Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          sKoHfEz5aQm3bjWPzR4r/84jqaSWWmYXzeOUF/2yiHc=
Subject key identifier:   D8:DA:D0:54:21:0B:15:D3:C3:5A:98:00:0D:80:7F:59:5F:83:32:B9
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       01962E6175C8DA91D3633AF6A06B68C64EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          0B7C
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
                          2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: ptXDPCegK5R22wVAth0v9WctvV8qdhlbi5688IwuRQ8=)
                          3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
                          4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:75:c8:da:91:d3:63:3a:f6:a0:6b:68:c6:4e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=d8dad054210b15d3c35a98000d807f595f8332b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:48:ff:4b:5c:56:fb:ae:cb:bb:d2:b8:82:
                    d8:be:ad:bc:5d:66:eb:ab:ff:f3:0b:c5:98:3f:ff:
                    ae:1c:fc:d3:25:8a:35:84:92:5c:94:a3:4c:74:47:
                    47:3d:51:71:65:d8:62:d2:93:2c:50:9e:c2:31:4b:
                    96:1c:f5:13:52:3c:05:cd:68:e1:18:7d:23:b1:51:
                    53:ae:1b:a6:42:82:2a:ff:92:87:3f:47:17:2c:a9:
                    35:5b:e7:12:e4:a2:1c:f0:5f:08:be:78:a0:e9:9a:
                    7a:9e:d4:6b:5b:87:13:26:74:fb:0c:fe:2b:53:df:
                    5c:89:fd:b4:10:f3:1f:44:48:2a:d3:40:5d:d4:c5:
                    2d:8d:46:15:a6:a3:d3:7b:f4:60:b5:3f:80:d7:e1:
                    97:5a:8e:1b:1f:20:9d:9b:3b:41:ff:3f:e2:a2:76:
                    0a:8f:c0:70:9f:8d:1a:c1:72:dd:5f:fb:26:c8:f8:
                    e2:a8:4f:2c:84:91:7e:e7:d7:7e:d7:e4:59:7c:5b:
                    71:00:ba:33:13:b1:2e:8c:ef:f8:ad:15:ef:24:aa:
                    57:3c:37:d6:ae:02:cd:c4:22:c9:b7:f7:0e:34:f4:
                    f9:85:9f:46:46:82:54:e4:12:74:70:e5:84:08:ca:
                    3f:ab:50:f7:95:95:b2:5f:48:50:97:45:5a:87:c1:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DA:D0:54:21:0B:15:D3:C3:5A:98:00:0D:80:7F:59:5F:83:32:B9
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:e0:8b:1e:59:5c:0f:89:3b:2a:e3:f2:be:d3:7b:c1:a0:
         0c:38:c0:d8:f7:4d:1a:84:61:2e:0c:dc:62:91:42:d5:e9:1a:
         4b:6f:f5:b4:6a:be:8e:3f:f5:91:70:eb:64:33:03:53:d2:85:
         51:e1:31:d6:5f:87:94:42:f2:e3:88:79:28:c9:1a:cf:0b:5c:
         4b:f1:c6:3a:77:a8:4a:e0:47:85:86:a5:59:a5:23:e5:42:d5:
         5f:f1:54:85:87:87:8c:29:f6:c1:23:cd:a4:f6:57:4e:f3:92:
         94:29:b8:70:a7:b5:a4:fc:22:ef:37:6b:66:11:6a:52:0d:d4:
         9e:df:d1:49:75:86:38:fd:11:38:df:d0:6f:01:11:a7:9c:ac:
         53:2c:33:70:81:05:fb:a1:21:0c:c7:cb:8c:84:e7:b3:c4:88:
         d0:3c:92:66:08:c7:3a:ac:97:1f:f2:ac:82:ce:a8:e5:92:aa:
         f0:8b:50:29:dd:72:4e:13:49:25:f8:70:f9:39:b4:16:ae:f9:
         fd:cd:37:09:d4:20:1c:4e:02:3e:43:a6:d3:76:3d:95:70:0e:
         40:64:b7:cf:be:e2:87:f2:0d:b4:d5:ad:65:b2:db:08:c1:a8:
         a4:82:24:98:a5:4e:cc:88:fa:37:7c:d1:d3:f7:2b:63:7f:0c:
         a0:cb:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----