Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          JQp7Z324jLDgSvcdKPb5lky3cjgsZl0ODzz9LVhTVVI=
Subject key identifier:   A8:B4:EA:99:39:1B:F9:A5:0C:5F:DC:D1:FD:7D:F5:FA:04:0A:32:30
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       01962ECF7C0B73A891DB74E7E5E894F4C1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 48xH5tEXWZ2vsePNnUQpi1Rtp9M.roa (hash: WHr/LpVgK5v2vj342g/pLR9Q+sJ3hUKQeA6ICsPwqVA=)
                          2: ETntAp8qWJdvAD1JKZJVCJAE9wA.roa (hash: hfJtS+VPVR6qaIkwB60e9Ssm1Fsvf2mGWUvaOy9P8yY=)
                          3: alVgOiGQaygKKfRiNXMQm1ojUWU.roa (hash: aOJQStyVH2msGIdBHorM0kl3RBtrxvSgZcDUWInDqNM=)
                          4: q3J9TtOoI-IBP0Qit4nrBm2KIQ8.roa (hash: 6P7QPyce2/pI9ok7uG9x267locOdLMrJCvEmCKSQLwA=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: jfdkUqSYhEuz66JJd7VynEAkKAsH/+MQ6snFmxnPlJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7c:0b:73:a8:91:db:74:e7:e5:e8:94:f4:c1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=a8b4ea99391bf9a50c5fdcd1fd7df5fa040a3230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:43:47:1c:76:9c:ba:43:89:33:e7:b0:56:
                    64:00:be:da:03:2b:b5:52:1f:38:dc:42:72:10:f2:
                    90:cf:b2:ef:e5:1c:03:7d:0d:70:3a:ed:4a:bb:b1:
                    49:6a:27:84:3e:69:78:e6:9a:4b:37:3c:56:d9:26:
                    70:86:d5:fb:6b:ed:fc:7b:7d:f5:84:ed:e5:38:08:
                    66:50:07:fa:81:c2:66:67:54:29:6a:7a:b0:ea:1a:
                    9d:8f:2c:9a:f9:9d:2c:57:53:de:ba:e3:9f:3c:45:
                    b4:d6:bd:20:88:5f:fc:26:57:ec:8f:cf:30:56:fe:
                    2b:69:47:b0:b8:43:ee:2e:ca:a3:61:b5:00:8b:20:
                    eb:93:91:38:5d:87:8a:bd:34:05:88:6a:91:eb:68:
                    c8:10:f6:65:42:0c:1b:e2:8c:9e:ae:10:3e:01:b5:
                    43:71:54:7d:f5:5e:33:60:cb:39:9c:cb:3e:3b:42:
                    e4:e7:e9:da:f3:0e:de:bd:6c:80:16:22:e6:e1:a1:
                    f4:7b:e1:9c:a0:6d:6a:60:ed:fb:5a:e2:82:44:2e:
                    c1:f1:75:8a:89:05:9f:c7:a5:7b:19:44:6d:ce:ec:
                    66:b2:04:7f:c8:1f:a6:0a:ed:9a:8f:71:a3:79:d5:
                    cd:60:29:84:c1:be:32:74:1e:97:91:76:4d:ef:1b:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:EA:99:39:1B:F9:A5:0C:5F:DC:D1:FD:7D:F5:FA:04:0A:32:30
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:be:30:93:b8:53:ae:3b:6e:c6:60:75:1f:dc:74:15:21:
         a6:a6:b0:53:a9:d4:e8:32:89:54:cb:1d:01:fd:86:92:a7:3f:
         d3:db:c0:82:27:e9:a8:08:f3:17:46:b4:8b:d4:1f:ee:ac:37:
         e6:5c:ca:67:61:1e:dd:21:d2:86:db:56:93:bd:ad:50:b8:5d:
         fb:1f:3b:24:e0:39:68:92:3e:94:d5:a6:65:d1:99:09:46:ee:
         34:28:0f:1b:6a:e7:ea:74:be:82:fc:4f:24:bb:4f:29:c9:69:
         e1:80:d4:c0:42:cd:55:18:f5:1a:4b:91:ed:6f:6e:cc:7b:7b:
         05:1c:19:7a:3a:a8:d3:1b:25:42:38:b0:b4:7a:ca:40:3c:86:
         3c:ec:0b:e9:f1:3e:b2:25:c3:b2:ac:33:40:20:c5:f4:4f:80:
         f6:86:1b:cc:19:00:0d:2a:ca:28:b0:82:32:ba:9f:13:cd:72:
         8a:7e:82:43:ce:ce:06:df:af:75:03:09:06:28:76:7d:04:31:
         ef:b6:65:a7:98:af:10:d1:a3:68:98:cd:83:5d:6c:fa:7e:55:
         4f:ab:86:bf:60:e9:43:95:06:8f:60:40:de:de:92:07:c7:91:
         4c:35:de:66:4d:ed:06:06:55:b3:b3:8f:b8:e1:bc:b6:1f:e3:
         74:54:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----