Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
File:                     Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft (raw, json)
Hash identifier:          LGrnPobgtZHqsV1HPiZfs0hazYMrw/b2eX28a/2mnVk=
Subject key identifier:   A3:2E:50:92:D3:E5:B0:F3:4E:5A:69:4D:6A:A1:F7:8B:92:96:BC:75
Authority key identifier: 62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
Certificate issuer:       /CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Certificate serial:       01962E996D64F05DC53D76D715F2232D0CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
Manifest number:          10C3
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl (hash: oKqwdoez6w1nEtzNb+bULMOOxH/j61tmT2UZM4heFPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6d:64:f0:5d:c5:3d:76:d7:15:f2:23:2d:0c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=a32e5092d3e5b0f34e5a694d6aa1f78b9296bc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:d9:a0:85:6b:57:fe:fb:31:c5:72:e6:8e:
                    29:95:97:44:7f:9b:d9:62:c1:64:c6:97:5d:33:8f:
                    66:fd:59:91:f1:18:15:74:29:33:e6:cc:db:55:3b:
                    0f:ed:04:e2:d8:6e:d6:b9:b4:ba:ef:aa:12:3a:c3:
                    63:2c:14:45:f1:ef:b4:9d:3c:46:2c:b5:3c:7c:a2:
                    ba:87:79:17:0f:2f:9c:e0:9c:41:1d:93:86:85:eb:
                    60:04:1b:33:64:e8:29:7c:1f:6e:1c:e4:bd:d1:4d:
                    c0:33:9f:81:2c:2d:bf:fd:26:86:50:51:90:5e:4a:
                    40:b8:5c:d9:34:6f:3f:f6:84:66:7e:86:9a:bd:ab:
                    c3:bf:41:cf:8e:0d:3e:52:16:49:f0:22:dd:41:93:
                    6a:19:45:8c:11:2e:a1:bb:d4:be:02:25:f5:cd:a6:
                    dd:69:5d:7a:5b:2c:59:0c:14:d5:f5:5d:0e:f9:b0:
                    cf:83:33:69:7e:66:ab:dc:72:27:4a:1e:aa:ad:c8:
                    a5:99:6f:a9:86:57:81:a0:b2:18:82:cb:b8:9b:58:
                    cf:92:29:8b:54:0a:70:c1:b5:ff:29:88:14:46:32:
                    c8:8a:4b:0e:da:31:a1:df:67:e3:ed:47:b5:0e:e2:
                    2b:d9:f0:c2:33:35:31:37:d7:38:e9:c0:2b:e3:a2:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:50:92:D3:E5:B0:F3:4E:5A:69:4D:6A:A1:F7:8B:92:96:BC:75
            X509v3 Authority Key Identifier:
                keyid:62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:80:8d:d5:2b:da:72:a4:28:1a:8a:9f:8f:7c:20:f5:58:
         d1:c4:bf:40:7d:af:4f:e0:1f:31:b6:58:79:0a:fc:bb:52:c8:
         2e:23:9f:2c:89:9d:80:2c:c1:1e:11:76:be:85:23:df:73:7a:
         81:9c:f6:25:b6:df:5f:c1:8e:30:25:95:50:53:c3:45:8f:d4:
         22:a9:f9:5f:9f:50:e1:1e:5c:2b:7a:fd:17:89:37:15:b8:c4:
         bd:32:6d:47:cc:b2:4a:bb:98:84:8c:4d:be:1c:b0:1e:b9:c9:
         d7:8a:7c:0d:c1:7a:05:f1:3f:17:80:3b:5f:22:26:68:73:e6:
         06:b4:ae:c3:da:5a:6b:4b:60:60:29:77:48:f0:70:ee:8d:46:
         60:78:0b:ca:78:cb:ac:a3:98:af:e4:a7:cb:84:f2:47:d4:26:
         c8:ff:a1:f2:c0:30:47:00:33:41:d7:44:ab:10:53:b7:c9:63:
         d5:9d:6a:f4:5e:eb:66:88:02:b7:03:68:22:ba:aa:69:eb:7f:
         59:96:7b:57:c1:c5:e2:97:3d:7f:26:b3:8f:5d:5c:c2:54:3b:
         0e:66:b1:b5:af:3b:6c:bc:ee:87:f8:04:d8:93:23:42:10:91:
         d3:a3:7a:34:9f:1b:c6:44:99:ba:f0:72:e2:5d:79:84:4f:3c:
         c2:39:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----