Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File:                     yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier:          Pje1pWs/EINN9hGwQgkpWgfcDofbv4TF3vZj38tUuWk=
Subject key identifier:   2C:50:D0:CA:3E:68:A9:05:12:C9:57:12:42:66:AC:9D:0C:E7:29:61
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer:       /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial:       01962F74F86B0A8DF345178E4715C9D56099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number:          116F
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=)
                          2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: QO4gOoWWZpW3Nnsf26CZsOjZzO6ZeBfOVpQAP+gIk+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f8:6b:0a:8d:f3:45:17:8e:47:15:c9:d5:60:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=2c50d0ca3e68a90512c957124266ac9d0ce72961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:64:c9:c2:a8:6d:1a:c2:ac:9c:d1:3d:49:
                    c2:70:80:3d:df:7a:fa:c4:c2:bb:1e:3f:70:c7:c3:
                    4a:6c:25:30:33:50:35:9b:bd:98:c0:e8:d9:2a:09:
                    9e:00:7c:27:36:b3:59:ca:89:fe:3d:86:13:2e:ed:
                    89:5e:e8:fc:2a:1a:22:cc:12:3d:b7:bf:9c:e9:7c:
                    36:20:18:fc:e7:29:91:71:07:af:c2:db:a5:3c:87:
                    1f:75:7a:11:f1:01:59:39:58:e9:f8:03:e6:21:64:
                    81:b4:16:c0:b3:b6:ef:93:fa:ed:65:6a:87:d7:38:
                    ad:e4:13:80:af:64:7e:b3:79:ce:a5:a8:89:3b:ac:
                    34:f4:42:c7:fe:aa:7e:52:e6:06:5d:d2:64:34:58:
                    5c:12:60:f1:e4:a0:59:b0:2f:8a:b3:7d:cb:ac:11:
                    a0:f1:79:05:d7:ca:3b:ac:29:93:5f:b2:27:76:ac:
                    69:c5:4c:c5:a4:1c:4b:c3:25:da:20:93:fe:a2:50:
                    6c:e0:5d:a9:52:d6:b5:0d:16:b3:2a:2e:fd:4d:71:
                    68:15:d7:64:a9:96:cb:bb:64:ae:6d:58:a1:4f:9d:
                    4a:2f:79:08:7a:1f:f3:a3:00:dd:c4:5e:07:a7:e1:
                    03:b8:3a:06:56:45:f9:cd:4f:3d:a6:c3:d1:79:b1:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:D0:CA:3E:68:A9:05:12:C9:57:12:42:66:AC:9D:0C:E7:29:61
            X509v3 Authority Key Identifier:
                keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:28:4a:47:33:8e:ca:d3:6f:7a:79:5e:28:3e:e5:0d:d7:9b:
         1b:f7:45:ec:fa:5a:2c:03:f2:14:96:a7:2c:b8:cd:fb:1e:e3:
         55:49:76:d6:b7:b3:fd:fc:97:90:89:a7:8b:12:2f:0b:8e:8f:
         92:f9:df:f6:0a:ea:ee:f3:b3:d8:35:e9:6e:ef:1d:01:b4:2a:
         9f:84:6b:79:c2:d5:5a:47:07:40:0f:db:9d:b4:96:ac:27:26:
         d8:0b:8b:5f:0d:e3:7e:47:e8:93:1f:e5:f3:23:9a:fd:2a:c5:
         88:47:84:a6:1b:2c:00:8d:34:7a:81:5f:19:41:f3:e3:ba:f0:
         66:a0:b0:85:16:2f:c5:39:bd:d6:65:78:24:fd:b9:76:87:c1:
         f3:d1:9d:22:d5:ec:47:51:5f:d6:9d:14:10:ad:3e:33:2f:9b:
         b9:23:6d:00:94:b0:8a:89:98:05:9d:5f:cb:ee:0d:59:97:c5:
         3f:c6:07:f9:e0:fe:31:44:50:ab:04:05:5f:a3:d2:f4:0a:10:
         75:6d:0d:70:fe:02:b6:b0:4d:49:d6:e7:b2:79:d0:58:af:a4:
         c3:48:c4:52:a1:e1:d5:8d:dc:4e:0c:90:f4:24:7e:8e:6a:20:
         84:79:55:a0:67:fb:16:f2:91:50:29:45:9f:15:79:4c:36:13:
         3b:84:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----