Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File:                     ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier:          o3k1r4rHLZFASU89XXkEVchbgovfyqGhXCv0iUKEhZw=
Subject key identifier:   3F:BB:3C:FD:A4:60:86:E7:7A:A1:C9:F5:84:62:87:42:BF:94:7B:DE
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer:       /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial:       01962FAB5D36D6359802E4F2BA793A1FF259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number:          0341
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: AVYBUHDR8cllHf1Clp-tHJ3mnJM.roa (hash: AnG8BWUfPxV5o1EC1SevW/uoDYd+aQAPwe1f/26+nZM=)
                          2: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: drjOSlHqGrVrKaRvgYR3NJzVnDbMqOlkex5kwhj8aTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:36:d6:35:98:02:e4:f2:ba:79:3a:1f:f2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=3fbb3cfda46086e77aa1c9f584628742bf947bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:29:da:85:7c:33:95:8d:96:ea:54:64:a3:
                    e8:ef:9d:c7:96:94:33:78:2e:43:5c:be:5f:6a:f7:
                    b8:7b:f2:db:81:d0:c2:e6:71:7c:86:b2:ea:f8:c1:
                    13:69:34:d6:cc:89:4c:bb:c7:73:6f:c7:51:1d:4b:
                    0e:29:61:93:ed:23:af:c7:b5:78:77:cf:0f:6c:16:
                    13:f0:75:df:c1:99:22:90:cb:82:0c:59:25:5c:4f:
                    de:86:c5:5a:07:86:8e:29:5b:24:99:50:51:e0:35:
                    da:5a:e9:21:ee:31:0f:e0:19:be:e8:20:d3:87:7c:
                    a0:53:7f:5e:63:8e:44:1c:24:d5:72:86:b4:fc:74:
                    0c:44:24:39:2b:9a:da:2c:d8:89:d0:7f:ee:a4:56:
                    dd:71:77:a0:83:d5:f3:13:20:ef:b3:29:22:c7:7e:
                    75:f7:3b:e9:c7:40:dd:aa:da:f3:d3:5d:8e:a0:99:
                    03:0d:6d:a9:77:7c:03:1a:32:e6:72:26:e8:99:61:
                    be:85:c2:05:eb:c2:e2:cf:ce:f3:21:e8:2d:d9:66:
                    99:db:81:f4:39:eb:eb:5b:a0:17:f0:8f:df:bd:a6:
                    94:49:74:b9:74:4e:03:a3:74:a1:25:47:ed:6e:7b:
                    f7:ff:a2:6c:eb:b4:61:cd:28:7a:24:77:9c:0b:fe:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BB:3C:FD:A4:60:86:E7:7A:A1:C9:F5:84:62:87:42:BF:94:7B:DE
            X509v3 Authority Key Identifier:
                keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:8f:af:2b:b2:13:b1:59:62:10:f0:ee:38:4e:a3:4d:e9:
         cc:29:11:c0:1e:7e:7a:9c:88:17:3a:ba:03:ce:0b:74:71:1d:
         84:57:a6:82:f5:8f:00:44:6a:71:39:54:3d:08:39:b9:1a:f5:
         61:49:90:a2:82:c7:c9:93:52:2a:dd:d1:e9:d7:26:8d:17:b0:
         35:41:eb:df:9c:94:12:ec:f9:fe:d9:68:8f:64:6c:39:de:b5:
         1b:18:13:aa:76:88:48:b9:29:56:6c:ea:f3:fa:d4:f3:b6:2e:
         9c:90:00:06:ce:ee:25:33:fd:f7:28:4d:f0:ce:9c:43:84:65:
         0c:81:42:8c:13:f1:ce:0f:7e:1a:6b:9e:11:8f:8f:1a:35:83:
         94:f8:69:d8:c3:d1:92:4e:81:c6:22:7b:f2:ad:34:db:7d:d1:
         18:7d:cd:28:33:95:37:7d:d2:65:71:65:f3:81:01:c0:06:75:
         27:49:6a:9d:a6:8c:f4:aa:98:2f:ba:e2:b8:35:ca:f6:56:33:
         a6:be:13:77:d4:1e:40:59:5c:52:e1:48:0c:4c:e7:a1:53:8c:
         df:f3:4d:6c:32:dc:c8:46:62:0e:fe:30:f9:44:35:d0:d3:58:
         35:13:fc:03:14:49:3a:c3:2f:10:0c:ea:ca:f5:54:3b:5d:70:
         58:c8:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----