Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File:                     YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier:          lbz5dCwV6EW9KnhiWWHD1fU+RHn1zeYeVcpZr8fN0EY=
Subject key identifier:   1F:9B:C9:9F:A6:F5:5A:63:8C:00:33:91:E4:CE:02:FE:0E:0A:96:5C
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer:       /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial:       01962F74E0A196A181406D2E82D614F1C3A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number:          0848
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=)
                          2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: 744WHb9vQ2D26bV5a/Iz4W2bECDOZy72RVBjudEBOmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e0:a1:96:a1:81:40:6d:2e:82:d6:14:f1:c3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=1f9bc99fa6f55a638c003391e4ce02fe0e0a965c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:d9:bc:84:13:8c:41:d7:be:c7:40:43:a1:
                    bc:8f:2a:34:87:57:2f:8b:71:d3:f2:0d:7d:8f:fd:
                    f6:39:58:54:a2:dc:d8:68:2f:ca:03:09:52:27:5b:
                    e7:d0:b4:42:27:3b:f9:a4:1d:c3:d6:49:e5:22:d4:
                    66:23:0a:bf:e9:cb:bb:6c:96:b6:5c:73:03:81:e4:
                    61:b5:e2:28:6a:80:af:94:fb:9d:87:04:46:f8:df:
                    94:a7:79:61:34:45:71:61:80:b8:20:1d:f8:d1:56:
                    6d:31:06:f2:a3:bd:88:5d:c4:ac:2c:de:fb:0d:9b:
                    68:35:39:98:c7:99:de:33:2e:61:8a:5d:b5:87:66:
                    aa:bf:3c:55:8d:23:f5:1a:22:f7:b5:52:9f:c3:d4:
                    72:e3:5e:26:89:6f:9f:b1:0b:bf:b9:fd:11:6b:71:
                    53:76:f6:5f:0b:c3:b0:24:01:73:46:e3:4a:4a:64:
                    1e:f1:37:49:63:cd:e5:cf:9c:6c:69:1f:43:32:ca:
                    76:2a:36:1b:8a:0e:e2:9a:29:fc:0c:ce:6c:63:a4:
                    44:f1:3c:d6:bf:7c:1e:fc:0c:02:c7:ef:ec:82:01:
                    ea:bf:fe:f4:0e:da:9d:b8:b4:1c:66:29:35:62:d8:
                    7b:14:ea:26:25:7a:62:50:30:fb:96:cf:bb:fc:ea:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:C9:9F:A6:F5:5A:63:8C:00:33:91:E4:CE:02:FE:0E:0A:96:5C
            X509v3 Authority Key Identifier:
                keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:bf:58:14:7f:c0:0b:5d:a4:f9:95:f8:69:da:16:90:12:
         0f:f0:3d:c7:9c:90:92:43:37:5c:9d:60:82:c8:a9:f4:49:d2:
         8a:48:76:29:56:1e:83:50:40:de:1d:d7:6a:c9:f1:82:5d:f9:
         7a:6b:1a:d4:4a:ed:f7:fb:e7:f2:92:e2:92:81:09:09:f4:56:
         c7:a4:49:8d:31:d9:5c:88:fd:f1:10:ee:3d:55:3e:f9:83:f9:
         32:b2:17:58:e1:7b:e1:9e:8b:19:58:f6:64:c2:b3:a4:da:7c:
         9a:48:30:50:18:12:b3:d5:c7:b7:b3:3d:c2:34:9c:82:20:07:
         ee:6a:81:c4:77:1b:a0:1e:c1:c8:3e:c4:40:3a:15:b8:f2:b9:
         96:04:30:ed:c4:ff:a7:9d:a3:f6:08:dc:50:e9:51:da:c0:4d:
         c8:4a:62:7a:dc:92:af:eb:22:4d:ac:67:90:97:36:77:79:80:
         27:3c:bf:49:e1:5d:01:a0:7a:31:4c:75:9f:1c:9a:f2:ed:9b:
         b8:87:de:f9:ae:68:ad:00:7d:5a:58:30:d7:24:49:31:7e:3b:
         79:1a:1c:38:70:a8:20:d2:ca:c6:15:9e:60:42:39:76:43:71:
         d2:10:b7:ec:9c:cc:2b:62:54:db:e7:26:9b:eb:0a:8b:1f:88:
         06:e0:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----