Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File:                     yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier:          s3yB8/HNOZYRYZIcmALmmClTM+xiOAtkOC3Rgl3R1h0=
Subject key identifier:   5A:05:7C:72:21:94:A5:03:F0:EE:3A:81:C0:E1:DE:A4:41:D8:8A:AA
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer:       /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial:       01962F0713BA19174CCCD813098D3A718102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number:          0C97
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (hash: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=)
                          2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: euLQPyN7bx8tWozj7/3Cia3Q008ejpe4bfQG3EkUO/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:13:ba:19:17:4c:cc:d8:13:09:8d:3a:71:81:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=5a057c722194a503f0ee3a81c0e1dea441d88aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:01:1e:e8:a4:08:e3:22:71:ae:1e:42:8f:
                    b4:9d:26:2d:7f:c9:61:7b:92:75:bf:31:e2:a0:5b:
                    2a:c9:21:c7:c1:91:f5:ab:73:ad:50:6c:2e:81:15:
                    9d:d1:e5:e1:00:47:96:8e:f3:a3:a1:56:63:26:13:
                    01:49:59:4e:15:25:d7:0d:e7:be:c8:52:cb:f3:fd:
                    8b:14:2d:e8:ad:12:85:2c:e9:47:6c:85:ec:0a:27:
                    dd:99:d0:8a:2d:6c:6c:16:c0:1a:60:bc:31:37:34:
                    53:27:ec:79:3f:96:c0:9b:bb:c0:67:41:2a:ce:1b:
                    e1:58:45:97:13:c1:dc:17:c2:94:8f:61:cd:d8:a9:
                    17:3c:c8:39:55:eb:21:59:7b:c1:95:65:18:c5:e9:
                    39:86:28:03:f7:21:79:d8:1a:b9:ce:84:d8:23:98:
                    9b:c5:af:b5:70:6c:b9:b4:fd:c0:ec:53:e6:5d:c2:
                    90:83:77:2c:9e:5b:66:a0:63:c1:b3:bf:cb:7e:04:
                    6a:45:fd:f5:6d:f5:3a:ca:e5:cf:e8:7f:c1:e9:db:
                    ea:53:58:96:9e:57:90:80:08:e6:e9:5d:10:07:3b:
                    da:bd:86:60:97:42:89:f6:83:5a:a7:bf:9f:48:8a:
                    9a:fd:28:31:8d:75:cf:e1:c2:bb:65:60:4c:70:cf:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:05:7C:72:21:94:A5:03:F0:EE:3A:81:C0:E1:DE:A4:41:D8:8A:AA
            X509v3 Authority Key Identifier:
                keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:54:4e:78:d6:4c:88:cb:af:61:29:2c:cb:ff:e2:be:a8:c7:
         ac:75:4d:f6:0b:09:3c:b7:29:9a:96:12:a1:fd:dc:e7:d7:96:
         c7:b9:aa:01:48:f4:ce:20:7f:2d:b9:9f:00:5d:1b:a9:2f:f4:
         33:21:4d:59:d4:34:c2:4f:3e:f3:c4:af:95:47:37:e7:38:61:
         cc:bd:20:2e:e4:82:50:42:3a:6b:ad:ca:ac:a3:d5:9e:f2:e1:
         b0:24:94:40:d1:74:a0:f0:94:81:76:3a:c4:43:7b:22:de:44:
         b1:79:0c:ab:36:b3:fc:e9:ee:2c:5f:0d:54:80:65:f0:8a:88:
         bd:c1:41:2d:8b:2f:66:0b:05:c2:45:66:07:4c:f8:f3:bc:d4:
         e3:c2:95:f5:bc:9b:50:6d:68:98:b0:56:db:18:95:f8:39:77:
         64:c5:e4:ee:98:ad:bc:05:75:cc:2b:e8:30:d2:3a:f8:40:cb:
         48:fb:f7:ec:fa:53:e9:27:df:e1:30:54:76:53:49:89:32:f7:
         bf:aa:56:93:b8:45:02:aa:05:24:0d:ef:63:04:bc:4b:52:58:
         c3:73:e2:42:67:a9:af:37:81:c1:a9:80:ae:f7:a3:ca:31:8b:
         8f:4b:88:75:8b:72:dd:94:16:af:3a:00:ef:63:47:97:8f:e2:
         d5:74:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----