Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File:                     y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier:          KtUGbWdgld9x+oZN2cLWf4re274J7BQug5ouGBFcaoc=
Subject key identifier:   CD:19:9A:89:6C:21:F8:DD:E0:50:5D:3F:DF:A6:90:8C:4D:27:99:7A
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer:       /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial:       01962E2ADE6321DE6FD25849A2723CF5C9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
                          2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
                          3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: +lOdQOBCVSQa5O2VjkKWia14FIkWO5MwM3lq7QnYw5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:de:63:21:de:6f:d2:58:49:a2:72:3c:f5:c9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=cd199a896c21f8dde0505d3fdfa6908c4d27997a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:42:5f:57:66:0a:14:5c:b5:58:aa:ef:16:
                    9b:b4:f0:e1:2e:e3:c8:0b:e6:21:d1:14:31:2f:1a:
                    69:46:b7:cf:05:9c:7f:b4:31:5a:ad:05:45:f6:3b:
                    bc:6e:ab:01:85:77:ed:ee:05:32:86:2c:1c:2e:28:
                    79:da:02:89:f5:9c:f4:89:16:62:3c:55:bb:ce:5c:
                    72:89:68:1b:cc:25:91:9e:e8:82:2b:ea:f4:76:57:
                    2f:4a:a6:ac:93:76:5a:7a:c3:8c:91:5a:02:8c:60:
                    41:d1:b9:30:09:73:61:27:d5:5a:bc:b2:2c:cd:2b:
                    51:72:0b:76:b2:36:b9:81:90:4d:5d:7a:2c:41:a7:
                    2c:0f:fa:74:2b:47:4f:e8:42:9f:6b:9e:76:1a:4e:
                    93:8a:32:4f:31:56:50:35:67:83:d9:76:cf:c3:41:
                    4a:c0:56:87:71:17:a0:24:c7:7f:81:5d:99:fc:d6:
                    8a:ef:35:83:f0:85:82:aa:32:e2:eb:93:72:d3:ff:
                    b2:7f:a2:1a:be:13:a9:19:40:95:6b:9d:af:12:6b:
                    eb:33:59:c4:bf:db:b4:f4:c0:d4:29:67:8e:ad:69:
                    5d:48:50:58:83:26:d5:a9:81:38:f9:f6:c2:f3:34:
                    4c:5a:6a:68:29:19:98:1d:0f:03:36:8f:f5:3e:cd:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:9A:89:6C:21:F8:DD:E0:50:5D:3F:DF:A6:90:8C:4D:27:99:7A
            X509v3 Authority Key Identifier:
                keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:40:46:b5:01:c6:34:83:5f:68:37:ee:fe:47:2c:52:34:cd:
         1e:d3:2d:0e:08:25:28:ae:0c:47:12:d1:30:61:8b:af:61:a2:
         bb:07:74:4c:8f:f4:a3:b0:91:09:74:c9:ab:51:89:71:75:ae:
         7f:29:0c:66:9b:e2:1b:2d:89:3d:dc:6b:fc:85:c0:b2:ce:6d:
         5c:8a:0f:ff:bf:e8:bc:39:96:db:64:b5:ec:45:b6:81:38:0c:
         cc:7b:0e:a3:64:f4:87:e8:a3:a6:7d:71:b8:8a:c5:a4:2f:0b:
         b6:a1:cc:f1:b1:ef:64:22:ab:01:e8:af:d8:dd:08:08:df:dd:
         13:59:fb:4f:73:e6:cd:03:98:b2:fe:fa:d7:57:be:a8:82:77:
         6b:fe:08:43:24:a0:fd:b4:bc:fd:9b:b9:2d:fb:ae:9f:b6:ca:
         eb:e9:43:12:94:f6:6d:0a:73:25:d2:cc:8b:e3:a4:2e:76:d5:
         ec:b5:a9:f2:c2:de:b5:f9:f6:0e:8e:de:d4:02:e9:ae:76:a2:
         f4:ec:83:9c:19:b2:d5:ab:c9:60:74:01:00:b9:e4:f4:40:00:
         c9:a3:88:4b:86:4b:0a:00:3e:c5:7a:bd:c6:f2:a4:4a:ba:13:
         2e:f3:4b:a5:5f:99:a3:36:4d:a5:d8:67:fc:57:3f:b2:0b:53:
         6e:6c:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----