Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          0eOlVga0IPABwvTIAui+bXdS2eZY2OAKggz2rKAwUXA=
Subject key identifier:   5B:A0:8A:03:6E:F5:AD:F5:B8:D9:B5:56:EE:6E:BD:03:F6:F5:AF:09
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       01962F06B578899490E308F9A459FDCD06AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          04D3
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: ArFunhGUh4z5gE5BaMxIilumjuo.roa (hash: +Y+pIXJkKqGVxuRKoBP5VqtBPTsF8z5U0O22HLQqFaA=)
                          2: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (hash: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=)
                          3: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (hash: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: x9S9RMFh8jaDj/pSATjkWkA+ctGKAJfWFhiwjY77/7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b5:78:89:94:90:e3:08:f9:a4:59:fd:cd:06:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=5ba08a036ef5adf5b8d9b556ee6ebd03f6f5af09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:7f:a8:56:65:c4:6e:5d:a0:e7:13:4d:e3:
                    43:32:a0:2e:83:f5:3f:1b:09:51:e6:de:d7:a2:c8:
                    22:bb:27:e1:77:2e:6c:60:00:97:59:a3:55:18:ee:
                    f5:0f:86:93:90:4f:8b:dd:8b:ac:40:4d:60:96:09:
                    dc:28:7a:5a:f9:93:13:87:03:72:f1:32:94:40:a1:
                    ea:29:e8:7a:23:2d:83:bf:e8:eb:e5:94:29:8e:b0:
                    a8:7f:23:20:fc:e2:23:9f:7c:84:c5:89:94:4f:13:
                    4e:66:8f:d8:7d:2b:ca:ec:51:65:fb:b1:dd:e1:b0:
                    61:a8:56:45:2d:2d:7f:9c:7a:12:83:dc:0d:7f:8c:
                    1b:95:4a:de:76:49:21:66:aa:23:df:64:10:f9:d4:
                    ea:a9:e4:63:4e:ec:a7:70:a0:c2:80:1b:7d:18:51:
                    91:40:44:a6:71:32:34:80:f6:f7:82:11:7c:0a:6e:
                    8d:ec:47:61:e2:c7:d5:43:ab:26:06:21:c4:b1:32:
                    fc:00:8e:f7:b6:64:06:73:ec:a2:96:bc:0e:23:fa:
                    df:0a:3d:d6:c3:d1:b2:ac:99:83:dc:a0:af:36:59:
                    af:21:60:cd:49:87:8e:52:8a:b8:07:a9:ec:b6:f0:
                    fc:40:5d:5e:ac:b8:5c:17:67:c9:e2:c0:b1:c1:89:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:8A:03:6E:F5:AD:F5:B8:D9:B5:56:EE:6E:BD:03:F6:F5:AF:09
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:0c:2a:89:7e:ea:47:04:04:85:db:02:eb:c3:ea:6b:c1:
         0f:ec:82:6f:55:d2:cb:5c:f4:ca:5c:8e:4e:cd:e9:e7:ed:ad:
         14:b5:0d:85:b9:39:20:87:75:91:d3:81:f3:53:d5:4a:7d:83:
         bf:54:db:8d:bc:33:a6:cc:e2:bb:ee:11:23:18:d7:b9:78:fe:
         c0:2b:3e:6e:d6:41:2e:7e:78:54:b5:ae:e7:0c:68:8d:b8:58:
         4a:8f:37:6c:fd:64:1a:1c:f3:74:3b:ef:f7:df:c6:69:04:60:
         28:ed:35:9a:46:2c:eb:d1:5a:6a:a0:b5:e4:99:fc:56:15:cf:
         4c:e3:65:0d:7e:a9:3f:de:0f:8f:93:d6:57:0e:dc:2e:f0:46:
         22:7b:b8:27:f2:b0:25:ba:a6:57:23:7d:d5:7e:80:5d:1f:b7:
         bf:94:1c:86:a1:89:72:a7:75:51:ca:8e:18:af:5a:e2:38:67:
         b7:ae:fe:40:26:fb:01:d5:3f:0a:7f:f2:4a:96:e8:5d:3d:c8:
         e6:9e:1a:0b:31:9b:70:eb:a8:1c:ac:a9:eb:c3:d9:95:27:2c:
         0b:82:6b:4a:28:32:95:e2:61:e3:03:08:25:fc:12:57:45:93:
         84:a3:b8:53:d3:e4:89:3c:d5:ac:06:50:76:62:ec:1a:be:fe:
         b2:52:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----