Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File:                     Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier:          peuxvot5BERjDDapo83X+nHJuytA3OpRyrErC+t4dlI=
Subject key identifier:   C2:32:23:89:BC:52:93:8A:9B:B0:C5:BC:3B:45:90:A8:D6:4B:6C:91
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer:       /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial:       01962E992C513DFDEE2830D182808A1D84BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number:          0283
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
                          2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: ulvCihMet6H8qVdzQ2x4fDPAvuxH/OJ5PJ47encbpoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2c:51:3d:fd:ee:28:30:d1:82:80:8a:1d:84:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=c2322389bc52938a9bb0c5bc3b4590a8d64b6c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:fb:65:de:65:67:50:b3:a0:93:a7:4d:e4:
                    c1:7e:bc:89:ae:7a:be:d8:d6:e1:df:93:aa:d0:84:
                    df:63:33:fb:86:02:30:80:7d:ae:cf:0c:d5:ae:5c:
                    7b:4d:92:21:c1:c2:a7:e8:a7:86:48:5b:63:b1:e7:
                    c0:66:27:83:38:1c:b2:54:2f:24:d9:b0:e0:00:09:
                    18:11:63:bc:dc:1f:3e:9c:82:1d:af:ec:33:f3:27:
                    ce:04:1c:0b:5d:60:5a:92:c5:9a:ab:75:94:2b:93:
                    df:ce:cf:4d:a0:91:e0:10:2e:6d:fa:14:97:df:d9:
                    79:0a:dd:3f:71:74:25:47:da:96:1a:4d:c2:bb:91:
                    7b:45:a6:79:af:02:cb:e4:e9:b5:c1:4a:a3:3a:0f:
                    9c:5a:e2:b9:ef:8a:48:f5:0e:2d:04:ea:a5:21:84:
                    03:c0:46:77:24:e7:0e:23:b4:fc:75:49:2c:0a:5e:
                    42:2b:35:e1:29:e9:ad:42:8e:64:75:9a:21:26:5d:
                    dc:c9:5b:0c:3e:b9:e6:60:ea:9f:c3:b9:d8:2a:c2:
                    3f:fb:e1:56:15:61:8e:44:c5:a4:73:84:0a:7b:34:
                    69:85:6c:2a:b5:f9:59:6b:34:b9:98:1f:53:8e:83:
                    04:65:3f:93:e0:ca:74:db:74:cd:15:f4:39:79:de:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:23:89:BC:52:93:8A:9B:B0:C5:BC:3B:45:90:A8:D6:4B:6C:91
            X509v3 Authority Key Identifier:
                keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:af:89:48:86:75:aa:72:de:f1:42:02:c7:79:6f:0e:db:a3:
         13:bb:25:e3:19:26:0c:f4:87:7f:74:e4:c4:b2:ff:72:5b:77:
         f5:c8:e1:de:c0:79:b3:f5:16:6d:86:67:03:a2:18:48:2e:69:
         11:8e:63:81:54:87:73:3c:57:03:ba:cb:16:6d:5f:89:4a:11:
         9e:94:c5:82:a2:90:15:08:1e:6c:fc:1e:13:c2:36:93:27:6a:
         0e:c3:11:bb:e3:1c:1a:d6:a1:f6:84:36:40:78:ea:21:dc:2c:
         4a:ae:d9:aa:1c:49:1d:06:b8:bf:da:ef:33:05:fe:1d:0c:99:
         81:96:56:99:f4:c5:99:69:0d:bc:8c:5d:be:ae:40:37:c4:d6:
         26:5a:2f:ed:27:4d:eb:6c:7d:20:9d:58:1a:77:71:7a:d6:04:
         a7:c6:b2:e0:4e:e4:5c:21:73:7c:38:71:e2:41:cf:b4:94:88:
         85:c9:b5:42:86:d5:17:43:b2:a1:6f:f7:2e:67:5c:7c:1e:d2:
         2d:2b:c9:5f:2c:66:1e:3d:4b:7f:04:98:a3:e6:88:d3:06:ed:
         c8:dd:bd:37:e6:0e:5e:0b:73:51:9b:67:98:0c:05:dc:3f:f5:
         ef:93:41:92:3c:39:6b:1e:38:05:74:2f:63:ad:77:12:21:f3:
         2b:43:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----