Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File:                     YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier:          k4lhccBGM9xr64nOvUtYtmU61JT/CMfiSfqlGDMxCR4=
Subject key identifier:   BD:30:8C:98:3F:0D:05:A4:1A:B9:82:31:B4:7F:E1:9C:C3:D2:17:99
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer:       /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial:       01962E9892B677EBAC6BCA8BD812FDA1597E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number:          0D44
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
                          2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: DClSIx8z8BsLyy98FOReA2EkuS2sJYrolPg5MiCBN2I=)
                          3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:b6:77:eb:ac:6b:ca:8b:d8:12:fd:a1:59:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=bd308c983f0d05a41ab98231b47fe19cc3d21799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:a6:66:37:83:ba:75:5b:d7:95:67:72:24:
                    0e:3e:a2:bb:da:b2:6a:42:42:25:06:bc:1e:8a:e9:
                    8b:e0:33:ee:52:c0:a5:54:e2:c4:e8:c6:d2:02:3f:
                    f8:78:d5:f1:65:3b:a0:fc:5a:a7:03:8e:fd:04:49:
                    8e:7d:3e:40:5a:b7:65:4e:70:f6:d4:40:92:83:1a:
                    6a:9c:fc:b8:41:78:dd:2e:ba:8e:1a:6c:cf:27:0d:
                    39:91:f5:5a:41:ba:21:15:5b:98:df:26:3f:3b:0c:
                    89:da:8f:cc:d6:90:a8:e1:fe:93:3d:ea:3c:c7:7b:
                    31:eb:24:ed:63:c5:d1:31:d4:ff:e5:5e:c7:49:a6:
                    5b:15:83:8f:00:3b:ee:b5:ba:62:81:ba:f0:6a:8f:
                    93:74:dd:de:d0:59:f3:2c:d9:39:82:ea:ae:bf:16:
                    81:3f:da:a2:43:28:fe:3e:2b:e4:7e:ae:fa:8e:93:
                    b4:c8:71:92:04:ba:ac:0d:16:a4:00:27:d6:b8:2d:
                    15:29:06:4e:79:37:8c:68:02:fe:67:de:c5:08:aa:
                    0b:24:80:2f:54:22:3f:66:73:e5:79:bd:8e:97:5c:
                    27:8f:16:2a:dc:be:3c:3b:5e:09:fe:b9:11:0a:a2:
                    31:60:5f:bc:84:c8:ac:5c:01:1b:de:27:f0:df:c4:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:30:8C:98:3F:0D:05:A4:1A:B9:82:31:B4:7F:E1:9C:C3:D2:17:99
            X509v3 Authority Key Identifier:
                keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e7:2b:5c:b4:27:dd:bb:1b:ec:d6:43:8c:a3:76:2d:5b:8d:
         1d:71:7a:8c:3d:24:e2:ee:e7:9e:2b:1a:18:f5:04:14:09:83:
         ea:f2:61:32:34:38:d6:80:ed:5f:cd:9b:cc:76:64:ce:79:34:
         af:94:b5:bd:f1:8b:85:ff:51:5b:17:c3:cf:e3:42:58:e1:b6:
         f9:83:ea:58:39:72:bd:68:bc:b8:c3:61:68:3e:44:1e:e5:94:
         b6:4f:5e:d0:ab:e6:33:21:3d:59:1d:2e:45:52:d1:fc:12:8d:
         f0:6b:cd:62:0d:a8:28:90:18:f1:b4:b0:94:ec:fb:82:85:0f:
         7b:53:5e:b9:69:7f:ad:0b:8d:f0:46:d9:ae:ae:48:80:34:48:
         a0:52:cd:cf:ed:c8:08:92:c7:9c:8e:22:b5:1b:d9:22:c2:1e:
         50:61:47:e9:21:14:8e:6a:7a:1b:a8:2f:62:f9:88:3e:31:d4:
         54:3f:48:a1:39:d7:e0:a4:a1:d6:dd:7b:6b:89:1f:7c:de:df:
         04:0a:b4:62:f2:27:69:98:26:28:72:35:49:88:77:2f:3c:c4:
         12:4a:bd:bd:6d:78:08:9b:d8:3f:48:2e:c1:29:16:f1:f1:45:
         8e:86:dd:93:fd:4c:7b:d7:65:93:27:d0:dc:16:8e:a6:63:a3:
         7e:4c:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----