Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File:                     YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier:          IhMQY9TukxpPtdq+zxoqlKqi08umlLwY4DHkNLDABAw=
Subject key identifier:   EC:0C:BC:75:45:EA:2E:7B:44:F8:A1:19:6A:4D:4F:0F:95:32:48:A0
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer:       /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial:       01962FAB5B7E386B7580F71E835878E4C8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: nh9aVcvOR1Jx2yHAs7e/OClGBwnZb0TJRTVLFREVWGA=)
                          2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:7e:38:6b:75:80:f7:1e:83:58:78:e4:c8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=ec0cbc7545ea2e7b44f8a1196a4d4f0f953248a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:74:07:e4:64:96:7b:2b:e5:88:1a:ab:68:
                    ce:28:ea:20:01:f1:24:e1:2c:44:ae:1e:b9:39:e6:
                    9e:36:83:d0:b1:1b:ec:ad:35:1a:7d:4d:d4:0f:d6:
                    08:0f:32:0c:26:69:7f:34:9f:da:ab:c4:ad:04:8c:
                    7f:ff:64:2a:a0:00:77:1b:a1:76:45:1c:db:47:3f:
                    17:b8:41:64:89:98:74:7b:0e:de:e1:c1:41:e5:bb:
                    d9:33:02:0b:07:4e:af:28:ef:6f:89:d4:be:41:7c:
                    f3:c7:96:e0:57:c0:61:82:b5:52:f3:cb:82:3a:84:
                    37:bd:a2:15:50:9f:d9:1c:ab:eb:c9:dd:d9:2f:2d:
                    05:16:b6:c8:f1:02:c1:f6:a4:46:98:71:a4:29:85:
                    72:e1:6e:c9:06:a1:de:2f:5a:c5:85:e9:dd:27:49:
                    e6:c0:8b:2a:c3:19:37:f1:3f:7a:a7:a1:1e:79:c2:
                    f4:2d:5b:14:fb:2b:84:be:1d:25:38:e7:58:df:8f:
                    dd:c9:dc:0a:02:e6:a6:de:57:b9:35:dc:11:a9:9b:
                    1c:86:fb:1f:78:1d:6d:6e:0b:e2:59:d6:6e:90:eb:
                    17:37:ed:75:ac:42:a9:eb:22:74:54:57:47:5f:10:
                    6c:f7:8f:1a:7e:e6:d4:2c:16:75:b2:24:90:37:0d:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:BC:75:45:EA:2E:7B:44:F8:A1:19:6A:4D:4F:0F:95:32:48:A0
            X509v3 Authority Key Identifier:
                keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:80:55:9a:2e:4d:69:10:48:29:19:2c:46:d5:53:14:ef:2d:
         8e:d2:80:cc:c8:c4:43:bc:88:7a:4b:29:71:24:36:1e:5e:a0:
         26:24:08:95:02:28:02:dd:6d:e3:7f:c2:8b:72:20:11:c6:c8:
         f4:4e:a1:44:b0:0e:6a:fc:58:8e:4f:15:56:44:26:a0:59:ea:
         37:ee:bf:be:7f:c9:db:43:25:1b:8a:b0:e6:d9:6e:58:95:2f:
         87:3b:e1:f0:e7:b2:66:77:8a:ab:89:26:21:fb:48:7b:3d:29:
         28:5f:4c:ee:de:36:a5:97:53:ed:a4:c4:9e:b6:46:bc:e4:37:
         32:10:ea:28:bb:90:2d:4d:d2:58:e9:1b:61:d6:93:a5:3c:53:
         61:1c:2a:b9:0f:c5:ce:c0:58:03:b5:78:ec:a9:51:e6:fd:05:
         ae:36:15:64:84:fe:7b:ab:ce:d6:0c:8c:33:ca:99:12:8f:87:
         8c:6d:f2:81:3e:27:a1:1e:d5:56:48:8a:57:bc:86:11:c0:1d:
         f4:b2:c3:27:d2:18:e6:ae:ac:5f:c2:0e:4c:9d:24:f9:d1:61:
         5a:6b:d4:d1:00:d7:d6:44:6a:43:6c:53:a5:a5:4a:d4:54:94:
         69:f7:05:cd:1a:97:29:e7:1d:61:34:2f:c3:64:8b:7c:38:4b:
         44:d0:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----