Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          FtTma+m+9GvtbbUbAVYm7LgNWOJ9UJEFfuZ42ZC5U9U=
Subject key identifier:   6F:92:A8:45:14:8C:9A:A8:01:8D:B8:40:22:36:86:E2:B0:4F:18:35
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       01962E9911194EEA3FC6C8D9B92F8BDB8586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          028F
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: pCl6MTIW0dhZt+EUk58FYcYkXWmTCY7AhbDdd1BSAuk=)
                          2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:11:19:4e:ea:3f:c6:c8:d9:b9:2f:8b:db:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=6f92a845148c9aa8018db840223686e2b04f1835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:64:ff:ad:fc:20:d8:66:8e:76:9a:22:33:
                    57:2d:f1:36:3b:d3:1a:81:73:2a:78:ce:91:10:90:
                    32:30:6e:4c:5a:a5:87:d4:e4:a3:ff:5a:56:e7:e7:
                    78:c4:04:33:a3:0c:7b:f3:5d:61:6f:72:3d:cf:52:
                    85:3a:6e:e8:57:66:68:68:2e:d4:a1:cd:84:f4:7c:
                    3e:dd:f7:85:4c:85:91:06:2d:8d:de:e2:89:3f:66:
                    26:24:4e:96:83:a0:00:81:a0:17:5a:ab:cf:cf:c7:
                    3c:04:71:c0:87:8b:ab:62:7f:55:31:3f:e1:4b:eb:
                    92:0e:1f:db:6c:9b:78:bf:b5:23:ac:8d:8d:d9:62:
                    bd:ec:04:0a:90:8d:90:12:82:c5:a2:7a:46:fb:2e:
                    d3:50:7d:34:b6:14:ee:8e:8b:36:c6:b7:57:70:8c:
                    56:1e:87:8a:8f:9c:99:b3:7d:aa:77:29:e9:a9:b3:
                    a9:4e:77:17:fe:3c:c2:f0:cc:c1:4a:11:7c:b3:41:
                    51:38:5e:da:31:ed:50:92:12:b8:43:e0:41:98:57:
                    69:f6:8f:50:e3:df:13:21:a8:27:89:86:ba:bd:27:
                    93:f7:1c:24:43:0a:06:31:e9:9c:a6:42:f4:e3:02:
                    91:86:b6:39:d0:2e:fc:f8:8b:a2:13:f7:e6:10:08:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:92:A8:45:14:8C:9A:A8:01:8D:B8:40:22:36:86:E2:B0:4F:18:35
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:0b:0f:6b:39:a7:6e:51:90:c2:fe:48:81:bf:cd:bb:8f:7a:
         1b:c9:18:c3:72:8f:14:71:c6:d2:30:44:35:7d:b5:4b:61:05:
         00:e0:e0:65:c5:63:05:3d:fe:f6:cd:05:09:90:01:d2:8f:28:
         3e:22:9b:d1:b3:57:9a:98:bb:46:55:f2:b1:cc:c0:af:81:1c:
         74:81:3a:e2:46:be:1a:a6:5c:fe:47:85:e6:7f:e3:a6:84:1b:
         e2:f7:88:0c:95:29:2e:0a:a9:8c:90:b5:f2:6d:28:bb:a5:c6:
         f6:60:02:99:53:28:bc:5e:f4:94:86:0d:c4:f7:ed:f4:76:0b:
         7e:ec:01:9e:20:36:7a:fd:20:39:62:bf:b6:ab:fd:eb:1c:86:
         82:f9:da:81:7b:f2:b6:26:f7:20:f7:ec:40:ba:86:05:33:cc:
         3d:7e:4b:6c:41:45:3b:b0:fc:0b:8e:87:41:cb:8c:a0:be:5a:
         0f:94:ca:0d:ea:76:f8:c6:a7:7a:73:da:fc:67:ed:f8:17:63:
         b7:cd:83:41:96:eb:96:e9:cf:55:6c:8a:1e:65:24:4a:11:c1:
         e9:f3:26:85:1e:b5:b4:2d:64:a6:cd:54:29:9c:62:e1:30:ea:
         90:ce:18:c3:00:0b:dc:7c:08:5e:48:f1:c9:29:4d:7f:6c:a7:
         28:66:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----