Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File:                     ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier:          q/BQXl8NtfSQCEZ2IRee4nwzIoPQCVytHMW5KU7R0YU=
Subject key identifier:   85:B0:9D:EF:05:31:FE:8F:AD:25:D0:14:5B:E2:DC:99:C3:05:06:D5
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer:       /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial:       01962FAB56ABA8659C738B2ACF3E6727E6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 6f9DfsZDUzdPo3_6eNoeG4QK_-I.roa (hash: 4tclq8R1V/fdbnM4AvEGc3ZJVkHqia0uVMOBrni8yPk=)
                          2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: PXc5XJUEl5e9h1f+mw/enzjZhevSQUWztrqVWDxnKJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:56:ab:a8:65:9c:73:8b:2a:cf:3e:67:27:e6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=85b09def0531fe8fad25d0145be2dc99c30506d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:db:67:da:b4:80:16:93:85:1d:c1:31:7f:
                    c2:2b:cd:81:71:77:a5:fc:bf:3c:d2:d7:c1:59:7b:
                    9c:9f:73:26:95:f3:d9:3c:23:24:79:ba:14:0c:e0:
                    dc:d7:79:36:b2:03:1c:c3:cd:70:11:44:16:0a:e7:
                    c5:bf:a0:f7:dd:04:00:d2:ad:70:bc:f1:39:c2:4b:
                    90:17:e2:13:3d:54:e0:24:b5:86:e0:78:5a:c1:b4:
                    67:15:f2:b7:de:a9:2b:b3:b6:cb:2d:5b:dd:68:53:
                    e8:11:7c:4e:22:2f:b2:a0:46:fb:f2:da:5e:16:5c:
                    45:d1:aa:22:1b:6e:d0:f2:b7:c7:50:7c:7b:f3:0b:
                    eb:a9:4e:fe:b7:1f:d2:eb:73:02:c0:00:6a:fe:ae:
                    ad:62:99:fc:93:48:09:b5:9e:74:e4:3a:fc:a0:4e:
                    f4:ce:cc:71:5e:f8:2a:cb:74:4e:91:45:c1:22:29:
                    0a:26:99:c6:48:8d:b9:33:93:41:e7:47:70:3f:15:
                    b1:d2:c2:2b:8b:1a:6a:9a:a7:0e:71:10:10:02:af:
                    e6:7d:b8:2b:63:56:83:6a:57:19:e4:1b:27:c5:c2:
                    0e:2c:81:5f:37:24:5a:c8:ef:37:cf:aa:a0:ad:f6:
                    df:12:38:a2:81:9e:2d:4b:09:80:4c:9a:91:d3:89:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:9D:EF:05:31:FE:8F:AD:25:D0:14:5B:E2:DC:99:C3:05:06:D5
            X509v3 Authority Key Identifier:
                keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:39:d3:f2:01:6f:02:1f:c6:d6:05:93:63:10:08:ba:85:
         24:34:55:66:41:49:c9:f0:c0:cd:c8:6b:39:12:2d:15:ed:32:
         17:4b:11:e6:7b:33:af:8f:28:41:8e:c7:36:ea:95:a4:d4:34:
         45:fb:8b:88:af:e3:2a:e7:fd:0a:eb:0b:6e:6d:02:1d:c3:80:
         99:0d:d8:d9:2e:60:a8:d8:a4:73:b8:c4:82:d8:5d:fe:83:28:
         aa:2a:bf:75:6b:2f:6e:04:e0:e0:1c:8d:92:1a:00:4c:08:41:
         87:2e:1a:12:dc:b7:95:f4:3b:ad:08:04:c2:f3:bf:68:c6:b5:
         c4:ec:e0:12:7d:e8:5b:b6:7a:7f:07:5a:76:e6:a9:a2:02:93:
         7e:10:ba:e4:d0:d3:40:2a:6a:18:5e:02:b2:59:e7:0b:2b:14:
         5a:53:7e:e4:a0:61:f2:e8:1c:26:cb:42:de:57:58:09:c7:7a:
         95:02:5c:91:07:20:b7:11:d4:8e:a9:90:05:34:66:89:1e:26:
         e9:d1:7a:37:a7:aa:b6:45:b0:9e:3e:4c:86:78:6b:e5:9b:2c:
         16:ee:78:8c:43:ff:3f:4f:7f:ea:10:67:7c:0a:f7:ea:be:e7:
         93:dd:d3:f5:01:00:2f:ee:65:ef:9a:2f:59:f8:91:8e:ca:4c:
         de:18:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----