Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File:                     yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier:          337hI542cDUJ0KuWybJMsDw0XLP+YQlga02ntoXDmrk=
Subject key identifier:   F2:37:55:58:FA:B0:18:30:CC:91:FA:EA:63:52:EB:B6:56:7F:0E:D4
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer:       /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial:       01962F3D9EC63A36F1F5AD9C176B604FC7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number:          14D3
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
                          2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: OPaBxhpNPC8jUMlVXICJiqRVe5aPSy2zjNG96i+Qvzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9e:c6:3a:36:f1:f5:ad:9c:17:6b:60:4f:c7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=f2375558fab01830cc91faea6352ebb6567f0ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:03:67:eb:ba:7b:cb:c8:08:48:e2:01:c0:
                    56:a3:a0:d1:14:18:5c:51:0c:46:f4:90:7f:f2:6d:
                    84:85:ff:6a:d1:db:2e:9c:e4:68:03:b3:a7:51:8d:
                    92:77:0b:9f:e3:10:b9:2d:a4:21:4a:37:a5:9d:0d:
                    e2:43:25:2e:12:9d:b8:86:7e:b6:f9:22:5f:d5:20:
                    0b:04:37:dc:88:bb:ad:ec:ee:47:6f:2f:74:90:68:
                    41:b9:e8:ac:3c:c7:fc:e9:46:e7:a6:2d:45:1f:59:
                    43:8a:d6:44:8c:f9:b1:99:9b:a0:dc:f3:08:43:7d:
                    bb:a7:eb:49:c2:2c:70:41:79:1b:7d:a8:b3:5f:ac:
                    b6:91:1d:c0:83:cc:2d:70:d6:78:e9:db:5e:8e:c2:
                    ae:84:ee:e6:61:2f:b4:32:e8:83:38:35:09:ef:18:
                    11:c8:05:2c:a5:9e:e2:dc:b8:3d:e4:33:02:d6:50:
                    74:83:6e:b0:f4:6e:5e:1f:62:54:02:f0:33:db:44:
                    57:d6:be:5f:66:25:bf:2b:0c:bd:17:a2:c1:96:cc:
                    bd:29:58:d7:30:ca:99:26:ac:3a:5d:ff:d5:05:1b:
                    9a:74:94:61:db:6e:d8:8d:9a:7b:30:09:97:20:dc:
                    d6:33:5a:ed:19:0d:dd:fd:e8:c2:68:46:a7:96:88:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:37:55:58:FA:B0:18:30:CC:91:FA:EA:63:52:EB:B6:56:7F:0E:D4
            X509v3 Authority Key Identifier:
                keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:23:6e:73:38:a3:ed:e1:2d:43:d4:0b:14:95:17:ae:0b:88:
         eb:b3:69:e1:b3:3f:59:ac:65:04:31:76:a6:b0:fb:f0:72:5d:
         8b:46:eb:e2:94:df:87:c3:74:e2:52:86:ac:29:1e:35:9e:8d:
         b7:86:dd:32:7e:3f:a8:6d:da:23:c1:40:6b:5d:fa:65:87:c1:
         34:e9:1c:75:9b:51:22:91:16:d0:13:c1:f5:c6:4b:c2:fd:ef:
         a2:28:af:a3:76:46:c0:36:78:fb:c2:ce:69:13:d3:67:49:25:
         60:20:b5:76:8a:c5:27:ba:d6:ef:23:6b:fe:01:f4:a4:02:8d:
         d5:45:ce:f7:a8:25:b9:7e:ae:37:6f:d6:75:b2:d5:64:71:02:
         78:4c:d5:0b:df:71:91:bc:de:07:59:dc:06:1e:39:f4:aa:af:
         35:e4:96:c4:e3:6a:5e:b6:dc:be:fb:d4:7c:14:3d:f5:c0:64:
         15:87:51:39:e2:76:8e:bb:54:b9:8f:11:11:71:dc:17:d4:fb:
         10:a4:7c:d6:4a:d2:0b:3d:41:80:2b:de:5e:f4:36:85:7b:24:
         03:e1:35:b8:9f:5b:92:ec:d9:f4:4a:fc:8e:e0:c7:42:5b:cc:
         bb:e9:17:27:d2:7e:50:89:a7:8e:18:61:cc:84:99:db:9e:3d:
         10:22:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----