Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File:                     YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier:          KJ6osdMKuZcP4kBr93gmDFj1tMogFMD+J2YS428DjAg=
Subject key identifier:   BF:96:A0:89:09:16:4B:E4:64:E5:D5:60:B9:41:68:D5:19:68:C4:B9
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer:       /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial:       01962FAB1B3A8B8A5BDCADB45E16E6882F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
                          2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: Qqccx9gtOJ8tZ9T9B430flrKzGSmtgaLs65GlBloW5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1b:3a:8b:8a:5b:dc:ad:b4:5e:16:e6:88:2f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=bf96a08909164be464e5d560b94168d51968c4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:86:15:f2:d6:c0:2d:f8:a2:32:d3:f9:50:
                    d3:47:dc:35:b3:55:cd:07:74:c2:20:9e:3e:fb:88:
                    d4:51:7d:7c:68:f7:8e:a5:7d:62:64:dd:7a:63:78:
                    17:66:86:34:09:c4:db:b8:24:7d:d2:46:4a:be:8c:
                    b6:db:a7:dd:60:44:7d:17:62:2f:f1:6d:28:24:9a:
                    4a:b0:c0:40:a3:24:97:8f:c3:94:89:35:f4:21:76:
                    e3:85:76:e0:10:e8:c3:f3:80:c2:23:f5:de:64:fc:
                    07:90:b0:8f:ef:e1:75:e0:45:64:11:d7:43:40:b5:
                    47:ac:aa:56:8b:fb:6e:68:f0:e9:83:c3:d4:e0:dd:
                    96:d7:22:13:ba:1a:4f:30:96:7c:e4:a8:a8:6b:a6:
                    d1:27:72:f4:7c:7d:41:86:04:ec:1f:b4:8f:65:71:
                    94:49:74:75:da:66:2e:52:6a:e0:ff:a0:7d:5f:f7:
                    73:cb:0c:56:95:f2:5b:d7:65:2d:c9:c3:f3:f8:12:
                    67:2c:4f:f2:8c:62:3f:ce:32:57:01:63:20:f5:cf:
                    ea:e7:c2:1d:36:4e:48:29:8f:79:06:5a:bc:ec:bd:
                    ee:2c:2a:ff:51:cd:87:10:1f:a7:40:be:c0:c6:40:
                    5b:52:ee:f0:d1:49:6f:07:ca:26:f1:9c:ae:4c:be:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:96:A0:89:09:16:4B:E4:64:E5:D5:60:B9:41:68:D5:19:68:C4:B9
            X509v3 Authority Key Identifier:
                keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:da:51:be:40:ab:21:b1:60:90:a2:58:81:7a:1f:3d:53:
         cb:7e:1a:b7:73:33:d0:9c:11:a8:28:13:e0:13:c5:4f:47:ab:
         69:aa:60:37:8f:ca:cc:51:98:fd:b3:82:82:26:9c:13:61:e9:
         3f:6c:a9:dd:52:24:5b:ee:5e:c2:6b:08:47:92:30:8b:5e:42:
         1a:45:f3:fd:b6:a0:eb:da:3d:47:41:cd:1b:56:0a:16:ab:4e:
         86:16:02:a6:41:10:ef:55:0d:ec:03:05:b1:b1:ab:ff:29:54:
         66:ec:ea:9a:80:71:39:8f:7f:51:87:24:24:7f:50:a6:7e:24:
         ca:c5:5f:72:14:3f:d3:be:06:a5:08:3e:e2:ca:13:46:90:51:
         cb:88:1a:b0:92:f6:68:83:43:b8:f1:98:15:45:69:f5:7b:66:
         7c:46:d4:20:74:6a:71:7f:4c:c1:87:00:f0:4a:1f:81:d7:fb:
         c3:8c:36:ab:e6:6a:5d:f4:29:a3:a5:1e:75:5c:5d:88:f7:db:
         d3:aa:2b:f8:29:ce:a1:78:f4:37:18:dd:64:54:70:3d:2e:16:
         80:c0:b2:c2:21:81:85:50:be:2c:95:72:5d:d9:94:7a:ba:d8:
         80:dc:ad:af:24:cb:fd:4d:f7:10:5e:12:d7:b3:83:02:2b:8f:
         97:65:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----