Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File:                     pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier:          RMTeRwcazhFc1kpW/93RTZiuk4nPvFxhKxES3gjwK3g=
Subject key identifier:   6A:E2:C3:F8:AE:7D:DB:C3:DD:07:C0:18:F3:58:5B:A4:06:0A:71:D0
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer:       /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial:       01962FAB1FEC5765655A5785D53E0D7EF110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number:          39
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: 4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa (hash: 2vq5lY7p3QV26YVrvW4JIsT+fBab01wVcEMyf7CWXAA=)
                          2: gNGKUpZCXd8q1DoJLImZ6jAcs7E.roa (hash: sSxxOvPgg252LzRC1H4oHyqsDh65DNBimoIxyS9qxFo=)
                          3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: VWnlssgC4Y8/xuXwMKTMdjAgxrH9N/U660Py/SN0HW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1f:ec:57:65:65:5a:57:85:d5:3e:0d:7e:f1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=6ae2c3f8ae7ddbc3dd07c018f3585ba4060a71d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:63:3a:c7:81:7b:5a:b9:d4:a7:2c:77:bc:
                    7d:07:a8:6e:51:3a:fd:06:ec:99:2a:41:26:9a:10:
                    34:e6:5b:ba:13:23:fb:91:06:bb:1e:54:d5:b9:1b:
                    ba:20:d8:00:0d:dc:cf:06:a3:ae:54:9d:a0:9f:de:
                    57:5b:15:d5:13:26:23:49:ee:8c:58:f2:7e:29:92:
                    0b:37:79:36:2b:d5:4f:96:cd:2a:d2:9a:2f:ac:c4:
                    ba:86:0d:48:4b:ef:8d:2e:97:5e:ce:64:23:b2:8e:
                    2a:85:11:12:d4:e5:9b:65:2f:4a:23:b4:05:0f:30:
                    50:81:52:52:a5:30:38:ec:21:ba:ae:18:12:a8:de:
                    75:c4:d8:62:6e:b8:1a:61:dc:3b:6e:c0:bf:66:29:
                    80:71:20:0e:6c:fa:68:f2:b3:42:c0:97:25:65:77:
                    89:e1:44:cc:2d:bd:9b:ed:b0:dd:2d:6c:33:e7:81:
                    d1:5f:39:34:33:1d:cb:1e:f4:aa:2c:91:71:c4:5a:
                    7a:c6:de:75:15:99:e5:a9:be:85:af:34:39:ad:72:
                    66:7c:92:10:dd:7f:2f:ce:fa:e9:8a:96:c6:99:fe:
                    0a:1d:17:82:c5:25:ae:99:b0:67:84:30:b1:2c:dd:
                    09:79:bf:d8:13:7a:17:55:0c:06:1b:5a:27:9e:b1:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E2:C3:F8:AE:7D:DB:C3:DD:07:C0:18:F3:58:5B:A4:06:0A:71:D0
            X509v3 Authority Key Identifier:
                keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:f3:0c:3d:e3:43:df:7d:40:11:80:27:41:5e:60:e3:7b:
         a6:18:92:58:e4:f8:34:70:e1:cf:a6:30:32:c5:79:3d:d3:d4:
         5b:55:77:70:cd:16:0b:6d:a9:46:11:a5:62:bc:af:c4:14:28:
         01:f4:d4:a8:ca:15:db:75:de:dc:8c:ae:b7:32:64:d0:3b:08:
         af:9f:56:4e:76:0e:cb:48:75:ed:ef:eb:59:59:38:e2:88:e9:
         f8:ff:28:f8:b6:52:e4:8d:af:99:59:f2:73:35:42:b4:0e:9e:
         e6:ae:4a:62:e7:30:e6:32:c7:f4:fa:f1:bc:38:dd:07:9d:31:
         50:db:a0:1d:d1:f2:5a:4b:30:f9:52:7a:cf:31:9a:f5:f9:47:
         eb:bd:99:78:5a:2a:8c:08:39:74:c7:a9:f0:95:36:73:fa:fd:
         27:81:b8:b5:2b:2d:70:62:f9:79:cb:5d:17:67:0f:29:4d:21:
         a5:ce:79:d5:c1:d0:65:f3:68:e8:81:50:64:46:01:ee:4f:a1:
         88:fa:2c:43:6e:3a:13:91:1f:ca:0f:91:38:44:db:d1:55:8b:
         a9:4b:23:3e:77:02:8c:3e:ad:f3:2a:5e:92:0c:7e:86:c5:01:
         a6:ce:3e:f3:09:2d:fd:15:02:af:e0:d1:23:04:b4:d1:e6:19:
         86:7d:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----