Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File:                     YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier:          sW3BR32Q4TNBQ7XGqHfgdUf1Z51f9BHqdCU1zvo8+Fs=
Subject key identifier:   FE:A5:03:8B:D7:38:3E:F3:B2:12:A8:FA:1E:46:EB:DB:56:E3:94:EB
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer:       /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial:       01962FAB9272AE8585832CF1C8B0E9588762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number:          0FAE
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: WjSEXS8alJ90oB5Ba/1RoUnBkyuxA7D6tkPx/B3TPCI=)
                          2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:72:ae:85:85:83:2c:f1:c8:b0:e9:58:87:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=fea5038bd7383ef3b212a8fa1e46ebdb56e394eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:12:9a:f9:1f:16:58:e9:27:25:eb:20:bd:
                    9d:1a:f7:42:fd:82:89:20:22:a1:ff:19:6b:a4:4e:
                    c1:8e:b7:72:c1:26:85:4f:c0:63:5f:6d:2a:ae:66:
                    1c:5d:f9:d5:8e:5b:1b:3f:8d:a3:82:ec:9a:24:06:
                    7c:fd:06:97:cc:c3:07:bb:5b:26:3a:9f:c6:83:28:
                    fc:44:1b:64:e0:46:ef:ec:34:31:58:9c:a4:0a:f3:
                    a4:54:f3:df:a3:0b:ce:6f:00:fc:37:e8:2b:37:5b:
                    35:c5:87:d5:be:15:48:6f:dc:fc:f2:34:16:b2:e8:
                    e1:57:aa:f6:0b:b7:98:15:a1:36:d2:03:dc:0a:6a:
                    f5:36:a8:04:ba:4e:70:cf:38:00:eb:7a:e7:c7:5c:
                    e7:10:a3:70:15:89:a8:a6:7c:c0:c6:31:81:85:1a:
                    af:c5:0f:80:9e:b6:c6:87:b8:2f:4e:1e:5e:c0:cc:
                    90:63:1f:31:54:1b:b0:b5:3e:cc:52:92:2c:2c:d0:
                    93:53:cd:10:85:fe:22:1f:5f:cb:40:e5:1b:99:d4:
                    a5:7e:87:90:67:fe:26:33:31:a9:d0:b7:6b:b5:2c:
                    65:ca:0a:45:71:ac:c4:4a:40:fb:c5:50:74:f9:13:
                    45:28:3b:32:df:17:38:8a:00:58:1f:6d:5b:58:36:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:03:8B:D7:38:3E:F3:B2:12:A8:FA:1E:46:EB:DB:56:E3:94:EB
            X509v3 Authority Key Identifier:
                keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:01:96:27:41:08:05:1e:68:19:a6:f3:fc:cd:ab:0d:b4:6c:
         68:21:b9:09:7a:f0:f1:e6:b8:b0:1a:95:ed:ea:58:09:99:0d:
         d6:2e:31:38:54:94:23:9c:2b:c8:18:72:07:c5:2e:b0:b3:41:
         63:09:f1:2c:26:ba:5a:17:a9:c5:5a:99:8f:3c:fc:95:dd:34:
         b5:70:a4:3e:fc:7d:53:07:dc:8f:bd:d8:9e:f7:b6:90:29:54:
         49:4f:49:72:82:86:8b:57:bb:1d:a1:15:86:72:05:38:c8:bf:
         b4:81:ec:f5:44:55:cd:16:6a:20:36:51:b8:f6:cd:5c:a2:40:
         fc:66:cc:8b:21:21:34:52:bf:72:6a:f5:e3:fe:b3:fb:a2:43:
         3b:70:83:64:aa:01:66:98:03:02:d6:d0:37:1d:94:8c:ac:f3:
         3d:d9:b1:dc:4a:c8:9b:21:b3:cf:92:87:a9:7e:9b:7e:84:83:
         be:cb:bc:ff:34:0b:51:f9:ed:d5:73:88:9d:e1:5e:18:4e:6f:
         1e:98:1a:12:7a:66:a5:91:9c:6a:1b:6c:e4:cc:a7:ab:cb:a0:
         05:94:c5:2e:97:23:1b:43:e3:96:28:cf:b0:29:a1:f0:19:4f:
         e6:c0:17:d5:ae:2c:4c:d5:df:3e:3b:e5:e7:87:58:72:1e:ef:
         f4:0d:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----