Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File:                     YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier:          xmLWucL3Szpr/WYyf6CiJUrN5jB73oLi14IpHsGDd3Y=
Subject key identifier:   85:63:1A:8D:8C:AA:14:82:21:EB:39:3E:CE:0E:AD:FA:2D:B2:A3:A2
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer:       /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial:       01962E98DB5F1E05594C1A934CF2A63D24FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: GAtpt0RtnCqTzYKVspiwADI68/nqQyueyAyh8rSnjgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:db:5f:1e:05:59:4c:1a:93:4c:f2:a6:3d:24:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=85631a8d8caa148221eb393ece0eadfa2db2a3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d5:ec:bb:cd:d2:e3:a9:54:91:ad:72:e5:d0:
                    12:51:8a:37:fe:7e:f9:a6:2c:19:5a:d6:06:67:71:
                    82:e7:79:0d:1e:fc:02:e5:c7:df:d4:cb:17:c3:b5:
                    17:ad:76:1b:1a:b6:1b:43:4d:23:8f:ef:4a:bb:dc:
                    48:0b:5d:af:d4:40:35:cf:7c:a1:6f:b1:9b:b1:47:
                    b4:a0:fc:14:7f:9f:e5:1d:f7:d6:87:1f:40:92:59:
                    e1:dd:15:36:d6:50:1f:f2:24:23:e3:b6:85:e7:26:
                    62:e8:10:b8:d6:46:b5:1a:a1:14:a1:c6:88:fa:32:
                    33:37:16:8e:c2:f8:d0:6c:d2:5b:1a:4c:71:56:40:
                    ef:be:60:1c:7f:d5:56:e7:f2:6b:ce:b9:3a:71:8c:
                    e6:14:aa:86:ce:af:91:8d:7e:cc:de:7c:67:c1:18:
                    fa:27:a3:08:da:32:4d:10:e1:2c:79:a4:c3:dd:be:
                    8f:95:e1:63:d1:b3:a2:fd:b5:9d:d7:69:e7:97:b0:
                    54:ec:c8:c8:fd:1f:5e:42:7a:16:45:a9:91:59:d4:
                    70:68:f2:ce:b7:d1:0a:c8:41:b3:40:d3:3c:af:b2:
                    7c:5c:f7:e5:d0:49:c4:ee:4b:1d:b9:3c:79:e7:c4:
                    1b:0f:49:b0:2e:87:2d:c0:db:bf:fd:1f:29:47:45:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:63:1A:8D:8C:AA:14:82:21:EB:39:3E:CE:0E:AD:FA:2D:B2:A3:A2
            X509v3 Authority Key Identifier:
                keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:17:8d:97:cc:a7:70:d5:cc:af:1b:e4:b4:46:fb:c1:06:
         8a:cc:a8:9e:b9:ef:98:af:af:40:92:9c:77:0e:d1:f3:cc:ee:
         37:51:b7:a5:70:d3:be:24:97:32:18:30:9b:ef:25:a4:45:1b:
         cc:43:0c:d4:5a:15:4e:29:56:12:60:a2:9c:a2:2d:27:d5:5b:
         18:7b:f2:31:b1:25:31:22:80:e0:5d:5c:a1:b0:69:80:15:85:
         cf:84:10:01:6c:d1:4c:18:49:a7:55:00:f8:49:96:d6:f6:e4:
         82:9c:a1:0d:64:60:c4:53:96:ba:10:de:2c:13:6c:61:03:bc:
         44:36:44:88:d4:ec:d8:c9:6f:bd:cc:b1:c8:45:7f:0c:a7:46:
         3f:f6:18:6f:5f:fc:19:11:2d:57:65:74:2b:79:9f:61:48:38:
         4b:34:df:34:10:d3:65:8a:e8:b1:11:25:8d:b2:65:62:7f:83:
         15:bc:79:a4:07:2a:fe:4e:c6:b0:5c:89:f3:32:7a:4e:35:26:
         1d:4c:43:36:6d:18:0f:78:bb:22:be:c5:be:53:13:89:a0:3b:
         8f:46:a4:c6:20:21:b2:fa:28:80:86:c0:74:e0:28:97:66:c7:
         ea:db:2d:5f:a9:76:7c:fe:ff:a0:ae:65:d0:dc:00:6b:01:24:
         3a:8e:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----