Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File:                     ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier:          DAk1GkfUWBcZMNB8x3V2unc3MacoXtAdmP431s623is=
Subject key identifier:   F1:DE:0A:7E:9A:A0:81:C4:08:30:42:AE:8D:13:B9:79:0B:FD:21:94
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer:       /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial:       01962F7434F6E2423C773A950758482FB3B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number:          028D
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
                          2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: l0SHj/aSobDrh7XrtcBBTpkOnSgfw7TR1feW0Rb4Ul0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:34:f6:e2:42:3c:77:3a:95:07:58:48:2f:b3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=f1de0a7e9aa081c4083042ae8d13b9790bfd2194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:8d:a2:0b:0c:86:97:1c:6e:4a:c0:66:92:
                    a9:bf:99:f4:6f:05:78:ef:dc:80:b0:ee:92:4c:1c:
                    d1:0a:99:be:10:62:0d:13:b7:29:81:e8:cd:01:51:
                    38:44:74:dd:4f:1d:09:67:18:f0:67:c0:1a:71:72:
                    43:26:55:7f:28:b3:b9:1c:b1:58:e0:41:3c:ca:a8:
                    9f:19:b8:9c:34:66:18:f1:81:4c:03:20:cf:8d:67:
                    12:b6:8e:d4:d0:15:77:5d:cc:49:20:b0:21:6e:d5:
                    48:44:d7:35:4f:5e:c1:5a:ef:a3:95:0f:d1:18:ec:
                    32:2d:3f:a4:84:c6:e6:48:c7:17:d7:14:40:7f:17:
                    82:17:4e:7c:38:3b:d6:4e:97:a9:68:9a:7f:ae:3d:
                    d2:74:f9:f4:a4:f7:5b:cb:f9:5f:24:23:e5:0a:45:
                    b6:66:25:f1:c8:7d:f9:93:b5:7a:24:2d:cf:9e:cc:
                    29:57:96:ef:81:82:e2:1a:07:37:62:52:b5:8d:f6:
                    43:07:dc:f0:1a:e3:53:c0:e5:6b:cc:f8:ef:e7:63:
                    f3:9e:dc:e3:ff:98:a2:1d:77:86:c8:87:60:4f:59:
                    35:23:bf:bd:7d:f2:df:b0:f4:83:18:df:ac:ff:1f:
                    1d:45:4e:5c:0b:ef:e5:8e:1d:8b:ed:45:29:3e:db:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:0A:7E:9A:A0:81:C4:08:30:42:AE:8D:13:B9:79:0B:FD:21:94
            X509v3 Authority Key Identifier:
                keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:20:35:94:9a:24:53:7c:b2:a6:c9:ed:5f:d3:34:74:05:64:
         15:26:e6:db:4a:33:17:d3:fa:ff:c4:ac:f1:f2:da:76:7c:fa:
         d9:3b:93:9d:20:52:f3:4a:f3:0f:95:c5:a2:c2:0f:5b:63:5d:
         13:76:57:55:f8:b8:ea:7a:52:58:33:0a:29:10:a5:aa:aa:e7:
         68:b9:42:bb:9c:0e:fc:66:a2:1a:a7:82:1d:d4:b7:dd:53:b4:
         77:97:8f:da:3a:5a:66:6c:1e:43:89:31:2e:ef:76:56:22:da:
         fe:a0:e4:2b:4a:03:03:f0:a4:61:59:38:6a:4f:49:74:7f:b8:
         44:40:26:ac:12:37:95:7b:3d:14:b9:02:a1:23:23:ce:5b:d8:
         31:7c:ae:d5:96:6a:81:04:be:08:d6:88:18:a3:ba:8b:ef:c8:
         ec:67:49:29:75:3f:0d:db:f9:b0:0b:9d:c1:28:5b:c2:5d:39:
         2f:71:a4:75:df:fe:e2:87:02:2c:05:54:2e:b7:e4:6c:29:e0:
         49:6a:4a:ce:d4:cf:87:12:b0:8b:a3:ed:83:d7:9a:07:04:51:
         84:08:53:34:90:90:ce:bc:86:8f:83:82:28:08:b9:b3:1c:fc:
         31:c7:a2:aa:4a:c0:63:9a:1e:c9:6a:b2:f4:3f:8b:1b:4a:27:
         4c:11:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----