Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File:                     ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier:          kTATtnIQgoWFgp3Zvjf7NI+SVmjV7bWwa0ThCgwHvF4=
Subject key identifier:   F0:89:EC:C5:30:80:FC:1D:B1:37:84:EF:F5:A1:8D:29:78:81:98:3B
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer:       /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial:       01962FAB8FE0B5AED57BC2E32C8889F8FCF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa (hash: SQ9ogBKHb+rGHe3BXgCbUKWuF1/SVTNnqc7Qrrn9o88=)
                          2: BLIbcZ8gVGAjnHegyR2lqH6xAJM.roa (hash: Bj27w9uQHRhZtkX+wPrDSZtYcxRX/Qm5XlGgHnKEj+g=)
                          3: c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa (hash: G3UZF7fxpF7R/IVnk9rPAZ+jjio/iwehlQmNNTZ8rAo=)
                          4: h_RE6WU4ZuYi01oBDIse0-pY6i0.roa (hash: WA+t8DetCDYbdx3o6UcknVGJ3PsCQ51UnZ6QRrSNIm0=)
                          5: oq_HXzOCCJ3V-kFxFIeDBDnbULg.roa (hash: n4S14t4ExmuKX91bG38pFLwh1gNdMqcOWis+wx+O8jw=)
                          6: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: cKM+q292a/YdppgVhu5/QW+v6lOCaP4OzGzmmYh9SIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:e0:b5:ae:d5:7b:c2:e3:2c:88:89:f8:fc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=f089ecc53080fc1db13784eff5a18d297881983b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:ec:99:68:1c:1f:78:01:93:44:18:85:de:
                    16:17:b6:ad:26:78:d9:85:86:89:0d:eb:a8:a4:a2:
                    6d:f4:01:83:6b:8c:d7:ce:4e:02:ad:70:79:ec:10:
                    4b:b8:0a:9c:b6:8f:fc:46:a0:90:e5:5b:80:83:c8:
                    e4:f9:ae:3f:fb:f8:2c:93:f5:06:e7:d5:15:42:bc:
                    17:e8:5c:26:96:4c:70:c1:e7:8f:e4:c3:24:9d:fd:
                    2f:9c:96:2e:96:42:b3:f1:fe:9f:8f:15:12:d7:89:
                    c8:17:97:e8:3f:37:a5:56:93:51:5c:a7:3a:36:77:
                    37:37:47:36:96:76:9b:1e:e3:3c:da:6a:5d:42:0e:
                    54:32:35:d8:52:e5:0b:89:70:c8:1e:a6:7e:14:15:
                    f1:4f:a8:43:bd:0a:0b:39:16:bb:a1:82:47:9c:ff:
                    ec:7a:79:e0:3a:b1:27:f7:23:eb:36:c9:c7:19:d0:
                    5b:79:c7:dc:47:2f:26:e0:92:ea:5b:a7:a2:da:43:
                    dc:0d:b7:13:5e:08:22:b7:15:68:7c:d9:b4:80:65:
                    42:ff:46:7b:36:28:84:76:fa:bc:d9:ec:4e:78:af:
                    48:d9:3d:a8:85:7f:64:e7:01:f3:ca:18:3c:57:1b:
                    22:7d:80:01:dc:d8:8d:d3:1e:3e:9c:4c:01:d4:9c:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:89:EC:C5:30:80:FC:1D:B1:37:84:EF:F5:A1:8D:29:78:81:98:3B
            X509v3 Authority Key Identifier:
                keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:ea:a6:cf:d3:76:26:33:35:4f:93:bb:5f:66:a2:d4:88:
         cd:91:23:54:66:65:32:66:62:97:72:2d:81:47:8e:3c:82:0a:
         0a:36:d5:65:5c:75:2b:c4:a3:09:04:0e:e3:18:91:13:58:67:
         3c:b9:8d:37:b0:a6:4e:27:aa:85:3a:04:b3:8c:e9:e8:63:ea:
         f2:4c:50:b6:d9:de:01:19:69:71:bf:b9:f1:4e:66:61:6f:9f:
         0c:c3:ae:9a:08:33:15:63:5c:e3:f2:a1:61:c4:cb:a4:7e:09:
         f1:28:0f:f4:9b:80:7e:6f:a5:85:63:e9:81:0f:c9:fa:7f:6f:
         28:97:24:2d:31:22:bc:f2:0f:09:f5:0c:e2:9b:f5:0f:0c:26:
         7a:d7:32:c2:9d:dd:13:6a:75:8d:48:ae:a7:1b:14:21:af:4b:
         c4:09:09:3c:6d:14:d3:93:89:5b:4c:43:51:4f:7f:77:95:8b:
         50:e2:a2:97:53:39:ce:fc:6a:b3:ed:1b:a4:31:56:7f:e1:f0:
         6a:4f:5c:74:ec:07:c6:c5:dc:e6:55:e9:4a:df:92:30:7d:d7:
         a7:f2:35:f9:4d:7c:fc:18:42:9a:24:f6:25:ff:af:2b:80:4e:
         ec:5a:20:76:f3:08:92:04:78:b6:c9:60:aa:28:c4:7d:54:36:
         bf:f5:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----