Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File:                     yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier:          PzECyBrRSXnQIzXSS4WVQe5UNrpaZxursLc1GDM0cPI=
Subject key identifier:   18:1E:B5:C4:E4:28:9B:5E:63:35:EC:46:03:61:44:E6:FE:92:79:B6
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer:       /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial:       01962E2B1F6B6EE8C50D53A2B415BB3D0ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number:          0595
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
                          2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
                          3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: 8azSWUkvyW7rX77vwGZw0VKdjUwBD1zEWnHIhUiOBes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1f:6b:6e:e8:c5:0d:53:a2:b4:15:bb:3d:0a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=181eb5c4e4289b5e6335ec46036144e6fe9279b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:19:4e:92:02:08:d8:d4:24:0f:50:3e:2d:
                    bf:37:69:87:7f:8b:82:83:80:77:21:00:cd:f5:90:
                    ab:04:cd:6f:8f:c6:b5:eb:28:31:23:2a:df:6c:c6:
                    4b:e2:1f:28:c4:ca:7d:d1:da:83:7d:aa:99:4e:5a:
                    67:b7:40:38:57:7c:cc:e7:da:d8:6b:8c:d8:6d:f1:
                    6f:93:3e:99:3f:cc:ef:cf:a5:27:b9:8a:77:10:69:
                    6e:b5:52:36:b1:dc:6e:50:f7:52:80:06:e2:1d:a0:
                    c0:72:1d:28:d1:d6:1d:6e:9a:6a:2b:98:a7:af:a5:
                    df:a0:e0:6b:5f:0d:3a:f1:00:5f:2f:1d:78:0d:18:
                    23:9f:3f:2b:0a:7a:60:cc:ea:61:eb:a7:18:07:d0:
                    35:02:1e:77:ed:61:9b:a8:f3:5e:c5:d1:b6:07:48:
                    96:d5:2d:4d:ea:ae:e1:36:0d:5a:14:7e:7d:dc:6e:
                    91:32:c2:38:b8:6a:a1:63:d1:90:da:47:1f:29:00:
                    7d:b4:24:b0:fc:e7:78:79:0d:a1:60:58:fb:49:90:
                    37:ef:7f:cb:d3:cc:2d:4b:0c:95:fa:6d:cb:35:f8:
                    b6:0e:f7:52:34:80:d3:a4:1f:79:b4:4a:c9:ed:9f:
                    41:21:a3:c3:46:49:a2:48:13:48:26:c3:16:a0:ae:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1E:B5:C4:E4:28:9B:5E:63:35:EC:46:03:61:44:E6:FE:92:79:B6
            X509v3 Authority Key Identifier:
                keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:38:61:79:05:2f:2e:dc:84:92:9c:af:0d:0f:68:39:0c:83:
         3b:dd:da:08:8b:bd:4f:e0:b9:db:08:ee:a8:3c:26:3d:f8:37:
         f1:18:4b:94:1f:17:21:67:07:be:77:29:de:8b:16:81:48:ad:
         a9:4b:0f:42:64:4b:fe:55:d0:27:63:75:c9:b1:62:38:b7:2e:
         aa:f1:93:a2:84:a9:a6:ae:3d:28:fc:49:94:9e:62:bd:db:ab:
         06:8a:00:78:1a:86:14:cf:f7:a8:c1:72:f7:df:53:fb:df:48:
         97:12:e3:2f:10:cd:aa:26:07:40:d2:2e:02:95:8c:aa:7f:0d:
         58:53:34:a5:54:36:49:d8:5f:17:0e:6f:8a:1a:7a:15:f2:3e:
         bf:33:75:90:84:04:f9:36:ad:b4:35:6a:a3:3d:ae:82:84:e0:
         71:79:c2:b3:d0:0a:b6:f3:33:cb:9f:a6:2c:1f:f2:ad:3c:46:
         b1:d3:28:d0:89:5c:36:c3:4c:05:ae:b9:a9:ee:1e:ea:d8:d3:
         ec:75:aa:2a:e8:a5:bb:5c:6d:37:ce:fe:3a:2a:b5:68:ba:5f:
         93:a2:76:1e:71:52:a3:97:d3:25:45:13:c2:f0:92:11:02:ab:
         a3:cf:6f:9e:00:8a:a6:cd:26:34:15:9c:2f:54:d1:34:1e:61:
         58:63:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----