Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
File:                     YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json)
Hash identifier:          Aj7jgLidFh7UlHbvP6PHBAXEth+HFNVubvVbuYTr2/k=
Subject key identifier:   3A:4E:C3:CF:81:B3:6F:0A:F5:B9:F3:B8:65:6E:F9:B5:AB:B0:43:56
Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
Certificate issuer:       /CN=600d3d0e471426ef383e3911383a4983bf227644
Certificate serial:       01962DF3E39AD1FD38724D63B0A611DF70A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
Manifest number:          01BB
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: VQuwedX6tc3wBbNrRHS6Ru9HUvaoAjM8YEAQ9dUyCNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e3:9a:d1:fd:38:72:4d:63:b0:a6:11:df:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=3a4ec3cf81b36f0af5b9f3b8656ef9b5abb04356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:26:77:63:aa:bf:38:8d:45:97:ee:18:44:
                    2e:70:d9:45:a0:58:97:51:bc:18:97:ad:c9:9b:68:
                    cc:0d:d1:e2:1d:3d:b9:09:71:e2:1a:f3:80:82:92:
                    ed:7e:0b:6b:46:3c:3b:cc:28:fb:10:15:e4:8b:6a:
                    a9:77:ab:39:94:33:17:b5:c4:62:4d:64:f5:d9:f4:
                    04:e2:37:27:0b:b6:5e:d1:44:c6:51:fb:44:ab:b9:
                    34:c0:5c:df:12:61:e3:87:b6:16:70:87:d5:a2:20:
                    80:d6:5d:e9:b3:ba:a2:d2:ba:cf:f7:35:63:d6:e0:
                    b0:a5:69:ae:1f:28:a0:54:d1:0a:c3:80:bf:e9:2e:
                    ac:e3:ef:54:32:40:55:6e:32:73:12:13:e1:fc:46:
                    8d:d7:f4:39:a6:24:ad:b9:ff:0e:ab:6e:aa:0c:8f:
                    da:d3:9f:08:20:e9:eb:e0:08:67:d9:5a:60:03:71:
                    9e:0a:58:16:ff:09:b1:1a:7d:a3:f2:d6:a4:b6:f5:
                    a6:3d:85:a7:25:1d:4b:f6:24:88:6a:78:f4:f4:f6:
                    c1:d7:7d:e9:3d:12:db:ad:0b:3f:dc:01:f8:b3:f9:
                    0b:e9:61:77:67:83:3b:6c:12:d8:d6:ac:55:68:1d:
                    52:b5:4f:3e:0f:67:fc:bb:a0:6f:a7:a0:08:78:49:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4E:C3:CF:81:B3:6F:0A:F5:B9:F3:B8:65:6E:F9:B5:AB:B0:43:56
            X509v3 Authority Key Identifier:
                keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:6b:f0:1c:78:d2:8e:52:3e:fb:6a:04:83:9a:21:86:5b:
         0a:45:45:20:17:60:7e:94:9f:a6:a5:ff:a7:bc:49:b5:d7:0d:
         42:a5:91:ac:e2:dd:1c:2a:02:a4:88:36:e6:7c:84:53:c2:6c:
         c9:b7:2c:f7:a7:90:48:d9:55:88:6b:5d:b0:ae:a4:ab:c7:27:
         78:c4:9d:c8:d4:4e:4d:22:e3:63:df:e0:e9:69:bb:4d:3a:be:
         5f:10:3b:a7:2e:75:e9:9b:95:6f:dd:39:ad:d7:0f:67:4f:2f:
         bd:54:bf:89:21:98:03:7d:8e:d2:05:a2:28:38:01:9b:38:7f:
         fa:9b:a2:2f:67:1a:b8:be:50:19:d4:a5:b0:7e:53:42:34:63:
         03:d5:83:8c:19:71:81:8e:7a:07:e9:a8:37:f2:dc:5d:73:62:
         86:f0:85:ae:ef:4f:24:83:b6:9b:61:34:fe:94:67:1f:02:e0:
         ba:1b:5c:35:42:21:7d:b2:c0:69:98:f0:af:aa:0d:7e:28:be:
         9a:c9:6b:99:62:aa:a0:5b:21:08:e4:47:8e:5d:b2:bb:a8:06:
         ed:fe:cd:61:1b:61:a2:2f:84:e6:a0:53:09:fe:be:8e:f6:80:
         9f:43:ca:c9:37:11:6e:4c:75:a8:1b:0d:6b:64:c9:a4:b4:32:
         81:d4:b3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----