Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File:                     yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier:          M0S05uhBVBY8NSUzBYQCAP3A/JVH5HuhXXVzy7uETyk=
Subject key identifier:   37:9D:76:51:EF:CA:11:0B:DA:AC:72:B7:6F:7B:E5:35:09:8F:8F:8B
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer:       /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial:       01962E9947E3C5F3BC79B1C1C7CD1BC42A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number:          0579
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (hash: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=)
                          2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: qQCviLb5riWPiC1APyemX+9vabNoC0D2Wu/FaCcVBaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:47:e3:c5:f3:bc:79:b1:c1:c7:cd:1b:c4:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=379d7651efca110bdaac72b76f7be535098f8f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:10:2f:3d:40:5b:5a:dc:ae:7f:40:90:cc:
                    48:53:20:20:3d:26:f0:8c:91:b3:cc:91:a6:07:02:
                    47:8d:24:56:0b:34:2a:19:8c:b3:c3:bd:98:7e:c4:
                    69:c5:21:cf:48:48:ba:97:05:7f:a8:a5:a8:48:46:
                    7f:b9:f2:86:cc:6c:2c:e8:5f:dc:a9:da:03:f3:20:
                    f4:57:ca:d0:71:a2:40:c3:76:f1:fd:fc:ce:87:07:
                    66:3a:e0:52:d9:5a:e1:ab:55:30:f8:af:6f:44:33:
                    b8:0f:2e:10:81:d2:07:d9:94:d6:56:23:cd:1f:73:
                    e6:e8:7d:5e:87:f4:fc:e0:05:0a:99:a9:75:89:68:
                    b9:ca:29:0b:76:aa:0c:39:19:f7:9a:8c:c9:a4:d5:
                    93:1a:57:be:a0:cb:8c:9b:89:88:dd:83:93:cc:da:
                    75:ae:ab:d2:c6:f7:59:8c:6a:f2:2d:dd:c2:db:ed:
                    18:86:1b:72:e5:7e:df:aa:97:7c:6f:8e:4d:9c:9b:
                    e6:a8:c2:5b:31:30:5c:d2:03:46:9f:8e:cc:7b:47:
                    8a:ed:6c:ae:d3:f1:bf:00:c6:90:cc:47:8f:2f:dc:
                    70:53:fb:37:4c:95:e5:53:7b:e7:8b:22:64:52:ed:
                    da:28:8c:03:82:51:f5:2f:c8:a3:94:db:0e:bc:f3:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9D:76:51:EF:CA:11:0B:DA:AC:72:B7:6F:7B:E5:35:09:8F:8F:8B
            X509v3 Authority Key Identifier:
                keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:f7:d4:da:d3:c1:02:97:c3:6d:9d:13:ed:d8:d0:fa:96:
         75:d1:76:84:1d:37:49:28:03:63:00:0f:e5:54:f7:41:c0:02:
         31:7a:0b:c8:cd:67:11:5c:9c:a2:da:6f:21:dd:ff:b1:c0:61:
         5a:4a:8e:2c:f3:9c:31:10:4c:b1:48:f0:03:86:41:87:ba:54:
         09:db:78:de:0c:6e:0e:d3:ff:a1:2d:fb:a6:3a:31:c5:5d:e9:
         e9:bb:f6:b2:53:97:33:64:4f:ee:7c:e4:54:aa:2e:1e:93:8b:
         58:6f:0c:1d:a5:fe:b0:5e:6b:0c:56:a0:e6:e6:db:b4:e8:e0:
         d4:eb:d5:49:f6:18:f4:99:3b:84:fe:55:a8:bf:00:50:ff:62:
         8b:fe:ff:58:34:26:5c:ee:b0:e5:94:48:4a:bd:83:f8:1b:0c:
         a3:9c:6d:2a:66:c5:eb:19:f8:14:c6:2c:6e:cb:fa:03:a4:c8:
         bd:8b:e4:2f:24:c4:c1:70:08:13:71:d5:44:65:ae:52:32:7a:
         66:4a:f2:5b:13:fb:38:fa:51:a1:44:c2:7d:2b:22:4a:fc:3c:
         cf:f9:e5:0f:ec:46:03:eb:d0:6c:fc:65:f1:82:e9:70:8f:60:
         d9:f4:b0:ab:8d:5a:a3:1f:4c:42:b9:64:d8:b7:00:62:be:bd:
         ff:f0:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----