Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File:                     YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier:          42pVb7ihHnsOE0b3YOdhKAS95hdk7g5ov0EAssGeouI=
Subject key identifier:   A1:E5:5B:F1:B4:F0:08:EE:83:9F:3A:54:B4:0D:86:DA:D1:7A:FB:11
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer:       /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial:       01962E9892420E0DC63171A8EF6FC83CF7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: E1RsRNwZSknxhK+n6K5W3Z1TBL2Z5yMaKmXxJr/2TMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:42:0e:0d:c6:31:71:a8:ef:6f:c8:3c:f7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=a1e55bf1b4f008ee839f3a54b40d86dad17afb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:fa:08:47:53:40:43:45:6b:fd:65:10:c7:
                    f9:ab:0e:d8:e5:a5:22:1a:e8:8f:68:8b:d4:b0:84:
                    07:39:dd:3a:02:9b:ed:9e:42:fb:8b:52:56:de:03:
                    6d:d0:ec:c6:45:62:59:a8:f2:38:a3:da:ad:c1:9b:
                    5a:21:2f:ee:29:fe:c0:49:83:cb:f7:0d:02:81:85:
                    00:4d:e4:4f:8b:d3:1c:7b:11:c4:bd:83:4d:2c:b0:
                    48:04:5c:e7:80:cb:f6:a8:42:7d:a4:a9:76:d6:33:
                    35:6a:00:c7:cc:63:13:2c:f2:c0:99:6e:90:e7:72:
                    7c:83:d0:32:cd:cf:85:6e:16:44:80:22:8b:0a:ae:
                    73:7d:33:cb:dd:43:99:a8:c2:ca:d1:44:97:bf:56:
                    6e:5c:05:97:1c:2b:2f:ce:71:d9:5d:0e:be:47:16:
                    50:43:a1:d8:a0:c1:bd:13:c2:52:a7:83:9f:2c:0c:
                    7e:4a:f0:87:35:64:5d:60:72:59:b1:29:b7:dc:79:
                    03:c1:fa:90:eb:c8:37:1e:55:f6:fb:b4:c1:85:15:
                    5f:1b:f0:dc:83:a4:cf:51:58:d6:62:9d:cc:c5:c5:
                    6a:a5:94:2b:94:b1:80:ba:85:6b:26:73:22:4f:d2:
                    46:63:36:61:6c:af:cb:ee:2d:37:63:23:92:e7:50:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:5B:F1:B4:F0:08:EE:83:9F:3A:54:B4:0D:86:DA:D1:7A:FB:11
            X509v3 Authority Key Identifier:
                keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:02:d0:8d:6f:94:37:21:5c:3e:f8:1c:5a:f9:93:a1:0f:86:
         03:f3:56:fc:48:39:91:32:1d:d4:33:28:c8:7a:90:51:64:77:
         73:9d:7f:6c:25:3b:21:02:91:4f:11:54:33:9c:13:a5:16:a9:
         38:4d:5d:14:46:70:59:35:07:72:df:15:54:1b:87:e2:e9:c7:
         60:90:f0:f7:be:36:de:c3:20:bd:88:11:f6:0f:56:44:ee:bd:
         33:d6:b8:19:68:6a:5a:3a:d9:56:a4:77:b8:12:0f:ee:47:e1:
         ff:15:5d:e3:03:ba:56:10:62:d6:af:ad:ad:be:99:30:de:45:
         79:63:1c:22:d1:4e:be:69:84:e9:c4:b2:2d:df:b1:69:53:88:
         b4:d5:01:21:79:90:77:4c:d8:a9:8b:3a:30:c5:1d:0f:e5:08:
         dd:a4:b1:f5:5a:36:9c:07:b8:39:60:26:46:0d:05:6a:74:74:
         be:5c:de:d8:b3:50:83:73:77:77:81:d4:6f:f1:e7:93:b8:4d:
         a2:ac:8d:91:ec:68:04:15:bc:be:25:7a:d9:44:c1:ac:c2:2b:
         9a:d5:d2:26:af:64:bd:7f:2e:a9:f0:57:fe:1a:32:b4:54:99:
         f4:d0:f7:20:28:ea:26:82:8c:d7:08:82:11:28:50:9b:3b:4e:
         87:79:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----