Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File:                     Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier:          LGxboPc6UCHfY1yTeek+EGeEJd4PyBmHndMufVXC46I=
Subject key identifier:   B9:E7:75:D6:57:7B:72:5B:9E:49:C9:94:3C:9A:A6:E3:B4:67:6F:36
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer:       /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial:       01962F74D3458CBF5045F9B185A07705DE3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number:          0DAE
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=)
                          2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: r3knScfK4suxOaBBXRE6Hxe2yZVm+BAyyuSv64+mta4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:45:8c:bf:50:45:f9:b1:85:a0:77:05:de:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=b9e775d6577b725b9e49c9943c9aa6e3b4676f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:7c:22:22:f9:a6:f6:42:1c:f0:70:90:6d:
                    d1:62:e8:b7:25:42:78:fc:dc:13:60:3d:e3:c5:d3:
                    bd:66:c2:84:93:d1:ff:1b:63:58:b9:6b:44:da:d1:
                    36:a9:e1:3a:aa:42:c0:fe:83:ef:bb:41:ab:1d:c1:
                    fe:86:83:a3:9f:1f:c4:6d:a8:f2:a7:7b:66:13:fd:
                    6c:40:4d:b6:f5:92:22:bb:20:ff:83:84:9f:88:88:
                    94:ce:f1:01:e5:ed:d2:6e:b7:1b:e3:3f:89:81:72:
                    ee:36:e7:a6:2d:b7:14:f2:af:67:53:1c:43:b0:97:
                    3f:fd:ee:89:72:c4:f8:14:8d:61:55:c2:20:bb:83:
                    e9:ae:3f:cb:f2:fa:9e:4a:9f:b5:f3:c9:b4:96:65:
                    f2:86:97:8f:d6:31:a1:3b:b6:05:ef:fe:7d:17:cc:
                    4f:ae:b9:72:65:d2:b6:2c:52:3b:e3:84:da:50:3e:
                    11:f7:3a:66:7e:49:84:f0:4f:b2:32:f3:33:f9:6c:
                    48:ef:6e:c8:42:fa:ef:6e:7c:ca:95:7f:82:35:ad:
                    6e:9a:52:67:08:58:42:7b:5b:14:6d:ff:68:49:f9:
                    d6:b5:dd:3b:10:23:62:31:ee:d4:52:84:e9:8b:a8:
                    34:94:ee:fa:68:28:ed:cc:93:ab:76:6b:ce:87:3d:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E7:75:D6:57:7B:72:5B:9E:49:C9:94:3C:9A:A6:E3:B4:67:6F:36
            X509v3 Authority Key Identifier:
                keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:ee:fe:a1:eb:40:12:b4:2d:fc:db:2f:fa:8c:5f:d4:6b:
         d2:3b:1d:7a:dc:f1:04:d9:12:6b:04:9f:c5:51:0c:6d:85:9a:
         d4:a9:0a:3e:5f:b8:e5:1f:ae:94:ee:91:01:5e:61:ab:39:05:
         08:61:0f:f0:a9:89:a0:8f:c5:8d:04:ad:5b:65:30:93:34:bf:
         9d:c7:8e:18:1e:dd:19:b4:a5:49:7c:72:30:0e:f1:8d:6c:73:
         dc:ff:8c:03:bd:16:f8:39:2a:5b:22:99:3e:3d:43:ab:0c:60:
         b5:84:39:f5:4d:ae:33:c6:90:cc:e2:55:28:a8:3e:1f:34:b4:
         65:b9:09:50:f5:d3:d0:da:f3:d6:8c:94:a6:3d:95:49:bd:a0:
         7c:02:d5:46:da:cd:74:ca:a5:b8:52:10:48:ac:2d:92:85:d0:
         a2:ce:b2:8f:71:93:32:d2:f8:bd:0e:f1:85:90:ac:96:de:85:
         52:ac:18:48:44:21:77:2e:e7:3c:ef:4a:2b:0d:76:cf:55:20:
         6b:07:b6:3a:7f:4f:ae:d5:ed:4d:81:fd:4f:de:45:6f:db:e2:
         aa:7d:7c:ac:fb:7e:af:48:52:9c:a8:4a:a3:d7:8c:71:7f:1c:
         32:c6:e6:36:21:fa:07:03:38:3e:66:35:19:18:db:ea:23:f5:
         1e:2b:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----