Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File:                     yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier:          FIKOCTwJPZfe8QpmrLw9Pio/k/+d/jZ54cNmQ+g6AnM=
Subject key identifier:   4A:8D:CD:88:37:98:02:51:77:06:FD:D7:38:EB:AB:5C:BA:9E:33:03
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer:       /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial:       01962E61E129D4486A7C9B83B5D74009AEBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number:          031F
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: nGn_W0gSwBrRPKhat5R4cEQoqhY.roa (hash: XVU8sWeUw+6VazizBI8PMCmNF85+iRw+0SNowFdIf08=)
                          2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: I1wH1bCD903grjFPucDgQUbzGyddM322/3EPQ36h+Ak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:29:d4:48:6a:7c:9b:83:b5:d7:40:09:ae:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=4a8dcd88379802517706fdd738ebab5cba9e3303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:84:ff:03:70:ab:3e:fd:82:a4:5d:6c:ae:
                    8d:9e:da:21:52:d4:bd:09:7a:cf:c1:3c:35:ee:c3:
                    91:62:3e:33:ea:67:e7:a9:73:b0:b1:67:3b:7f:59:
                    0a:bd:f2:1a:93:93:7e:67:3c:c1:ee:c4:1b:50:45:
                    eb:97:1d:bb:3e:5f:84:92:e0:7c:f8:98:f6:dc:ff:
                    0f:c2:ba:f7:ee:6c:38:28:41:35:01:e0:83:01:44:
                    04:84:e6:ce:ac:32:e4:b3:b1:51:c4:8b:3a:41:df:
                    a0:97:bc:02:01:94:92:6f:fb:08:b2:18:73:e6:17:
                    e3:0f:2c:bf:1b:6d:0b:42:2e:a9:eb:a8:de:fa:12:
                    0a:43:93:42:e2:76:15:82:a0:1b:9f:f1:26:e5:70:
                    59:0d:ab:58:d8:ad:20:01:38:74:1f:33:72:66:3f:
                    da:65:a8:c2:5a:e8:f8:2c:69:61:41:1e:24:23:93:
                    fc:c2:c3:32:29:0d:98:eb:f2:1e:e7:db:75:8a:f8:
                    d4:8a:7c:40:b3:aa:93:42:6d:95:b4:5a:10:d2:95:
                    41:66:10:ce:98:75:cf:35:ec:fd:e4:e1:07:0f:00:
                    c2:3f:c3:31:6c:8e:c7:bb:ec:e4:89:d9:f2:9d:85:
                    13:41:b2:53:1a:30:4b:70:90:4e:dc:7a:54:6d:e3:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8D:CD:88:37:98:02:51:77:06:FD:D7:38:EB:AB:5C:BA:9E:33:03
            X509v3 Authority Key Identifier:
                keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ea:00:b8:45:92:7f:35:60:ef:74:a5:fe:04:04:fa:2c:57:
         ca:6a:b2:e3:db:05:74:0d:e2:b5:f7:5a:94:38:ff:a6:f5:72:
         eb:37:fb:ef:42:fe:46:3e:cb:df:c8:50:91:13:c7:4c:17:bf:
         bf:ea:be:5a:49:10:0a:0a:e5:5d:1a:9a:82:74:33:3e:14:c4:
         43:45:ea:6a:9a:5a:ff:72:37:07:10:66:f5:ff:e8:4f:ec:5e:
         fe:27:61:ce:ee:a5:be:ee:09:f3:68:bf:3d:06:65:f4:73:f7:
         ea:5d:01:4a:96:95:9b:ef:3c:ba:12:46:57:4f:56:18:00:74:
         ae:94:8d:62:4c:58:1d:03:0e:d7:c3:ec:c7:5a:a1:c5:db:db:
         b9:77:9f:74:cb:42:97:fb:66:3a:fa:0c:07:c8:9f:9a:54:a2:
         64:fb:a7:74:dd:98:f4:e6:80:ed:9c:71:76:4f:d5:3c:d0:d2:
         6e:da:44:15:08:9a:8a:77:27:5a:b3:1b:b7:63:32:e3:c7:32:
         7b:61:37:51:fe:bf:17:bc:38:fc:27:75:ae:14:c9:a1:d3:81:
         18:33:cc:ef:87:52:aa:a7:60:5c:40:c1:92:69:46:c2:a8:a9:
         ea:3a:f4:6b:07:22:64:a7:1b:fd:cb:1d:b2:48:c6:41:cd:75:
         bc:e6:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----