Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File:                     Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier:          5LfXA4KtcVzvvYj4J0FaAmlqDlV42l9gPgpHidqQ6pc=
Subject key identifier:   24:E2:06:73:2A:D0:9A:4A:90:22:4A:1E:4C:40:BD:C9:13:68:ED:61
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer:       /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial:       01962F07463F3C0FAA6BB65CDF5F40C9662C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: d4EIpTCgUcHNYHvTUiFxyiKr4hYucFJ/iFlj7hM+6qo=)
                          2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
                          3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:46:3f:3c:0f:aa:6b:b6:5c:df:5f:40:c9:66:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=24e206732ad09a4a90224a1e4c40bdc91368ed61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:40:07:8e:e7:23:7d:c3:2e:13:fd:18:eb:
                    77:13:de:24:34:ee:c4:25:39:c7:7a:c6:cf:b5:d4:
                    31:ba:b2:da:b9:62:c3:7f:94:47:70:36:1b:f1:ff:
                    a0:12:fd:60:c2:8e:0a:db:47:27:ec:64:cd:01:c8:
                    05:5f:5c:de:68:d0:30:c3:5c:b6:72:44:8c:dc:a6:
                    3e:7b:96:33:78:f7:76:56:89:26:1d:0a:b9:03:01:
                    a9:69:80:f0:e8:f3:91:e3:32:1f:38:83:a5:26:35:
                    e2:c0:0d:16:56:25:b7:20:7c:d1:15:88:79:ef:ca:
                    e0:f7:fc:cd:a2:9a:ad:d3:4d:ac:d5:e3:71:b1:47:
                    15:56:97:16:ea:9f:84:bc:27:c9:10:c4:bc:c1:e0:
                    5f:9d:0b:cb:58:b9:3d:da:cd:f2:31:8d:63:0f:16:
                    a2:3c:a9:bc:58:c1:77:52:bb:01:67:52:12:4c:cf:
                    8a:96:cf:25:a8:6b:22:ac:cb:79:91:5e:26:59:e2:
                    33:02:76:d2:11:92:56:1b:52:6b:88:fd:3b:4f:5f:
                    c1:f4:ca:01:4f:01:9c:29:1a:02:e6:92:89:61:88:
                    91:50:3a:0b:4b:7e:c5:43:1d:ba:db:f6:4e:14:a3:
                    dc:f6:fc:9a:b0:00:42:58:66:90:62:36:94:55:83:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E2:06:73:2A:D0:9A:4A:90:22:4A:1E:4C:40:BD:C9:13:68:ED:61
            X509v3 Authority Key Identifier:
                keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:43:53:2f:69:77:90:da:0e:82:eb:8c:77:79:ba:bc:f2:ee:
         2c:53:89:4f:b3:c4:f3:cb:83:04:46:0c:ea:2b:e8:a3:ca:9d:
         f0:af:93:69:bd:cc:6c:11:17:4a:23:b6:db:f9:17:28:07:14:
         c6:02:df:ea:6e:4b:c7:fa:91:e2:8e:ec:79:90:99:76:67:06:
         b3:8a:9a:56:57:89:a5:11:e3:f1:27:1f:0f:04:dd:48:04:30:
         0c:c1:3f:98:d8:ca:1b:cc:51:49:79:64:0f:52:db:bd:c8:e3:
         2e:87:6b:6c:79:1a:cc:d0:37:ec:e7:2d:b6:08:86:e4:72:7c:
         5d:29:dd:81:58:77:c3:be:62:0e:20:e1:2e:5e:5d:a4:e0:70:
         28:e8:68:c5:81:30:5a:8b:c7:95:2f:e7:a2:a0:4d:70:d1:2d:
         43:b1:a5:25:35:e6:26:1e:48:24:3f:67:d2:0f:a8:7e:b2:00:
         cf:1b:08:ce:0a:21:b6:17:56:9e:21:8c:04:da:10:84:51:6f:
         65:1b:b7:3f:c9:f1:59:59:0f:49:54:22:6b:f8:de:52:69:36:
         20:46:72:7c:72:4d:77:77:e1:9a:11:79:36:41:b2:4c:2b:bd:
         3a:95:fb:fb:22:34:90:83:8f:1c:86:52:c7:55:2d:dd:4f:be:
         df:9b:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----