd6bff8b6fbb0d52f8da42e91f8a5a292f
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=ff4f4cedd4d32a8689a3c26ec7608f103e5236d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:a6:a9:a0:86:10:ba:8e:0d:0f:45:f3:90:
                    5e:13:3f:59:d4:3a:26:b1:78:74:95:08:97:f2:9f:
                    6a:f8:f6:72:51:20:a1:78:4d:a7:d2:72:94:7f:f0:
                    0b:25:2d:01:33:f2:57:0b:0d:07:18:77:66:4a:d0:
                    be:70:62:bb:37:1b:5a:dd:7b:a0:ad:25:b7:93:88:
                    2f:59:0f:ca:86:f4:ea:50:46:f4:e5:15:e0:b8:5d:
                    27:a8:c9:9e:f1:f8:76:c9:ee:04:c7:04:d3:d6:c7:
                    ee:23:c1:d6:37:fd:44:f7:18:ab:77:e3:20:af:a3:
                    1a:51:c0:1a:f0:e7:d5:0c:3b:bc:3d:64:6e:52:c6:
                    e9:4d:7a:1b:cc:c0:f1:ac:6c:86:93:2f:22:df:68:
                    9a:b4:9e:34:c2:5e:23:65:27:f7:f3:65:2b:3d:7a:
                    9d:83:c7:22:df:4e:2e:97:6d:58:03:48:22:f3:73:
                    f1:84:e4:75:2b:20:74:09:90:10:28:33:b3:fd:fe:
                    58:9c:fa:23:60:2a:aa:39:03:e9:09:4d:2a:45:20:
                    7e:82:fa:ff:5b:4f:82:a3:35:ec:39:ec:92:16:95:
                    af:18:77:3f:5e:b8:0b:b4:d4:9c:db:74:77:bd:9d:
                    56:bd:8f:13:13:c5:f2:2f:82:0d:5c:a8:ba:87:13:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4F:4C:ED:D4:D3:2A:86:89:A3:C2:6E:C7:60:8F:10:3E:52:36:D8
            X509v3 Authority Key Identifier:
                keyid:60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:62:73:94:b6:4f:a7:93:ea:2e:ef:a9:9a:3a:04:97:49:58:
         c3:6e:99:70:4a:51:7d:0c:e9:69:d9:6c:6d:80:d5:65:77:8a:
         fc:0e:a1:e4:18:b9:2b:3b:f0:78:3a:a8:83:23:01:b6:20:a0:
         1b:06:2a:e6:03:bd:e1:0c:53:82:e3:c9:fc:6f:24:70:4a:4a:
         91:b4:98:57:3c:39:90:65:8a:5b:e9:d7:ce:27:1a:ae:50:98:
         41:43:e5:99:6b:71:22:a4:2a:4c:74:dc:09:25:fc:a8:b6:84:
         45:1b:d3:4c:7a:98:c8:ef:0b:48:15:ae:91:11:3d:2f:35:3e:
         13:a7:b5:a0:25:b0:c7:31:be:e0:51:a2:ab:c9:a3:e9:4e:05:
         a2:e9:78:fb:9b:bf:b2:da:10:d5:5c:02:3e:2e:52:90:c0:ff:
         4a:0b:9e:2c:4d:a9:2e:ea:41:22:f5:d6:58:1c:ac:f2:00:f0:
         29:59:30:b2:6e:01:17:21:d3:21:9b:48:c7:aa:4c:f2:2e:64:
         91:a9:06:f3:00:5d:43:dd:fc:26:9e:9a:71:f9:a5:37:23:04:
         d2:3c:fd:5e:88:6e:63:14:dc:60:61:77:38:75:bb:6b:a5:28:
         50:11:89:fa:6f:6b:3a:b6:9b:b7:b7:a9:0e:b9:f4:63:ce:14:
         a8:e7:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----