Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File:                     YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier:          70qowHjeb1k7hOsQRtPqCBqUodcVxbW5f16g0DreQLA=
Subject key identifier:   7A:89:C5:54:D8:91:BA:C4:5B:76:14:71:F9:EC:BB:67:51:FE:1F:96
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer:       /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial:       01962FAB458C120304AD908807B19A3E1D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number:          044C
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: slI70QwA8QosMpG9wi7wyoDrv/ia3qnCpRqZjxNEw+E=)
                          2: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:45:8c:12:03:04:ad:90:88:07:b1:9a:3e:1d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=7a89c554d891bac45b761471f9ecbb6751fe1f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:a5:33:fe:13:df:0d:1a:b7:97:1e:6b:5d:
                    0f:81:39:c2:e1:13:22:b8:71:40:9a:0d:e7:d6:21:
                    44:ee:3d:a1:7b:41:c3:38:9d:d3:8f:40:a7:37:11:
                    4b:f9:2c:ae:2b:e8:64:18:83:a4:b6:55:be:1e:26:
                    51:d7:1b:46:36:1f:8d:7d:f9:fb:85:7b:d1:38:63:
                    e7:7b:71:70:a0:3c:52:3a:2c:27:4c:cd:25:38:9c:
                    d5:eb:b7:1e:25:89:5c:5e:64:b7:e9:0c:f2:94:a6:
                    6f:ae:c8:52:04:5b:5f:41:6f:42:9e:0f:9d:af:40:
                    79:7e:9a:39:c3:8b:00:ac:f3:a4:f1:7d:d3:1a:8b:
                    2a:50:5b:24:d6:91:5a:fa:b1:df:6e:e9:b8:d4:65:
                    67:94:cf:33:ba:6f:d7:97:6d:7c:e5:70:05:3a:f2:
                    be:ff:02:16:1e:99:99:cb:3a:dd:b8:fb:d0:63:b0:
                    a7:23:43:6e:43:f0:ec:12:72:ac:74:6a:1b:fd:a9:
                    19:48:32:86:d8:06:3b:d4:28:23:f6:7e:5f:ea:12:
                    1c:81:90:f2:7d:9e:9d:6a:4b:b8:b1:47:c6:71:0c:
                    19:cd:8d:60:13:2e:6e:82:a7:03:87:a6:9e:49:79:
                    2d:8f:2a:fb:7a:34:81:d1:a0:68:de:54:84:66:03:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:C5:54:D8:91:BA:C4:5B:76:14:71:F9:EC:BB:67:51:FE:1F:96
            X509v3 Authority Key Identifier:
                keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:72:1d:da:4f:dd:cf:02:b7:e1:6d:31:c2:e9:69:92:b6:3b:
         73:c7:ee:6b:50:ce:43:ec:e4:0a:61:bc:cd:c4:14:a9:be:74:
         ea:b0:e8:d1:91:d0:55:55:41:96:d7:26:bb:d1:4b:10:3b:ad:
         fb:17:8b:6a:95:f0:7e:8d:b2:30:57:c6:57:83:80:c4:91:f7:
         52:74:23:c3:3c:e0:45:ce:c6:74:c7:ed:b2:e9:b9:5f:ad:8b:
         e5:ea:79:de:93:a3:f3:fb:47:4d:79:40:f1:c9:8d:4d:17:ab:
         1c:6b:48:db:fb:df:d9:75:2d:4d:e9:a8:dd:58:07:62:e3:a0:
         31:d6:cf:b8:49:15:66:c7:a8:09:90:a3:24:50:9d:39:5c:41:
         b4:14:d4:9d:67:1d:9d:69:da:ef:5d:ec:81:ac:81:f8:e6:16:
         91:c2:90:1f:27:ad:66:5a:e5:f1:17:67:08:22:81:3b:3a:cd:
         2c:d1:ea:19:c3:12:5d:1f:b7:e5:09:7d:8a:c5:41:74:27:c5:
         f2:e6:8b:04:cc:f0:b0:28:2b:95:eb:50:82:5f:02:6f:b1:c2:
         13:11:e2:63:6c:42:21:0a:af:7e:c4:86:e8:ef:5b:de:46:79:
         31:2d:b4:9c:03:7b:35:bc:9b:71:0c:a5:af:e1:73:ed:36:28:
         04:70:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----