Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
File:                     YDe79svKAic6peIbuIjj4exnZ98.mft (raw, json)
Hash identifier:          xsnCgsvpFDkS84veIJl6uLw5iYvfcGiXNud7Ps5caDQ=
Subject key identifier:   55:0F:B9:39:91:BF:5A:E0:33:62:93:F5:37:05:F0:6D:53:E1:B3:54
Authority key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
Certificate issuer:       /CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Certificate serial:       01962E9930817F17644C9FE77D2162E6E2A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
Manifest number:          0A0B
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: YDe79svKAic6peIbuIjj4exnZ98.crl (hash: N0XQJZqmYuibeFydzyCCaWZqZKArPp1PtsZ7uxZNhaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:81:7f:17:64:4c:9f:e7:7d:21:62:e6:e2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=550fb93991bf5ae0336293f53705f06d53e1b354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:15:ed:68:83:df:45:fd:a6:fa:b5:ee:44:09:
                    5d:58:16:34:c8:1c:9c:02:f1:75:72:45:a1:e8:74:
                    f2:92:2a:c5:ca:b3:13:48:8d:2c:4c:54:65:e5:66:
                    ca:4c:a4:7a:92:28:71:d5:fe:ae:b7:2d:a6:1b:df:
                    be:d6:8e:cb:1a:8f:18:18:da:cb:0a:2d:bb:70:21:
                    17:a8:32:12:19:9a:1e:15:7a:52:83:36:63:35:f3:
                    f0:28:87:a4:80:5b:7b:c7:3f:fa:4f:68:c4:c6:90:
                    16:0e:29:2e:9e:e7:13:bf:06:11:c2:bd:ab:08:05:
                    e6:f2:3e:fe:90:e5:c6:bb:48:38:1f:21:fb:75:ef:
                    ae:dd:df:6b:cd:83:96:36:42:96:94:b3:27:34:a0:
                    7e:27:0f:09:28:db:f6:35:f7:31:2b:2a:52:95:8c:
                    d2:04:ca:9d:f8:06:f5:c0:56:f9:57:6e:2b:e7:d2:
                    4f:8a:c5:cf:46:c3:3e:17:9b:20:74:5f:ac:a3:07:
                    33:cc:0c:f2:cc:ff:86:06:aa:24:ac:8a:f4:cc:32:
                    4e:4a:0f:b9:a3:c4:83:a9:74:78:0f:9c:ab:04:f7:
                    00:d9:83:64:0d:a5:45:6c:2e:f5:de:f0:82:d5:1c:
                    c7:0c:ea:a2:c4:db:f7:18:d3:0c:00:cf:d1:8c:7b:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0F:B9:39:91:BF:5A:E0:33:62:93:F5:37:05:F0:6D:53:E1:B3:54
            X509v3 Authority Key Identifier:
                keyid:60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fb:06:b3:fe:91:41:d2:27:42:84:83:c5:b8:7f:24:7b:87:
         5f:a8:15:50:bc:d2:e9:b5:20:1e:ec:c7:57:4b:f0:c8:0b:48:
         77:94:39:be:d4:a2:f5:b9:aa:a3:7d:5c:3a:dd:a6:bf:27:29:
         22:a1:07:c5:88:a4:8c:07:18:12:df:2d:35:cc:c4:c2:1f:f6:
         4b:3b:13:a0:59:72:b7:54:8b:67:21:a4:77:83:a4:a6:b9:a2:
         6a:17:6d:8d:02:53:d2:d5:ac:e8:e4:76:c7:37:70:78:18:e3:
         71:3b:1f:7a:10:48:04:80:67:14:b5:8a:3b:84:d3:ee:53:05:
         b3:11:ac:eb:d9:5e:e3:53:b0:ad:ef:c4:3a:87:fa:ff:15:8d:
         f7:7b:71:06:96:28:df:ee:e5:36:0b:0f:30:fd:08:95:32:9a:
         c1:f1:ac:ab:42:9d:7a:cf:c9:02:8d:15:8c:4e:22:27:43:0e:
         5c:71:cd:57:ef:a4:30:61:76:d4:e0:ae:2b:25:74:cc:0f:30:
         2a:d9:e9:7e:a4:0f:25:cc:c4:6f:24:80:07:27:46:05:2f:77:
         30:6f:e1:c0:1a:57:cb:3d:37:53:10:51:36:d2:94:9f:09:67:
         07:dd:df:90:dc:49:f4:71:5e:78:71:5c:46:45:7a:1c:15:4b:
         59:38:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----