Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          HFfptUbGiqjfyeTCU9EiZaiv1+zcf0Ye6RDxoOPYoqY=
Subject key identifier:   0E:E8:AC:31:08:EA:4C:A0:B6:62:E0:10:65:11:55:10:CE:FA:55:18
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       01962F069857DEF544915A2A102C04AC8517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          12F2
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa (hash: XKwu2dm5EiilAMiU6vQWAsMs3u94DmEeOaG3OlX3RRc=)
                          2: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          3: mLzt7xGUveLWBI5KBd3nPnlkK34.roa (hash: gBHkMYqm2CFNHYl0R32/z6OsqeoYFanglt5qYzw7wHQ=)
                          4: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          5: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: hf6TJeEtnocE1hiIhzOUzLtqCsOr/tpa+bry3ePyM5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:98:57:de:f5:44:91:5a:2a:10:2c:04:ac:85:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=0ee8ac3108ea4ca0b662e01065115510cefa5518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:6a:89:66:37:17:01:69:bb:4d:49:20:2d:
                    99:a4:d1:be:99:e2:f5:d4:1e:e7:6d:b9:75:24:3e:
                    2a:9f:2d:79:0b:d1:c8:bc:99:8b:50:b0:78:40:98:
                    d8:73:4c:58:0e:13:5c:ce:93:ee:88:81:93:8a:5a:
                    30:49:8e:31:77:af:e8:64:2e:87:cd:27:84:2e:82:
                    09:31:18:d6:ea:d1:23:90:e5:f9:45:bc:32:82:29:
                    3e:33:ec:ad:ba:2a:22:b4:38:ba:d0:90:ab:fc:e2:
                    5f:f5:3b:b3:e5:79:32:47:10:fd:77:09:4c:40:58:
                    40:93:93:7e:56:33:37:ea:87:5c:1a:94:0e:5c:bf:
                    2b:68:37:51:f0:ce:85:06:fa:ac:4e:89:17:c9:06:
                    4c:05:2d:6b:f2:69:16:2c:d5:dc:ec:a6:e9:6a:89:
                    7d:11:8a:98:7c:8e:59:41:11:3f:90:bc:03:7b:e2:
                    74:3e:dc:2e:71:cb:a5:6e:98:95:c0:fd:8e:5c:b9:
                    66:75:b4:c9:e7:9e:4f:26:62:70:18:2f:e5:dd:3d:
                    4d:74:2e:48:88:31:89:f2:8b:3a:b3:2e:e2:03:d8:
                    06:73:a8:7c:33:ca:3e:a4:f5:c4:e5:e3:d5:b9:50:
                    ea:cd:9e:40:8f:a9:b2:cf:50:ae:a9:94:1b:6a:9e:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:AC:31:08:EA:4C:A0:B6:62:E0:10:65:11:55:10:CE:FA:55:18
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2f:a0:93:b2:b8:9b:34:98:41:ce:1d:b3:e3:9c:2b:8a:00:
         d3:d5:50:32:76:37:d0:5f:d2:08:57:c9:43:cc:ed:27:a9:72:
         d7:f6:84:d0:2a:4e:f6:57:f2:8b:5a:c7:37:94:0b:b8:fb:99:
         de:d6:00:b4:5d:a4:d8:da:de:a0:69:93:90:44:8e:06:23:04:
         44:a0:91:22:ba:b9:1b:0b:84:93:2a:fe:a0:25:f6:84:de:18:
         82:e1:79:b6:88:f4:2e:1e:80:89:3f:e6:04:73:a2:52:f2:b6:
         97:fd:e3:9b:51:2b:41:71:5a:9d:a8:a7:a2:e2:cf:22:4f:6b:
         e2:d1:6b:1b:57:63:a0:7b:95:b5:64:8a:0d:ab:7a:48:b2:e6:
         2f:9e:a3:d6:f5:bd:d4:63:09:96:32:ae:73:56:ae:29:60:f2:
         4f:b7:e7:5c:cc:13:9e:dc:ee:54:6d:4c:f8:78:ac:37:92:a8:
         28:21:8a:99:84:d6:c7:d6:22:8b:d0:22:65:34:ac:ed:6e:4a:
         69:e8:10:f7:e1:4d:47:aa:a0:82:9d:42:0a:a6:5e:22:5c:43:
         3f:02:73:5f:8e:66:ac:35:43:72:96:14:88:8e:27:51:60:c8:
         95:ea:9e:a3:71:e6:84:28:3d:6d:04:98:1e:26:33:65:d2:c3:
         c4:79:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----