Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File:                     yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier:          xIJVuI32dT8EyrRzkxPUascoW1mkxN+z57SuCovLsDA=
Subject key identifier:   99:D9:92:38:D9:16:B0:DF:52:5F:BE:2A:B4:4F:3C:71:DC:EE:C1:4F
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer:       /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial:       01962E98712A88CF7BCE065374F924B74C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: +c0TssRrfLoOcETJQjTRoZSaggA2lX+/xVMMIyfY0VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:2a:88:cf:7b:ce:06:53:74:f9:24:b7:4c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=99d99238d916b0df525fbe2ab44f3c71dceec14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:c2:be:aa:c0:6e:be:92:a2:0f:02:ad:36:
                    80:b8:b1:d3:93:8a:7d:d2:06:5e:7a:12:0f:fe:7a:
                    53:59:71:12:08:9f:ea:f6:7e:e2:8f:09:bd:49:85:
                    5a:3b:25:f8:2a:fc:65:ea:26:cf:39:fa:f3:54:b2:
                    7e:54:32:71:02:c2:9a:3c:08:25:db:b8:9b:43:31:
                    7f:56:1a:8a:0c:21:ce:18:45:d9:e5:16:f7:06:c4:
                    f9:57:8c:26:a5:7c:ee:85:da:07:2e:d9:5b:95:06:
                    40:c6:25:1d:70:1c:b0:f7:4b:5e:b0:5b:20:1a:37:
                    85:dc:68:ca:a0:12:a5:61:cb:90:f9:6c:c3:8b:3b:
                    52:43:7e:77:2b:aa:b5:af:38:52:8e:ed:2e:98:33:
                    0d:f6:25:3a:6c:03:31:39:d8:32:a5:f3:b5:fe:24:
                    bc:9f:1b:f5:ca:b4:a1:de:b3:d2:d9:31:55:41:1e:
                    41:23:b9:c6:47:e4:0a:cf:d2:ff:9f:45:ba:26:1d:
                    e2:38:6e:5b:5d:17:0e:08:97:e4:f7:28:f5:6f:35:
                    95:4a:de:a2:db:66:81:a4:82:e8:fd:e3:d4:1f:f3:
                    2b:6d:77:f1:11:fe:98:81:77:86:6e:53:ce:c6:04:
                    e4:a5:6e:98:e3:bc:ab:88:aa:e7:65:af:09:1f:e3:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:92:38:D9:16:B0:DF:52:5F:BE:2A:B4:4F:3C:71:DC:EE:C1:4F
            X509v3 Authority Key Identifier:
                keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:01:27:4a:24:0a:cd:73:61:21:6e:bb:25:05:39:00:ca:
         d2:55:2e:a3:4b:7b:89:39:d8:47:b8:e1:0c:35:ea:a0:df:51:
         94:06:08:34:af:cd:f5:dc:96:72:03:45:a9:12:07:c0:58:a7:
         c1:82:13:bc:b5:25:28:bd:c4:b2:a0:29:3c:c2:8f:75:94:35:
         f8:5a:31:ff:fc:c9:ab:04:60:b9:83:90:62:a1:13:9e:d8:25:
         1d:c6:a7:07:af:a1:02:62:6f:d5:52:8d:e4:bf:3d:c1:93:ea:
         ca:ab:e4:0b:9f:64:c6:2b:4a:fc:04:33:15:a5:51:0f:a7:bb:
         32:9a:44:67:7d:47:3b:79:70:04:62:61:f7:24:12:52:98:49:
         52:a3:f3:bf:60:6a:a9:5d:fd:07:26:72:dd:f0:ea:bb:0b:ab:
         7a:f0:0c:37:51:15:42:1b:76:05:be:81:f6:14:f6:20:c0:bc:
         7f:76:f0:86:cd:0b:74:d4:85:fe:21:5e:63:31:2a:67:c9:db:
         bd:29:c8:f9:ba:3b:0f:e3:4b:8a:51:5c:59:4a:fc:6f:90:e5:
         c5:e3:ae:bc:a2:71:40:73:08:da:18:1c:66:e0:c1:d3:ad:06:
         9f:da:89:c5:72:80:05:0d:5e:85:34:8d:3a:79:a8:05:f0:53:
         74:54:c5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----