Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File:                     ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier:          siLwDg7GzXv3sZibuqvdLXuw4Huly5rGmGKwKQhH/T0=
Subject key identifier:   1E:93:CB:DD:59:08:34:B4:0C:D5:4B:3E:54:88:85:7A:E0:DE:7D:C2
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer:       /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial:       01962F3D99C80585C43518398C4AA318C43C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: UvHXXFoVL7W8kRf_CmjRtC48uH4.roa (hash: E8q/i3b6Anio6852XqG98vgAFVWa9Xn560kQh/u0aSY=)
                          2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: nehTLnfyO2kbLKtobZT33SJzORqp9bXkYkDmRiZrPVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:99:c8:05:85:c4:35:18:39:8c:4a:a3:18:c4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=1e93cbdd590834b40cd54b3e5488857ae0de7dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:84:5d:0b:07:c4:f4:25:e9:1f:f0:35:58:
                    aa:15:d3:ca:38:de:54:f6:07:98:b5:ac:20:91:fd:
                    60:d1:3b:86:96:26:af:8e:c7:23:0f:c0:15:8d:32:
                    9c:6f:ff:41:86:a7:2c:79:a7:0c:0d:39:aa:ba:a3:
                    11:28:a8:ab:9d:26:b9:a3:ee:d5:8c:17:6e:80:a5:
                    53:81:7c:70:9b:68:0e:ac:92:03:4d:ab:46:7e:00:
                    b3:5b:d8:27:0d:b6:cd:f1:95:4c:63:33:a1:cf:f4:
                    02:63:80:55:b0:36:94:4c:e7:0f:db:d0:cc:2b:84:
                    1c:48:d5:07:25:72:e4:83:13:e8:c5:03:c1:87:4d:
                    80:48:4a:6e:8d:bd:22:e9:00:9c:46:f2:6b:49:9b:
                    2a:0d:a3:9a:4d:28:48:72:1b:43:17:65:6b:54:42:
                    8b:94:21:5d:6d:7c:f5:85:66:68:1b:ff:b0:7c:08:
                    79:83:ed:97:9b:01:c5:2a:69:02:18:7c:c3:77:7c:
                    c0:fc:6f:5a:3e:4c:72:f1:90:18:66:70:7b:80:c2:
                    82:6c:63:e7:f0:8e:d6:c3:34:45:dc:af:91:6c:81:
                    c1:bf:37:a3:42:1b:83:26:d1:7d:fe:70:a4:46:ed:
                    45:b1:2e:e2:8a:78:7f:14:17:e4:1f:89:17:c1:99:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:93:CB:DD:59:08:34:B4:0C:D5:4B:3E:54:88:85:7A:E0:DE:7D:C2
            X509v3 Authority Key Identifier:
                keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:0f:dd:8e:1b:24:a6:0e:ed:7d:bb:2a:99:47:bf:bc:c3:
         d1:4a:53:47:96:e4:fb:74:30:39:d1:0d:f7:ce:9e:00:7c:cf:
         fd:f9:a4:af:0c:02:fe:b1:18:c9:20:41:fc:21:e5:1c:ff:fd:
         51:ca:4c:eb:be:1e:64:06:2e:1a:24:01:2d:58:92:d1:40:04:
         87:71:fd:a3:de:f6:e1:05:c2:4d:ed:77:cb:db:87:06:75:c4:
         e5:6c:a9:4a:1d:9b:8c:17:44:85:a8:c7:48:29:f5:7e:a7:0c:
         09:21:66:d0:62:0b:d3:ae:92:e0:38:98:7d:14:44:3b:2e:8a:
         49:a7:19:6d:c2:6f:9f:14:1e:e5:70:6e:64:e7:04:26:b4:8d:
         64:79:30:da:ab:c3:be:99:da:2c:ae:6d:a9:23:02:61:e5:bd:
         4b:e6:0c:53:69:fb:7f:10:e9:7c:a3:3e:33:11:e1:59:12:6d:
         0f:4f:e7:c1:20:de:5e:f6:13:5c:8e:75:6d:a9:90:ea:a5:a9:
         c8:46:16:7c:6e:1b:42:c2:91:e6:47:5d:98:20:16:74:43:6d:
         26:8e:1f:f6:f1:90:1e:5d:0b:70:a1:09:1d:66:7a:30:d8:fc:
         c1:8b:54:1a:7b:ee:10:36:f2:90:0b:15:15:37:cd:66:bd:6d:
         1d:35:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----