Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File:                     yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier:          tEbzdE2YCjgJcBPbOZe1xZyN5txD5SWxVo8n47snXJ4=
Subject key identifier:   99:98:E3:C9:BF:17:9E:04:3A:C5:B5:D5:E4:3D:58:57:E4:60:22:C7
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer:       /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial:       01962F74B2C5456B9E7D29C675A6A63FAF99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: P9+SFNF94he8xEWsShGYMo85Lrq3LeW/+6rjPSopZ+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:c5:45:6b:9e:7d:29:c6:75:a6:a6:3f:af:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=9998e3c9bf179e043ac5b5d5e43d5857e46022c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:f2:0b:1e:bf:04:48:11:ba:18:69:95:0a:
                    67:ee:ec:2a:7e:2d:f4:3d:98:6d:1c:66:9f:96:ce:
                    e3:42:23:27:74:cc:11:80:77:05:1a:fb:94:c6:ac:
                    05:49:19:0b:f7:de:db:40:32:1a:8b:8e:20:3a:ad:
                    83:f0:3a:4a:f6:d6:16:17:f8:36:0f:fc:2c:ce:1d:
                    d4:e8:46:b8:4a:6a:82:17:7a:67:a6:a5:78:22:67:
                    08:8b:b5:6f:55:59:ad:e6:4f:90:4c:db:4a:85:28:
                    58:34:86:7a:a8:33:ec:2a:33:b8:78:6c:04:0d:01:
                    7b:ec:5e:16:22:e2:d3:8b:2d:cf:09:a5:6b:7e:6c:
                    d4:0b:49:8d:7a:e6:9d:04:ab:d6:27:80:2b:49:55:
                    40:3e:0f:e9:0a:d9:79:c6:05:3f:66:0d:0c:fc:af:
                    49:20:9c:3c:1d:c9:1a:dc:21:05:4e:7f:02:99:0b:
                    ad:08:02:96:a4:d6:c0:f8:b7:51:e8:5b:77:95:b7:
                    d2:16:2c:33:ce:15:7f:09:3a:b7:8a:3a:f2:a2:c7:
                    6d:e3:4b:58:a5:5e:48:a7:79:37:dc:6e:ef:7a:d0:
                    d7:53:4d:98:57:5c:e0:49:e4:9d:49:99:df:24:88:
                    5f:a6:5e:21:f5:5c:ff:af:90:ae:ea:f7:5b:36:1e:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:98:E3:C9:BF:17:9E:04:3A:C5:B5:D5:E4:3D:58:57:E4:60:22:C7
            X509v3 Authority Key Identifier:
                keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:bb:fc:8e:60:2d:1b:68:91:0a:22:c5:69:53:31:75:5f:
         1b:08:93:c7:a8:58:d9:29:d2:d7:1c:06:81:33:3d:2a:5f:51:
         07:7f:95:38:6e:d2:2b:0c:f0:ca:ba:c0:f1:05:ef:cf:d0:a5:
         59:dc:b6:07:b0:67:0e:a5:ad:ec:42:4c:61:f1:80:72:9f:5c:
         62:67:a6:55:ba:68:a1:9d:5a:71:83:a1:1f:ca:ed:d5:08:7b:
         ee:dd:57:a0:6e:7d:19:82:bb:ec:79:63:c6:31:9d:09:d9:f2:
         8a:4f:80:3f:cb:03:06:b6:1b:db:a5:69:17:ae:65:69:47:1e:
         3a:dd:7c:16:95:95:12:c6:78:9d:ec:c9:c3:aa:fe:2f:a4:4f:
         6c:d3:2f:e8:87:c7:32:b5:1b:ed:4f:a1:10:91:02:af:b0:58:
         aa:91:c6:b1:87:64:ae:85:10:22:f3:b6:77:fc:1f:a6:c1:1c:
         80:c0:d1:b2:5e:41:2f:b8:07:e1:9e:a0:8f:12:7c:dd:fa:ba:
         42:5d:cf:fc:ae:81:36:ed:bd:6a:d7:06:c4:11:50:ba:e3:9e:
         72:d2:af:39:94:57:87:aa:23:49:19:f5:7e:f9:7b:23:6a:d1:
         91:82:53:4a:31:80:61:91:d8:e4:78:af:42:d1:75:b5:76:1b:
         4a:a3:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----