Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File:                     YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier:          vmwEi9H5hIChBLGcJtNBVKNWbjOegeZSCRhk11B+ZjE=
Subject key identifier:   FB:92:2C:B5:64:03:3D:EF:F1:FF:DF:D8:0D:51:4C:67:7F:75:51:E3
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer:       /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial:       01962F3DABF1509707BD14C5D84D14388F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
                          2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: s4wGhOhj+z0xkn7oiqapGKjCKairG3LUM9ofcIlQc4g=)
                          3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ab:f1:50:97:07:bd:14:c5:d8:4d:14:38:8f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=fb922cb564033deff1ffdfd80d514c677f7551e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:d5:e0:41:1f:b8:d3:f3:40:a0:25:59:81:
                    d0:e9:df:29:4a:7e:71:be:03:c3:f7:d0:25:ba:e8:
                    ff:4b:99:c7:a6:99:7b:41:a5:84:5f:d4:1a:e9:f2:
                    d5:3d:96:b5:eb:2d:e7:55:c4:d6:f1:2d:90:ff:90:
                    b7:f5:65:0d:99:04:8c:e4:08:95:e9:df:c8:4d:00:
                    30:aa:f2:b7:0b:94:aa:27:4e:2f:7e:09:40:58:87:
                    55:8d:2c:2f:f2:c6:38:c7:c4:0c:d8:55:37:40:8b:
                    3b:f3:f8:45:92:a4:d1:67:fa:ba:35:57:2f:da:ab:
                    a8:da:93:56:08:e8:66:bd:f7:9a:3f:6b:c6:c0:9e:
                    14:91:71:3c:6e:a8:f7:4c:ef:e6:5c:a9:96:61:59:
                    8b:f4:3d:fc:86:0e:61:c1:51:0c:8a:39:19:45:1a:
                    b3:c5:44:6f:04:07:e5:06:de:f7:7b:86:26:43:12:
                    d5:c9:2b:90:d0:98:f9:64:ec:76:9a:f2:ab:6b:42:
                    54:98:4e:af:70:f7:78:45:46:63:e1:43:f0:21:fb:
                    bc:ed:98:a7:f9:11:cb:ac:0f:7d:3a:35:34:1f:4d:
                    33:12:a6:f1:01:bc:45:a0:df:e6:c0:ea:cd:80:5f:
                    13:df:8f:f1:3e:fc:2f:0e:d0:7a:1b:b7:71:30:31:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:92:2C:B5:64:03:3D:EF:F1:FF:DF:D8:0D:51:4C:67:7F:75:51:E3
            X509v3 Authority Key Identifier:
                keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f4:7a:b4:53:dc:09:d1:61:92:d4:b7:07:45:31:2b:8c:ab:
         db:2e:ee:ee:d1:e0:41:d8:fb:ad:2a:3d:4b:84:ce:fb:a4:44:
         93:f8:3a:76:b5:23:ee:59:2a:36:51:3d:40:f0:3e:bd:eb:1f:
         da:0d:3a:08:a8:4c:fb:30:59:31:20:e5:26:97:92:f1:bb:ee:
         eb:ed:b3:4a:8c:6f:1e:54:71:ef:f9:1c:75:2c:45:4d:49:de:
         ad:b3:bd:ca:1e:de:0f:73:b2:62:d8:03:42:ff:aa:78:04:f1:
         14:4d:1a:3c:bf:a0:1d:25:f5:05:97:ec:03:a7:a0:05:b8:55:
         cf:7a:1b:38:dc:0a:6b:a8:ac:a0:36:94:a6:d4:65:28:8c:82:
         02:18:8b:49:68:7e:05:97:25:df:ef:8e:28:7b:bb:7d:e4:f2:
         76:57:b7:21:e0:39:2e:b6:4b:a2:f2:98:a9:20:c6:97:4d:4c:
         2e:4a:62:3e:86:d0:05:2b:e8:19:1c:2e:9f:4b:ae:19:b5:0f:
         17:50:ce:a9:02:e6:99:5d:48:21:c9:bb:6a:37:af:67:d5:7b:
         4e:7b:f4:b5:e2:fa:0f:e9:c0:e9:76:4a:fb:a6:d7:80:c8:a4:
         fa:80:0a:3c:5a:7e:ad:b4:23:26:b8:44:62:3e:ff:1d:71:94:
         68:77:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----