Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File:                     YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier:          dxtHnLeEQjtRTsyyyB4QEFIfqNDGATcELnH/xhK4R+c=
Subject key identifier:   66:46:26:3A:29:77:20:39:C4:0A:AD:FC:A3:0F:E7:27:A0:D6:63:F5
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer:       /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial:       01962E6187B41A1105B39165955702934D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number:          0E0C
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: N1sDBoXMDMf7VVh7qyz5ul1vrLL41oo3zSzoKaabuXU=)
                          2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:87:b4:1a:11:05:b3:91:65:95:57:02:93:4d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=6646263a29772039c40aadfca30fe727a0d663f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:ab:f3:19:8f:bc:e9:6c:f9:68:ad:9e:1c:
                    06:4d:65:88:2a:3b:20:8c:50:bd:28:08:d9:6d:66:
                    62:1a:12:62:a1:7e:cf:15:d9:dc:a5:fb:0d:51:4e:
                    fe:8e:51:3d:0a:66:06:02:fc:04:23:e5:ee:e8:21:
                    44:0a:86:7c:94:e0:a0:ef:9f:8a:27:5e:b7:c0:1b:
                    bc:8c:e0:f5:5c:ef:ec:a7:5e:b3:f3:fd:25:5d:f0:
                    dc:99:7f:d9:c6:66:f1:9a:41:cb:d8:66:31:ff:6c:
                    d9:57:7d:90:52:74:17:3f:3f:ae:b7:d3:45:98:fe:
                    7f:2e:08:a5:a1:b1:40:b8:d8:30:9c:9a:3e:86:2c:
                    37:c4:25:39:d8:df:a5:5e:6e:b2:87:4d:78:f7:fc:
                    03:b3:db:c7:f9:5e:79:3e:7a:1c:bf:5a:0c:62:e5:
                    eb:1e:64:32:f7:82:84:f3:c3:3e:21:a8:eb:f6:d5:
                    58:2f:b7:cc:d3:ee:c3:06:00:0d:4d:5d:ee:86:ab:
                    be:ab:da:e1:7e:90:75:5a:d9:06:09:2b:11:e4:1b:
                    0d:6f:2b:65:19:60:38:f8:84:ad:75:43:36:6a:a9:
                    a1:7e:f8:dd:ef:ba:6f:a4:19:95:df:3b:53:6c:7e:
                    58:55:45:5f:35:c2:70:b3:51:70:df:87:58:f7:d9:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:26:3A:29:77:20:39:C4:0A:AD:FC:A3:0F:E7:27:A0:D6:63:F5
            X509v3 Authority Key Identifier:
                keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:6d:ca:00:f9:58:82:59:77:17:8e:7d:16:53:8f:5a:f2:
         01:cb:63:83:da:75:c0:87:63:c1:52:ef:d3:c8:6d:ee:0d:f4:
         a3:65:b5:c1:18:73:84:66:73:bb:2c:dd:ee:76:a6:da:6a:30:
         b0:df:ac:c6:d8:67:97:95:71:86:12:c3:a3:f4:3c:06:88:31:
         70:38:42:76:b9:1b:ab:7c:f6:c9:d7:18:42:1f:d6:5c:1c:b9:
         07:50:e9:b9:66:d4:7d:0a:7b:3f:eb:be:f8:03:54:a4:0e:06:
         94:b5:14:81:ce:64:36:23:77:7d:91:c6:4b:b0:77:fa:b2:8b:
         86:96:1e:c5:3a:50:9d:e2:d8:61:fb:48:37:6f:a9:0d:03:88:
         d2:e6:c4:e6:d8:bb:c4:44:fd:34:8d:87:6f:c2:8d:c0:cc:53:
         ac:cd:7d:c0:9f:da:df:a0:6d:8d:69:7a:96:70:ed:66:29:36:
         e0:56:31:8f:4b:f0:9c:14:e3:5c:7a:2d:d0:20:5a:76:c9:72:
         7d:ba:ed:fe:a7:ed:e3:03:77:40:87:2e:7e:66:53:8b:ab:44:
         9e:06:a2:b8:79:7d:47:a4:f1:97:ec:1f:2c:71:6e:e0:53:fd:
         66:b6:70:de:af:52:d8:ad:84:18:4d:f1:c6:09:58:e6:b9:87:
         e6:a0:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----