Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
File:                     YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json)
Hash identifier:          EfQ2yjUh77/JDRTFZyXlELDpJeSUW6sEiDTYf+REOSY=
Subject key identifier:   23:B9:B7:82:C0:87:28:23:E0:99:6F:E4:48:B6:45:79:DC:A7:2C:3F
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Certificate issuer:       /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial:       01962FAB4DE3B53DFD3AE515E3E0288F1E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: h5BbVCozRs2JVD+sBYci5Q0ZADJFV1vMHw/adpOCBVQ=)
                          2: zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa (hash: YZzvXulBT76YYOeLZF1dhxyHao92MWHlpmNInJlWXUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4d:e3:b5:3d:fd:3a:e5:15:e3:e0:28:8f:1e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=23b9b782c0872823e0996fe448b64579dca72c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:89:fe:e2:37:d4:8e:9a:f4:0e:ae:8c:bb:
                    92:74:03:f5:58:3a:e9:a2:4b:ae:c5:ab:f9:84:d8:
                    7c:b0:cc:ef:f8:35:77:47:8c:cb:8d:bc:2d:99:d1:
                    1f:38:4f:8a:e4:a4:c7:e3:d6:8e:60:ad:b1:c7:e3:
                    a5:96:cc:0f:d8:9d:1c:4a:62:d4:7a:9b:a9:a6:74:
                    90:fd:21:34:d1:18:e5:db:4d:5b:cc:fc:f8:d9:02:
                    d7:65:4c:74:0b:c2:7c:74:85:97:d2:02:5b:4f:4c:
                    87:38:fa:2f:9b:ab:d0:15:e7:64:0c:28:ec:80:95:
                    1a:59:33:85:b0:23:d0:5d:14:28:ec:89:3a:72:32:
                    88:53:c7:e4:af:4b:9b:51:06:94:97:f7:36:95:47:
                    f9:4a:40:67:7d:69:37:e0:87:1d:d2:d4:f5:56:76:
                    4e:f9:0e:26:d9:c0:29:6e:bd:9a:63:fa:f7:e8:cf:
                    60:e3:f4:ca:de:e6:79:c5:78:f4:fb:45:7f:06:e4:
                    33:86:1c:40:b4:a7:15:0f:5e:b4:55:91:89:a9:2b:
                    01:54:41:fe:4b:1f:0b:4f:b0:dd:12:18:41:c4:83:
                    e6:16:56:88:76:e9:cc:5d:ae:5a:ac:16:a9:d1:1b:
                    eb:00:e7:a0:40:a9:78:01:8a:35:43:df:ba:3d:fd:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:B7:82:C0:87:28:23:E0:99:6F:E4:48:B6:45:79:DC:A7:2C:3F
            X509v3 Authority Key Identifier:
                keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:15:ed:99:47:fa:e3:0f:f4:6f:26:b0:55:4c:e8:d9:37:d5:
         35:85:33:c0:e4:b6:d5:06:b8:46:fd:c0:3e:7e:79:55:d2:15:
         ac:eb:e2:92:5d:7d:58:e3:c9:e9:21:ed:b7:26:6d:47:d6:9e:
         20:60:b0:62:54:70:a2:b5:91:52:3d:38:91:2f:4c:e1:9d:25:
         09:dc:d7:95:00:d8:83:02:46:f2:f7:9e:04:32:f8:06:b8:7f:
         82:37:79:79:73:db:08:48:02:e3:f6:ea:1a:64:77:0e:a7:80:
         a6:4f:f2:17:9f:5b:3f:ca:03:57:38:c4:39:94:1a:95:eb:96:
         6b:52:d7:30:73:9f:26:ef:1a:72:e8:fb:4d:3a:48:93:60:b0:
         b2:38:b9:19:93:e3:98:fe:45:e0:46:92:2b:4d:3d:4c:25:b2:
         cf:00:9e:25:7a:42:27:61:5c:90:10:3d:f9:17:e4:c8:5a:2b:
         79:75:25:ba:e2:8e:0c:58:0f:5c:00:72:12:7e:58:91:6c:fb:
         4e:00:52:f4:bb:a8:d2:90:bb:f6:77:b8:d6:f9:f6:58:ff:d4:
         d2:1c:9c:95:3d:f3:62:be:d8:31:e8:e0:82:3f:70:f2:ed:d1:
         a9:0b:c5:bf:bc:10:02:c9:e7:f4:76:62:9b:58:75:2e:70:85:
         69:4d:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----