Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File:                     YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier:          POkCYWHcz0Ep59RkLYa8To8KqAWWkdFQum+rPtBHEoI=
Subject key identifier:   9A:CC:A8:21:FC:AE:32:AC:96:4C:FD:94:76:5E:1E:DB:1F:83:47:D3
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer:       /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial:       01962DF3E79783ABD3133D720BF74CD80A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
                          2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: +xTS3D4XrdZOvgA+0Bsq+2DVYP+x9wTk/YhARCT3BHM=)
                          3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:97:83:ab:d3:13:3d:72:0b:f7:4c:d8:0a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=9acca821fcae32ac964cfd94765e1edb1f8347d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:2d:35:72:e8:f9:cb:24:22:f0:22:02:38:
                    0d:84:14:bb:ca:81:9a:4c:1f:b0:bd:90:16:3f:79:
                    f0:f0:4f:f2:06:88:4c:52:c7:ce:ba:91:e4:d2:ce:
                    1f:b3:15:60:e5:36:f9:79:fb:ea:3f:47:ac:9e:c3:
                    98:eb:64:d4:09:44:fd:11:f9:ac:3b:cb:df:68:40:
                    c5:c9:91:26:39:89:64:20:f9:77:48:02:31:ed:a8:
                    8d:67:e8:cc:5c:ae:6c:b1:05:ef:4c:0d:20:50:e8:
                    a1:2e:c1:ea:8e:09:03:26:c1:45:c7:76:fd:c8:00:
                    7d:a1:3c:a4:cf:cf:df:91:ac:fa:16:73:d7:e9:e7:
                    7c:5a:1b:dd:23:d5:27:50:9a:f6:fa:04:ce:e9:29:
                    6b:6f:3b:4f:6f:e8:52:06:4f:d9:bb:cc:2a:09:d3:
                    d8:4d:d2:61:d9:45:0a:36:5f:79:46:54:2a:b1:cc:
                    41:b2:32:b9:ef:81:d9:da:6b:6f:77:ad:3d:4c:57:
                    e1:b5:cd:cb:79:a6:2f:22:18:83:ec:d0:80:2d:aa:
                    e7:31:56:a6:c0:6e:2a:27:43:e2:f2:b1:f9:a3:8b:
                    9a:c5:f8:5e:c2:9c:07:07:41:45:6f:1c:77:fb:13:
                    fc:33:ed:94:b8:ce:7e:f0:07:15:50:fe:ae:8a:46:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CC:A8:21:FC:AE:32:AC:96:4C:FD:94:76:5E:1E:DB:1F:83:47:D3
            X509v3 Authority Key Identifier:
                keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:cd:b3:4a:ff:00:4c:37:f7:6a:db:a3:d1:a3:3e:11:d7:
         25:bd:71:70:60:8e:65:2c:85:21:4a:cc:b7:48:c2:3e:87:57:
         75:b3:99:b8:ed:c7:5b:90:30:79:0a:89:2d:bf:51:a7:72:dc:
         b1:23:67:ef:f6:9f:94:23:be:65:3a:57:bf:40:84:f0:8b:2e:
         42:0a:27:83:e8:e1:e3:3d:b4:4d:6c:b4:ed:7c:5d:3e:33:92:
         70:8d:fb:ac:99:41:8c:6a:f9:4d:b7:da:a4:cc:1f:da:d5:f0:
         63:0c:14:a9:d1:75:e7:e4:8e:45:3b:31:25:f7:70:c8:b0:32:
         be:4d:91:25:65:4b:32:a6:a2:22:f2:8e:83:69:56:37:4e:7f:
         f5:54:b2:7c:38:93:e9:4a:24:8c:5c:72:1b:ec:5b:48:5f:cf:
         cf:e2:ce:13:f5:1e:77:fd:1d:09:24:a7:c0:c5:d7:6e:3c:39:
         24:e4:9a:2c:0a:12:a0:f9:14:40:f6:11:7f:c8:68:9a:f5:5c:
         31:38:c1:63:26:39:86:49:2c:b1:3a:26:7c:22:52:c9:0c:19:
         d8:06:75:db:56:05:2f:82:c7:60:22:0b:3d:a8:5c:c5:78:47:
         10:eb:0e:c1:5d:1a:0e:c4:61:22:08:c3:b8:47:ea:0a:1c:d2:
         f2:27:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----