Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          ZXxtsP8YOFC62G/Mm1ZCVqnuLIDeXzuwXqwbC9kgwa4=
Subject key identifier:   09:F2:53:C2:F1:1A:F3:DA:7A:D6:70:2D:5D:F5:2B:51:3E:30:49:1F
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       01962E998DDA41312A5D49750D11E3DB04BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: EK/grdKT9zb5yXR4U4hgK3tdZvoiUplzCQpORLbvKL8=)
                          3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8d:da:41:31:2a:5d:49:75:0d:11:e3:db:04:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=09f253c2f11af3da7ad6702d5df52b513e30491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:f9:8c:ca:dc:3a:da:f6:22:11:83:c3:e2:
                    0c:ef:aa:cf:0b:6c:db:16:4f:a8:4f:94:3b:c4:46:
                    45:56:a8:f9:1d:39:7c:32:7b:51:4e:26:24:73:0d:
                    3e:c4:d4:97:99:5a:0f:79:f0:d4:28:80:f0:7b:ae:
                    fe:c8:4d:65:e2:24:fd:85:54:28:74:ef:c7:13:a5:
                    d4:ec:73:47:0b:02:be:ad:46:61:8a:b5:b6:73:ca:
                    e6:08:9a:95:85:1b:95:7c:c0:55:56:db:3f:f6:e7:
                    2d:e2:16:6f:f2:61:db:d9:6a:f7:93:75:39:77:49:
                    8d:39:8e:f2:5d:90:ea:6b:22:41:73:05:6a:30:b2:
                    1d:60:77:53:7f:5b:47:15:91:3d:51:8a:0b:07:10:
                    5a:ef:2b:dc:43:cf:8d:17:bf:dc:59:93:04:40:ac:
                    7a:d7:a8:cf:99:6c:f7:e1:8e:e8:90:91:b1:65:01:
                    5a:5a:aa:85:6a:c6:b1:e2:3c:65:46:8c:b2:49:29:
                    be:23:f9:64:3a:5b:b2:7b:ea:4b:96:76:69:94:dc:
                    03:8b:74:4e:52:82:63:00:e9:02:aa:7a:23:4c:f5:
                    7a:48:ba:d9:6a:e4:50:55:15:5e:81:72:13:5d:81:
                    5f:ac:f4:f6:9f:a2:5a:4f:16:3a:eb:a1:23:b2:07:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:53:C2:F1:1A:F3:DA:7A:D6:70:2D:5D:F5:2B:51:3E:30:49:1F
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dc:88:e8:58:0f:2f:08:5c:fa:6c:7e:2f:1a:fd:68:24:9d:
         3b:b1:88:2e:70:77:18:8c:63:20:99:87:ed:07:69:82:db:cc:
         e5:76:15:2e:18:39:7d:de:b5:47:c8:3e:19:73:ab:22:8d:0a:
         a3:bc:ac:47:59:bc:29:3a:17:cb:7a:0d:33:e6:4e:83:7d:f2:
         df:04:99:0d:36:73:0c:d7:16:34:f6:8d:7a:3b:da:54:da:13:
         1c:c7:66:53:38:34:d4:d5:3b:91:35:b4:90:12:86:dc:29:13:
         81:19:1b:66:ea:da:5d:8c:3c:26:3a:5b:39:85:17:10:9e:65:
         2e:27:c4:9c:3f:ab:a0:5a:9f:1b:27:75:b3:ca:2c:06:5a:2c:
         c4:56:6b:5a:c3:ec:df:37:72:bc:5a:56:90:49:df:47:26:4a:
         84:63:e2:78:a1:c3:21:0c:a4:81:85:17:66:06:34:7c:f7:09:
         6e:57:b8:aa:3f:a7:6c:2b:99:b7:1a:50:7e:78:c8:91:9f:16:
         d6:79:c6:04:e6:83:c5:dc:ce:b4:43:63:6d:1f:7d:d7:5a:8e:
         11:59:73:5f:1d:d6:c9:a5:f0:79:81:94:50:e8:95:4f:b9:a9:
         91:8c:59:42:6a:80:6e:e5:90:4d:0c:35:df:6f:e7:9c:c3:7a:
         61:c0:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----