Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File:                     YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier:          iZtFYk99CZ435BiyzKPVtU9s3xmYcLQl6BEJLZkJkYQ=
Subject key identifier:   AF:71:F1:70:E8:73:72:20:01:FA:63:66:FB:0F:B7:7C:11:BB:1B:74
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer:       /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial:       01962E618E3519BA0C002BC12E06D11196E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number:          10DE
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
                          2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
                          3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: 2RMpIPXvjDV3AjWLeIvjVOmMRoRI2s7GNPttqtNIuYI=)
                          4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:35:19:ba:0c:00:2b:c1:2e:06:d1:11:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=af71f170e873722001fa6366fb0fb77c11bb1b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:98:08:92:c5:ad:e2:3f:c9:6e:f1:11:46:
                    15:34:18:05:50:34:14:ed:f7:6a:8a:1f:84:6a:9a:
                    58:99:d7:f2:25:c5:f3:40:1d:79:19:fa:ca:15:6d:
                    74:a6:a9:e2:33:78:f6:6c:90:0f:bf:05:af:71:e2:
                    ec:1e:3d:7c:10:27:87:af:79:bc:ac:a9:58:00:86:
                    fb:05:d7:4e:73:49:8d:4a:93:50:56:0f:2e:88:d2:
                    ac:88:23:29:92:29:46:37:6f:60:6b:3b:9a:6c:6c:
                    d0:70:2d:9b:65:b8:d3:84:68:80:34:56:2d:91:4d:
                    d3:b6:c7:29:e0:2c:fb:1f:0f:b9:18:91:70:aa:de:
                    d2:83:43:dd:c4:aa:44:41:ab:81:8e:d2:fd:f2:ac:
                    6f:3b:a3:4c:2b:3e:68:d1:27:39:3c:1b:b3:83:42:
                    5e:e7:dd:39:88:b9:74:f4:af:5b:ec:b8:2c:35:ba:
                    d3:a7:e0:73:9d:18:b4:46:88:b3:20:05:41:58:eb:
                    40:b6:b8:15:eb:7a:b6:70:ae:fb:4f:d6:3f:e1:12:
                    18:ca:05:d1:98:8f:00:68:44:78:36:5e:52:e3:58:
                    ff:68:66:2f:d4:71:6f:bd:bc:90:f5:48:95:c6:53:
                    5d:9f:eb:7f:aa:a8:d8:7e:81:93:26:fc:c8:03:c9:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:71:F1:70:E8:73:72:20:01:FA:63:66:FB:0F:B7:7C:11:BB:1B:74
            X509v3 Authority Key Identifier:
                keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:09:50:2a:85:e2:8f:01:32:ae:8d:8f:a9:38:ed:20:1a:15:
         0d:a1:07:5c:b0:20:91:b5:4d:85:ae:a1:ac:61:5c:14:a9:5c:
         ce:a5:b2:8f:3a:ea:14:9b:d3:2c:ad:22:b5:42:7b:cc:a4:9f:
         64:80:30:01:ee:74:86:72:7e:de:c3:21:35:87:74:5c:a1:2f:
         05:56:01:b7:8a:04:6e:b3:d0:af:a4:06:d7:23:dd:82:47:f4:
         38:67:9e:e8:ed:b1:28:8a:7c:9c:76:62:31:a9:f7:af:f1:45:
         ac:90:d8:67:37:10:0b:4a:f5:c1:33:96:78:3c:0c:38:fe:c5:
         ae:07:55:f4:0b:44:ed:82:92:72:8c:bc:65:8f:9e:a5:32:0a:
         2c:ee:34:a9:1f:65:8f:a4:91:fb:d2:4b:ea:89:d4:e6:7e:14:
         ac:e4:33:09:a8:c5:19:21:06:ed:14:d7:23:d0:81:c9:0e:1c:
         dd:74:b0:6c:f9:44:52:23:70:6b:d3:65:d0:75:64:76:b3:40:
         07:f7:94:1d:6c:d8:e0:3d:ad:f1:d6:43:ae:4b:06:2c:72:db:
         59:8f:09:a0:32:d0:d0:2f:dc:02:8e:1f:7e:fe:cd:b4:b1:13:
         b0:ea:26:36:9a:44:cf:52:a2:13:bc:99:f7:c9:c6:26:2f:20:
         2b:95:34:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----