Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File:                     yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier:          jLJ8h1TfhgUjTHYUuy/WBR7mkVOJ8gQaN3XLU9aNGXY=
Subject key identifier:   34:50:40:F6:2F:BD:C6:E8:08:78:48:5D:BC:B2:1E:2C:DC:74:FA:05
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer:       /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial:       01962F74E85F330C77B8FF1557E9424750B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number:          087D
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: yPAWHGmkHHtOCnPKeh+EvZj+WapJrXliFty8Q0w2uzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e8:5f:33:0c:77:b8:ff:15:57:e9:42:47:50:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=345040f62fbdc6e80878485dbcb21e2cdc74fa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:a4:82:45:2a:b1:3a:36:82:4f:78:8d:18:
                    5c:4b:8d:5c:22:2d:98:a1:68:16:ec:a6:e6:a5:e9:
                    df:74:b5:42:69:c9:1b:a7:5b:e4:03:e9:c1:93:11:
                    8e:ce:eb:e9:c0:a7:f9:67:dd:23:79:91:b9:b8:3c:
                    37:06:3c:92:2a:dd:9e:65:e6:39:69:b8:63:c4:02:
                    5e:a9:c8:5c:34:b6:17:61:16:bf:3f:8c:bc:47:bc:
                    2a:54:35:d4:49:3a:fc:4b:20:aa:e4:55:55:fb:27:
                    bd:04:e8:63:08:2c:27:74:70:54:f1:e8:3d:ef:48:
                    05:9d:ad:09:0d:c9:c5:f2:e2:4c:3a:be:94:b4:bb:
                    20:7c:a2:51:36:c7:f2:56:6e:9f:d9:83:b9:59:f8:
                    64:3d:cb:a8:b4:58:eb:4e:52:97:7a:92:6e:2b:82:
                    bd:18:20:98:17:d1:15:20:27:1a:31:67:72:58:c1:
                    72:8e:4f:de:e4:16:56:7d:5a:37:97:61:a8:26:e5:
                    65:19:6e:ad:9f:60:0d:6b:cb:04:ad:92:ee:dc:28:
                    cd:8e:3c:de:d5:14:73:14:b5:80:20:71:4f:7e:20:
                    69:72:d7:20:b5:02:6c:c5:37:c7:94:26:b1:7a:33:
                    c2:f4:5f:d2:c8:4d:92:cb:be:35:d6:a5:34:19:29:
                    91:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:40:F6:2F:BD:C6:E8:08:78:48:5D:BC:B2:1E:2C:DC:74:FA:05
            X509v3 Authority Key Identifier:
                keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:32:0f:d6:a1:f0:01:ef:20:c3:84:cc:6b:70:f0:cf:e9:f1:
         a4:a3:d2:ab:20:6f:77:d3:e4:42:46:4c:12:cd:3f:81:ac:d5:
         c2:c3:b9:e7:1a:7b:7a:03:0a:df:f8:6e:a0:c2:5f:09:bd:03:
         fd:28:b2:af:c7:47:75:ea:07:4e:68:93:27:c5:c1:64:36:52:
         df:f4:e6:aa:25:e5:fe:0d:11:bd:e1:09:34:e6:87:8f:ef:44:
         46:44:74:34:1e:6d:dc:a8:d3:37:0b:1f:21:00:75:45:b2:23:
         02:41:48:92:ca:b6:3b:fe:ff:86:7f:20:55:34:a6:d3:1a:a9:
         91:e4:fd:ea:a9:2e:2d:a5:e1:7d:09:24:96:26:09:aa:2e:d0:
         da:1e:d6:35:6c:f1:64:c2:ff:f1:67:38:a0:18:dc:73:aa:26:
         d1:ab:74:bf:f8:9e:7d:f4:10:f2:0a:95:f8:c1:a0:6b:a6:2a:
         e9:18:21:47:45:b5:6e:a0:5f:43:56:d7:8d:d6:29:d5:ee:52:
         56:35:68:2d:76:9e:e7:5f:25:87:9b:6a:e7:5c:94:95:b7:f9:
         21:aa:37:0c:fb:57:12:fd:39:d2:df:ed:7e:cd:ae:9d:e4:33:
         cd:ee:67:d8:bc:70:a3:a8:a6:dc:2a:e8:5b:49:f4:dc:53:ed:
         e2:4f:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----