Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File:                     YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier:          C9t/C8XfpZmYoQcggHYNXTZSj3uIvEUAWLmrlO5kzAQ=
Subject key identifier:   E1:08:55:40:E6:A9:CB:85:71:3A:EF:01:08:7B:24:B0:3C:25:9E:6E
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer:       /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial:       01962E989B83E9DB7DF6D2F9D1E262771F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number:          1508
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (hash: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=)
                          2: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: 77JE6DH8fY6MYgiyWEm1i28GQo8bBYgGOkxDPPWqMw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:83:e9:db:7d:f6:d2:f9:d1:e2:62:77:1f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=e1085540e6a9cb85713aef01087b24b03c259e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:90:bf:b7:72:8a:3c:66:4f:85:35:cd:73:58:
                    9e:b0:2a:b2:d4:77:09:21:1d:52:8f:61:ab:25:40:
                    99:db:e1:05:45:8e:53:5c:61:c8:4d:f3:63:34:06:
                    d1:d2:4e:d1:ba:3c:46:54:e8:f8:aa:0a:2a:14:1b:
                    cb:48:65:17:dd:eb:80:e0:48:1f:1c:1b:98:08:8d:
                    40:b6:36:dc:24:3c:10:9b:63:77:ba:fc:81:09:68:
                    18:4e:2a:5d:b1:b6:77:f3:d4:e9:85:7c:ab:ab:08:
                    bd:2a:07:59:4e:3f:3c:4c:4b:5f:55:96:71:ef:57:
                    97:cb:f3:26:ea:38:ac:71:8c:20:af:9e:cd:ee:6c:
                    b1:f5:fe:56:97:b6:f1:69:0c:0f:5e:67:c3:9c:1c:
                    1c:ee:81:7c:c7:4d:42:cb:37:1b:39:c8:f6:77:9f:
                    39:13:7b:5b:ac:c1:41:54:dd:4f:2e:b5:06:e1:db:
                    82:49:29:3c:7e:41:8c:30:fd:91:86:e9:c3:94:ce:
                    e9:58:64:f9:da:5b:20:fe:68:bc:29:0e:a6:02:23:
                    b7:8e:c8:c5:6d:92:7e:eb:18:b5:f7:fd:3f:bd:a0:
                    8b:b1:aa:4c:29:1d:af:34:32:bc:fe:0b:9d:3c:39:
                    c1:f9:6c:03:a5:65:45:f7:cf:c1:fd:c2:0c:0c:5f:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:08:55:40:E6:A9:CB:85:71:3A:EF:01:08:7B:24:B0:3C:25:9E:6E
            X509v3 Authority Key Identifier:
                keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:4e:b0:ff:65:1a:0b:a8:3e:41:f3:75:66:b5:db:b7:b7:
         c4:6d:f4:8e:3c:0a:30:e8:b0:98:96:99:7b:67:f0:cb:76:e7:
         6d:34:1c:1f:07:bd:e3:8b:aa:97:f7:95:83:f7:6f:ac:50:22:
         70:1d:5a:0d:a3:30:5d:93:21:63:2e:e6:f3:86:60:8b:76:63:
         22:2b:fa:a3:39:e4:e9:45:ce:97:74:e1:20:5f:27:ed:e8:7d:
         07:8d:8d:bd:78:cb:87:3c:2d:3c:11:98:a5:99:88:b8:e9:60:
         c2:b0:75:61:11:a8:86:d0:dd:ad:4c:68:8d:4b:b0:00:1d:c1:
         5b:c0:9c:06:aa:b9:ed:66:8b:5c:52:2c:25:b7:01:86:e4:ee:
         53:15:78:c9:35:aa:b0:06:db:12:f8:e1:81:31:b2:77:e4:12:
         b0:a8:eb:35:ef:70:5b:9e:ba:28:f8:0b:4e:2c:53:95:47:54:
         a5:6f:5f:1d:42:f2:c8:93:cc:06:32:6b:30:f7:35:3e:2f:f2:
         d5:39:f4:05:c2:ad:d2:bd:53:ae:9c:ee:26:c7:8a:8d:7c:2c:
         a1:dd:61:51:95:3c:2a:27:d8:0b:13:92:3f:2b:25:79:b1:4d:
         a9:93:e7:68:b6:e7:aa:1c:fb:34:fe:f7:e4:0e:58:bd:f6:33:
         ba:7f:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----