Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File:                     YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier:          Bu8Y9xw0LFmS5zJbe/jUQo+l0AN1XmYs1KZCFu9ecx4=
Subject key identifier:   0D:B9:14:20:17:59:B4:A5:23:6B:27:6A:A2:39:6D:6F:DF:00:DB:EF
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer:       /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial:       01962E2B2D9726E34A883749B11556094085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number:          0540
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 1Ha8srIAp9WOKKhksHpGuM5AJxs.roa (hash: eIlLhqb6Klu7eWMj9sibnBFq4kfPdmxjT0rsiJwbmWs=)
                          2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: jhuKclmRFltFQ8dcNK0pc0FNlIHVDpUyBf0O+vUy4Vo=)
                          3: vvup4VxriGQ7WP6VC9ScYtwxj1M.roa (hash: cPowMqqvBH4GyyJFrqoymf0AaQQSobEdpJ1I1I37kek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:97:26:e3:4a:88:37:49:b1:15:56:09:40:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=0db914201759b4a5236b276aa2396d6fdf00dbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:cd:13:1a:3b:3c:56:1a:c9:aa:97:a5:7a:
                    3a:bb:87:3b:c8:b2:a4:21:af:0a:e1:d0:da:41:14:
                    d6:f2:bb:fe:fd:a1:7e:3b:db:0a:48:5f:3c:75:66:
                    aa:c8:d9:f3:51:ba:e2:8b:1d:5d:dd:4a:19:20:59:
                    f4:af:da:4c:47:fb:67:72:66:3c:21:53:8b:2b:9d:
                    44:98:06:d9:0c:e6:e2:d2:6a:45:e2:6a:b6:9c:10:
                    8a:c1:0f:11:a9:e9:86:bc:4f:c1:ff:18:86:3f:fd:
                    30:45:d2:68:9f:d6:c4:94:29:ca:cf:1c:66:73:dd:
                    d4:68:4f:d1:e4:21:df:c6:1d:d4:fa:97:e1:fe:3b:
                    a7:17:24:49:66:b6:b5:26:bf:1e:c7:3b:5c:e6:03:
                    e0:df:b6:48:a5:6e:c7:1a:49:be:38:7d:6c:29:26:
                    79:0d:1d:5f:a6:db:ec:70:8c:1c:33:44:fa:1f:8a:
                    e4:82:46:b4:3c:61:33:54:e6:3b:5f:f2:1e:c8:90:
                    a4:00:ee:bc:1c:96:2b:8c:b1:72:7d:61:1d:f0:3a:
                    ba:37:9f:99:c0:d6:86:e1:95:02:84:bf:f7:00:66:
                    7a:11:d6:b9:91:8c:3e:53:9e:0a:3b:d2:39:c1:16:
                    96:69:eb:96:fc:bb:35:70:3e:60:8d:0e:3d:ec:25:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:14:20:17:59:B4:A5:23:6B:27:6A:A2:39:6D:6F:DF:00:DB:EF
            X509v3 Authority Key Identifier:
                keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:63:d0:fa:71:e1:ec:27:7f:da:99:63:e8:f8:0b:1a:d8:
         c3:f1:08:b2:33:1a:a8:f0:78:4e:91:a7:8f:2b:d2:56:94:54:
         6e:ae:8a:0f:2d:e2:f8:4f:a0:0f:f4:5f:27:53:e2:61:2f:84:
         3a:81:00:b8:1b:54:5b:8d:b2:0f:5b:26:37:b4:8d:d0:d5:2a:
         91:3d:14:f6:dd:29:2c:18:3c:68:1e:cb:b4:c0:e3:03:38:59:
         b0:e7:f3:3d:ae:5d:76:0f:86:e9:33:28:cf:52:ab:e3:c6:24:
         d5:3b:69:23:51:d7:ac:78:52:f6:a9:f8:4e:86:c3:fa:16:79:
         3e:59:42:a4:b8:84:15:e6:b7:a6:31:27:9b:f5:79:24:da:35:
         4d:4a:5a:2b:ba:59:5a:30:d6:c6:3d:a3:46:16:86:ff:47:79:
         6a:da:16:6d:8f:6f:45:03:75:d0:b7:e6:95:37:0b:bd:6c:fe:
         26:ab:59:e0:20:83:35:88:e6:14:e1:84:0c:ea:43:a4:39:cb:
         85:9a:b0:20:61:ed:a8:9e:78:a8:45:a5:73:d9:b1:ac:dc:1f:
         5e:a1:b3:99:4a:36:b3:8b:1e:31:e6:21:9e:11:73:3a:27:2d:
         92:cf:61:52:e8:cd:4a:f9:4d:e7:ab:65:0f:15:de:1b:dc:2c:
         14:c8:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----