Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
File:                     yWyebTIz4sJBILhdFxec-10zR4Q.mft (raw, json)
Hash identifier:          A4hRsZp8nbUMd4q4Xv9YJGBGdi3/A7nyyKatQP/+4DY=
Subject key identifier:   8E:A8:2D:0C:48:D9:AD:E3:2C:A1:96:75:E9:15:2F:82:A9:B3:B6:37
Authority key identifier: C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
Certificate issuer:       /CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Certificate serial:       01962DF3F236B570A1939537352CA756CDA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
Manifest number:          04D8
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: VZHF0nE3qVwIIpqdmF6QQh7nLs0.roa (hash: mQT6bJlTC89LqB3D9GVMba8EFmBGqFt+S6QYF8yZZKY=)
                          2: yWyebTIz4sJBILhdFxec-10zR4Q.crl (hash: vTRT5jzTJ6bMYLpRRNi/Ijrg7cMaFJ2eB/BDQXwTkN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f2:36:b5:70:a1:93:95:37:35:2c:a7:56:cd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=8ea82d0c48d9ade32ca19675e9152f82a9b3b637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:d4:40:7f:1e:69:75:8e:68:7f:79:65:6e:
                    85:44:4d:87:66:8d:67:68:a3:bc:20:ff:b5:1c:88:
                    98:b6:59:74:81:35:7b:a3:a0:96:0c:7a:b0:e0:be:
                    af:0a:fe:0b:51:f7:81:02:08:ce:98:ac:bc:c7:9b:
                    9e:ad:ef:3b:74:5e:d3:a9:77:7a:8b:ba:c3:8d:a6:
                    54:e7:9d:5e:12:79:b3:c9:ea:e2:66:61:ed:3c:64:
                    2c:3d:80:50:41:56:a0:7e:77:c8:bc:10:2c:6a:47:
                    b7:5f:9b:d0:31:3b:b0:2c:c1:c9:65:ce:1b:c8:b6:
                    84:e8:26:32:73:13:5f:59:78:4f:87:41:a5:11:7a:
                    dd:96:ef:e5:ac:da:51:79:eb:20:71:0e:f7:47:65:
                    22:f3:04:f3:1c:1a:91:d5:5c:23:2a:30:7f:db:f6:
                    d5:7a:00:9e:bc:da:75:8a:2c:f5:df:68:c4:91:69:
                    57:9a:d7:cc:14:f7:9a:44:a4:0a:30:33:45:e0:a7:
                    09:1a:de:08:8a:23:08:0c:ab:de:5c:c1:32:81:19:
                    2b:b0:4e:ae:e3:b0:e9:ce:20:4b:ff:f8:f6:54:c7:
                    f1:50:4f:44:23:b8:49:c6:89:25:dc:33:3e:ba:df:
                    32:a4:6e:0f:7d:e4:1d:39:87:5f:39:16:ba:1e:4b:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:2D:0C:48:D9:AD:E3:2C:A1:96:75:E9:15:2F:82:A9:B3:B6:37
            X509v3 Authority Key Identifier:
                keyid:C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:64:70:74:9e:99:8b:af:da:a0:1b:a9:e5:fc:1d:a9:e1:
         5d:28:ac:f2:ec:29:7f:0d:fc:19:38:35:fb:b7:e2:4f:bc:e7:
         1b:84:cd:e5:7b:2d:0e:e6:b1:58:1a:db:f3:5b:da:99:ca:65:
         d2:22:1f:78:45:88:99:31:9d:f1:82:73:3c:68:e8:6c:9a:89:
         e2:49:69:5b:fe:76:ab:82:2b:c3:6b:eb:b5:65:b3:49:7c:6f:
         24:ee:38:6a:67:ca:c7:2d:44:30:ca:fe:16:2a:ad:fa:b2:b0:
         2f:39:12:8b:cf:55:19:4e:7e:66:60:e3:ee:d2:84:11:66:6b:
         28:6e:fd:4c:01:ac:a1:40:93:ed:05:ba:9c:03:fe:b5:70:3c:
         d6:16:78:9d:b3:52:b7:77:89:da:5a:8c:c0:aa:ff:37:38:43:
         96:cf:2f:21:d5:07:1c:1d:05:8c:c0:df:01:96:9b:b3:22:02:
         38:ae:b9:ea:1c:90:50:e0:81:f2:52:0c:e6:75:ee:b6:f0:e7:
         58:3e:f9:58:9f:ad:a5:b7:bf:6d:30:50:33:07:ea:1a:f7:4d:
         f4:9b:30:b5:ac:a7:84:d8:81:01:0e:84:84:48:e0:1d:eb:e2:
         54:f3:7c:50:d2:bf:5c:c5:25:cc:91:20:34:a5:af:51:b4:a5:
         43:35:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----