Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          kqFaEI3UvFLslyAJJQW6ooJAZQt/lH3BMXxp05xdn3g=
Subject key identifier:   51:82:25:E8:2D:D4:B7:14:57:FA:6D:7A:82:C9:4E:BB:4E:35:0D:08
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       01962E618239B285BF33338F56A75D1590A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
                          2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
                          3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: TUD5THhGR6kXyIvbL4UHaHh64I686h3ynL5SK6f06fU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:82:39:b2:85:bf:33:33:8f:56:a7:5d:15:90:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=518225e82dd4b71457fa6d7a82c94ebb4e350d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:db:be:17:68:10:75:9d:cc:b7:f7:f3:78:
                    5f:55:32:a2:f7:ec:16:2e:31:20:f2:9a:f8:5b:92:
                    e5:3e:ce:be:c1:25:6d:18:59:e9:e4:dd:09:49:7c:
                    25:2b:94:ec:55:c9:aa:3d:70:63:d9:d7:6f:c4:88:
                    cc:bb:df:c3:33:d9:8d:f5:6d:1f:43:e9:41:7d:99:
                    7a:ac:ea:24:0c:0e:5d:3a:fa:7f:1a:a5:8e:fb:48:
                    a5:50:ae:9c:47:88:6e:98:8b:77:71:bd:62:35:c4:
                    21:8a:2e:24:67:fb:4b:fd:7f:a7:31:87:09:34:2e:
                    c4:54:76:e1:68:a1:91:59:ea:ed:f6:d5:e1:24:f1:
                    bc:8d:5e:cc:aa:f2:62:96:7c:46:a0:af:3b:7c:8c:
                    5e:f5:f5:da:f7:53:27:c9:2a:ac:33:d4:98:b8:ed:
                    99:1e:86:09:b6:8c:cd:0e:4b:65:d0:6a:de:9b:1b:
                    60:1c:ff:a6:0c:5c:6e:e7:ee:eb:1e:9f:86:a2:83:
                    cb:89:a0:60:33:06:ec:68:de:ce:07:ee:5c:3b:0e:
                    86:0d:bc:07:23:bf:0d:8e:a6:4c:d6:e1:78:18:ca:
                    b2:8e:50:13:92:3d:b6:81:78:b4:cd:f4:dd:f9:c4:
                    d5:7c:39:87:10:a8:fd:3a:1e:4f:d7:f3:a9:43:24:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:25:E8:2D:D4:B7:14:57:FA:6D:7A:82:C9:4E:BB:4E:35:0D:08
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:86:2d:dc:42:10:2a:98:d1:94:f1:4b:01:fb:97:cc:07:
         6a:88:2a:83:6e:24:d6:37:38:57:29:99:8c:8b:bf:38:92:96:
         22:d3:f7:77:3c:88:a8:9c:9b:d6:57:07:cb:58:19:b0:3e:8e:
         9c:fb:ab:bb:a4:cb:e7:eb:62:b5:86:eb:e8:21:31:91:76:f8:
         07:61:11:79:0b:b2:7f:d7:fa:ad:50:0a:38:8c:f1:e1:fe:4c:
         be:90:26:04:73:7f:c5:c5:bd:64:5b:d0:ac:f6:57:e5:b6:4a:
         dc:5d:77:6b:63:2e:75:bf:bc:88:61:9e:c7:df:51:55:98:b2:
         ef:fb:ac:58:3e:0e:d4:2c:98:ab:30:bb:d8:ff:67:03:8a:4f:
         39:95:a9:56:11:b3:0a:0a:6c:07:7b:66:ed:7d:5a:1c:19:65:
         d7:cf:f2:9b:a8:13:8a:72:61:74:22:ef:da:08:85:d1:a9:69:
         48:d8:fc:57:a8:96:d0:15:dd:9b:55:05:40:0e:d3:21:25:4d:
         28:4d:34:a8:86:81:a5:81:1e:be:71:d1:b2:95:8f:04:e7:32:
         38:0c:21:03:87:38:e0:d6:66:ed:9b:ea:97:64:b6:14:96:b1:
         c4:92:9b:1b:97:15:8b:3e:eb:21:ce:7d:ef:74:39:9e:46:c6:
         6c:0f:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----