Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File:                     y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier:          O1nWzqGq38Vp3bdAIDpppv6xlViu60PbAqZq5Ku+Oqc=
Subject key identifier:   AB:30:98:1E:46:F4:A8:05:2D:A1:90:C0:4A:52:B9:71:92:8A:9A:BA
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer:       /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial:       01962F3DB177C34110A3F3FCFE17F5370F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=)
                          2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=)
                          3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=)
                          4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=)
                          5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=)
                          6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: 6vSSBllYQWzE+9NwRz9Ul7yqnnUqUGq7MC7gSh8pnz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b1:77:c3:41:10:a3:f3:fc:fe:17:f5:37:0f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=ab30981e46f4a8052da190c04a52b971928a9aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:28:57:44:10:bb:89:f6:b7:f9:5e:ab:07:
                    58:62:9e:1b:2a:eb:34:67:a4:6e:ca:1f:1c:03:e3:
                    ea:d1:25:fc:50:30:18:eb:f6:94:25:28:a2:7f:d0:
                    4c:5e:94:24:8c:ae:8a:03:c8:a9:94:a5:95:b8:04:
                    81:09:a4:eb:e7:bf:62:84:be:ce:e9:17:e2:55:5b:
                    46:b9:b0:a0:32:20:b7:f1:6d:71:f0:55:07:9a:5b:
                    72:3e:dd:e9:d8:fa:21:96:57:88:65:83:82:56:ec:
                    09:f3:bb:e6:3d:07:7b:f9:0e:af:03:42:de:76:0c:
                    0a:5d:5c:ea:25:7d:7f:f4:e5:0b:1c:64:c0:2c:96:
                    b6:70:54:b2:36:f6:f7:eb:5d:3a:2b:d7:a0:7d:d4:
                    d0:79:0b:7a:7f:99:f2:e9:a3:1d:94:04:b4:64:d1:
                    02:72:84:17:e9:67:fb:11:54:1b:2c:3b:78:11:93:
                    3e:cc:dd:6f:a1:47:99:93:24:d6:83:8b:42:1d:9d:
                    75:57:ce:73:2b:ec:5e:15:1a:ed:e9:87:a1:13:47:
                    18:50:53:08:06:9f:01:b2:ac:39:2e:76:60:58:c4:
                    cf:9f:f3:40:cb:28:d3:8d:78:86:b1:f0:5b:42:8b:
                    fd:7f:2a:b4:44:d0:3d:06:46:b8:b0:1e:73:a6:f1:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:98:1E:46:F4:A8:05:2D:A1:90:C0:4A:52:B9:71:92:8A:9A:BA
            X509v3 Authority Key Identifier:
                keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:12:07:46:52:9a:f9:57:f2:8e:e3:83:f5:c6:17:de:a5:de:
         10:01:f6:78:c9:80:42:c2:0d:76:63:07:41:31:54:66:78:04:
         9e:50:37:63:82:f3:ab:0b:98:8a:c2:dc:bb:5b:c8:9c:1b:05:
         bf:af:11:3e:47:b1:56:83:ee:67:ce:eb:bd:bd:34:5f:3b:c0:
         04:2e:3b:d4:35:f5:85:b7:c0:e4:19:95:16:06:93:8d:18:0e:
         59:49:d9:98:28:90:be:54:fc:b7:3e:bd:0e:d2:6a:83:ac:42:
         f6:fa:35:50:ba:d3:32:20:d3:88:18:33:7f:37:17:ae:cd:32:
         0d:02:17:f4:ba:1d:3e:ed:38:dd:8a:65:a8:6a:59:b9:b0:df:
         3a:a6:c1:74:3b:d5:d7:b6:92:f3:28:d1:90:88:fc:d4:f2:4a:
         fd:23:3d:23:29:e7:56:b1:12:8f:02:60:67:0e:39:6c:f8:8a:
         03:85:f5:50:d9:89:97:a4:2b:f4:3e:31:8f:dd:ad:18:00:e1:
         17:d8:7b:cc:77:f3:2a:97:33:7a:38:15:4f:ae:89:cf:51:76:
         e6:b2:3c:7c:a0:88:f5:18:a4:48:00:22:61:26:2c:75:94:e9:
         21:3f:78:2b:ef:a7:dd:19:b0:b0:fb:0f:4b:2a:b4:09:77:04:
         c6:e8:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----