Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File:                     YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier:          BaCLZEpxwa9jEddgRp1XKaN2TtMkszImLXvsduxVzW8=
Subject key identifier:   1A:D3:EE:62:F2:50:B0:FA:B9:DB:55:E7:51:AC:C4:04:29:7E:F7:C8
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer:       /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial:       01962F3D9D5DB0EDCCE8609B94B010409B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: GOK526Cx9pYud2YlClx4Qtrr4jqxIpokFPvR/+XP3tY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9d:5d:b0:ed:cc:e8:60:9b:94:b0:10:40:9b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=1ad3ee62f250b0fab9db55e751acc404297ef7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:dd:5c:8e:3b:fd:61:66:c7:ba:67:11:67:
                    84:56:f8:12:6f:00:36:ef:ac:28:bd:c7:01:9d:38:
                    6b:92:df:95:a4:a7:81:9c:ff:a2:78:1a:eb:dc:66:
                    13:19:70:44:9b:12:82:bf:71:ac:e0:70:8f:2f:b3:
                    7e:ed:4f:8c:c4:71:f8:e9:bb:90:7d:76:6b:1c:a8:
                    92:f7:5a:1a:43:8e:1f:09:16:b9:86:cb:16:d2:de:
                    b5:13:8d:18:eb:1c:4a:b0:0e:d2:95:6f:86:c5:18:
                    6e:82:af:4e:64:28:e2:51:d3:de:0b:23:d1:c4:5c:
                    64:ee:4f:c1:e8:e9:91:a7:b7:77:01:0c:73:1c:fb:
                    86:58:fa:0a:2a:71:a0:c6:f8:ae:22:48:30:e5:a5:
                    8d:3f:49:36:06:34:25:8c:2b:fa:45:ed:2c:92:77:
                    97:a0:9e:f1:90:9a:df:0b:b3:f0:fa:5b:b6:5c:d1:
                    cd:07:b7:87:dc:24:96:e5:06:a2:0d:2b:b4:c7:35:
                    1f:c6:90:4b:2b:60:c5:4b:48:42:76:b8:21:85:ba:
                    c6:2b:35:ed:23:94:0a:42:80:55:f0:eb:d9:a9:68:
                    66:f1:a4:19:f4:97:e3:5e:3c:44:dc:a6:84:85:f5:
                    cc:cc:c3:6e:59:fa:1a:e3:c4:aa:d3:23:14:0f:4b:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D3:EE:62:F2:50:B0:FA:B9:DB:55:E7:51:AC:C4:04:29:7E:F7:C8
            X509v3 Authority Key Identifier:
                keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:6b:c4:80:b4:d0:55:6b:71:91:ff:50:04:e8:a7:99:4a:
         7d:bb:ff:7e:87:4f:48:93:05:30:69:e5:af:16:b2:2a:bf:06:
         eb:31:9b:36:f1:69:8a:a8:7a:e7:84:59:7b:89:37:32:63:8d:
         b9:3a:d9:fb:74:a8:ba:4e:df:60:b9:1a:80:33:82:ef:a2:48:
         69:81:f1:91:27:d8:09:a5:4b:7a:e5:74:7a:d1:40:a2:b0:79:
         f2:7e:c3:13:cd:cb:bd:28:0d:fb:e8:c2:74:b1:8a:d8:0d:ae:
         62:68:43:e1:32:c6:7e:6e:b7:67:f5:de:d6:6d:85:45:e2:c0:
         b5:cc:86:8f:9b:fc:d4:a8:1e:be:fc:64:11:1c:7f:bf:59:7a:
         66:1d:9c:53:69:42:83:e8:11:28:a7:49:ca:b7:5d:a3:d5:d7:
         6e:23:8b:8e:de:e5:42:e1:ff:91:ec:70:0a:e0:9e:16:88:2f:
         14:bc:37:25:3d:84:11:6b:7b:0e:90:28:12:e9:67:6e:bb:e5:
         98:83:15:e7:a2:e0:59:11:e1:31:3e:5b:49:3e:74:12:d7:a1:
         6f:cd:38:f9:8f:81:7b:92:eb:06:67:c5:24:1e:95:7d:66:67:
         bd:a7:51:40:55:bd:62:9b:f7:67:a0:63:19:3b:ef:93:d2:d0:
         3b:de:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----