Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File:                     yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier:          3dchnZ8i6YzOXmtZp/YSQonfCsNdlOG+5jZAgFdcZiI=
Subject key identifier:   F4:EE:22:FF:64:7B:6B:F2:ED:7F:08:E8:98:A0:4E:8F:0A:1C:0F:8E
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer:       /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial:       01962DF39FD828504D33C20EFA21BBF5CDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number:          0BA2
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: FF0CxhQIuvydBFYxzejYFme1ipV6IRN+Q7Di6JxHSSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9f:d8:28:50:4d:33:c2:0e:fa:21:bb:f5:cd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=f4ee22ff647b6bf2ed7f08e898a04e8f0a1c0f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:90:20:b4:8c:b1:d3:c7:d6:86:8c:aa:af:
                    96:a9:e1:23:69:97:87:a5:68:b1:c2:db:55:a7:9d:
                    38:cf:d0:7c:9e:cd:0d:36:d4:2b:4f:6d:c9:cd:cd:
                    ca:31:1b:cf:9b:63:ce:9f:17:d8:68:b3:c7:26:14:
                    f9:fc:84:91:51:77:2c:ef:00:99:73:ee:91:f6:63:
                    ee:45:08:6d:da:b5:77:aa:f6:96:bc:43:a3:71:ef:
                    d8:05:1a:3e:21:1d:43:78:03:09:4e:e7:be:d0:79:
                    30:7d:02:78:d5:17:4c:7b:a6:08:aa:80:53:34:02:
                    1e:e8:01:82:de:3a:f0:42:0a:07:f2:b8:23:aa:ee:
                    9c:00:9b:f2:b9:91:80:e5:0f:13:11:da:b5:de:9f:
                    35:56:93:02:8c:6b:21:4d:dd:57:27:e2:8e:3a:13:
                    dc:a4:de:b4:d7:e4:ff:ad:38:95:24:de:7e:ec:d1:
                    be:7c:bd:a9:30:79:67:42:81:9a:c3:0d:bc:6d:7a:
                    78:32:c6:e4:5f:e7:e4:37:f3:5d:12:0c:2a:4d:97:
                    19:2b:43:f1:88:6b:27:6b:cd:ac:91:7d:af:70:a5:
                    ec:8c:b1:67:64:ee:89:4b:c6:49:0b:f4:39:6f:e6:
                    7a:23:1e:2f:47:dd:c2:95:02:15:70:13:a6:99:70:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EE:22:FF:64:7B:6B:F2:ED:7F:08:E8:98:A0:4E:8F:0A:1C:0F:8E
            X509v3 Authority Key Identifier:
                keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:9e:a3:7c:ca:b7:6f:96:8f:c5:c9:ae:07:d3:78:fc:d5:
         a7:dd:a6:9e:68:50:15:9c:d0:46:7a:05:10:93:a4:8f:e6:79:
         85:e5:bf:d9:36:0a:0b:01:a5:0d:93:ff:23:d5:29:31:97:61:
         92:ae:b7:2a:7b:5a:d2:0f:7f:bb:fc:ea:1f:a3:53:e7:78:bb:
         37:d8:f8:cc:cb:aa:37:17:f5:f5:97:04:ef:2a:a3:fb:f9:84:
         58:ae:f6:5c:46:a6:c6:c3:1c:6c:23:6d:dd:cd:b3:cb:e4:74:
         ce:48:0e:4d:23:f2:71:2b:3e:3e:69:bb:35:96:f9:7b:82:fb:
         f0:61:4a:96:00:69:21:0c:43:4e:08:eb:51:1e:93:e1:bd:ba:
         93:a2:43:ea:b7:a8:0c:0c:26:06:0a:0a:09:56:ca:77:12:15:
         03:28:fc:e0:2e:dd:a6:82:53:94:f5:a4:6e:d5:4c:10:9d:82:
         2e:a9:93:e4:b7:85:df:65:40:9b:6f:9c:ef:f4:ff:f3:d8:55:
         07:69:8d:97:31:47:57:4b:ed:71:12:7c:cd:1f:7d:3c:74:9a:
         da:6a:0f:20:5b:78:57:43:0b:73:97:f5:74:f2:8a:69:8a:f1:
         3e:69:3f:8d:6a:fc:30:47:a9:8e:aa:46:8a:51:00:97:14:92:
         39:ec:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----