Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File:                     yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier:          LBE1/rmzIdCrt0LeDqHVN0yZaUuLlM12nX9pIjQTXhA=
Subject key identifier:   C9:BE:7F:85:C0:66:FE:A6:A8:CB:DA:D9:1F:DE:99:5B:56:7E:80:CB
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer:       /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial:       01962E618BE1E93C37EBE0AB9B83149EC63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number:          0458
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: C8L1z84_2r_lzc2Lk6eIdrAoayw.roa (hash: phPZynXPFJJG35B8r3oO6DnbXPe6XC6xJ8y/JrqkIqE=)
                          2: NGUX_wUecUWqzbndlWjKyvgn_L8.roa (hash: 17HMuISkbpyzncjWQXNjl1zx9g2Y5g9g+2mcpzxaFWE=)
                          3: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=)
                          4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
                          5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
                          6: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
                          7: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: nucop2FuddzjoWC676r48uKSemyQVoziT7Efw4Zdy0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:e1:e9:3c:37:eb:e0:ab:9b:83:14:9e:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=c9be7f85c066fea6a8cbdad91fde995b567e80cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:c9:d2:94:91:61:cc:8c:a9:da:fc:99:76:
                    b0:b7:2d:1d:21:6a:63:e8:20:23:17:c0:ac:50:5d:
                    48:19:c8:bc:cc:a6:26:7c:e1:ec:6b:16:8a:77:b9:
                    fa:c1:5b:5e:0f:ce:95:a9:f4:12:75:0a:db:8f:4e:
                    ad:4e:7e:be:1f:f8:df:0f:17:f6:1c:91:b4:2e:b2:
                    59:59:58:13:37:af:79:be:18:88:b5:11:35:f0:d3:
                    d9:24:3a:dd:c7:bb:80:7a:ac:a0:09:9b:b9:4b:3a:
                    6c:83:eb:e8:13:a9:12:d1:66:36:d0:c5:9c:9d:01:
                    a4:9a:f9:d5:1e:c7:10:6c:86:df:96:5b:be:98:20:
                    29:9b:e3:44:30:ea:e3:d1:f0:60:59:6b:9e:3f:a5:
                    be:ef:ec:b7:33:fa:bd:4b:f2:05:5e:c2:27:d2:6a:
                    dc:75:32:7f:58:73:71:8d:60:11:3e:f9:16:b5:c9:
                    a9:56:c2:6c:ed:8e:e6:61:25:d4:b1:be:0b:1a:99:
                    2e:aa:f1:e5:9d:b4:18:39:3f:8d:4f:7b:d4:c4:78:
                    ec:ad:03:38:b9:99:59:a9:2f:12:d6:57:72:8a:b5:
                    f8:64:38:61:d8:08:21:0f:d8:26:07:76:bb:42:e7:
                    9f:8e:13:86:a6:74:63:64:39:56:35:ae:d1:5e:3a:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BE:7F:85:C0:66:FE:A6:A8:CB:DA:D9:1F:DE:99:5B:56:7E:80:CB
            X509v3 Authority Key Identifier:
                keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:19:55:c8:37:5c:eb:a6:b7:87:58:08:42:fe:50:62:d0:
         9f:55:18:1d:07:1a:18:3f:ec:6d:d9:5e:64:e8:98:29:3d:3d:
         ca:50:3f:07:bb:e0:62:05:dc:31:dc:ef:cd:15:f5:32:da:10:
         16:df:5b:7e:ec:1c:d6:db:11:48:e6:8b:25:78:6c:c3:8f:8f:
         96:9e:28:92:9e:31:89:51:00:6c:23:a0:84:cd:e6:f7:0a:86:
         dc:2f:f9:33:43:36:ef:35:cb:90:3d:3d:53:5c:1a:5e:b7:e5:
         19:fa:a8:93:1f:0e:96:b3:9c:3f:0c:fe:32:96:a9:ff:b2:36:
         eb:99:a0:e4:81:f3:81:ac:b3:4b:4f:a4:de:44:be:f7:63:cf:
         93:8f:63:9e:e8:40:2f:7a:cf:ba:7e:6f:bc:16:a4:22:e0:08:
         48:fb:ae:cc:39:96:3f:48:fa:7a:d8:f4:7b:ee:d3:a8:41:c1:
         05:34:1d:a1:b6:84:db:7d:db:5f:da:56:fd:cd:9e:93:88:f1:
         16:85:7a:d5:91:a5:3a:3a:fe:bf:a3:db:35:2b:67:30:f7:b9:
         8b:97:e6:7e:cc:04:81:d4:51:78:e7:73:13:b8:b3:2e:ba:59:
         8a:a1:05:fd:01:57:c2:3c:f2:9a:be:05:a4:ad:75:60:42:4d:
         cb:67:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----