Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File:                     Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier:          GA5dibTa1yXifBfOFUo9ojKsI33juZC3U8il+oYfFsM=
Subject key identifier:   2A:6D:EE:6A:AB:5F:7F:2C:37:1D:FF:3E:C0:FF:07:3A:23:B2:91:B2
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer:       /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial:       01962E2AFAB2BF2C1DA30365018DC5E894F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number:          0C79
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
                          2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: /So+YZJnaL84qLuVew+nSRurWAu8HZUuNNfjioY7kro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:b2:bf:2c:1d:a3:03:65:01:8d:c5:e8:94:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=2a6dee6aab5f7f2c371dff3ec0ff073a23b291b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:ff:6e:da:64:ad:4e:eb:2c:49:b0:d8:01:
                    80:10:e0:57:20:7c:8f:be:e9:ef:cb:65:47:cf:9d:
                    78:e9:5f:d9:a7:7d:6b:da:85:78:08:21:4b:59:f9:
                    f3:e8:cf:09:d6:98:c4:f4:89:8d:32:a3:6b:cb:bb:
                    0e:11:c9:5d:67:d4:00:6c:df:b9:c0:d1:bc:cd:14:
                    6d:26:5e:75:af:f8:15:89:97:7d:85:ee:55:b8:05:
                    27:c7:bb:ed:5b:81:15:a6:62:d7:1a:8a:22:11:b4:
                    cd:bb:a7:82:f0:6c:5e:a0:80:e2:46:8f:16:21:91:
                    e2:be:2e:00:51:08:d1:4c:9c:9a:db:83:d7:41:ca:
                    3a:b6:82:3a:8c:d2:9c:00:53:87:35:b1:16:9a:cc:
                    2a:d3:27:d1:7b:9b:97:41:50:96:7f:d0:00:13:00:
                    08:37:ce:e4:7c:e7:b9:5d:8f:cc:ff:ad:f7:e4:25:
                    ed:2b:9a:d4:dc:22:0f:44:b0:ff:ba:4f:c9:e8:e6:
                    b8:22:71:3c:2b:81:49:21:e9:73:4d:ba:c3:eb:00:
                    8d:75:b7:04:99:e1:2b:0c:53:0f:f9:8a:04:f2:1c:
                    6d:2e:b1:3a:35:2c:76:85:07:c5:70:30:54:b5:87:
                    98:cd:66:df:b2:66:30:6b:29:ed:26:87:44:ed:38:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6D:EE:6A:AB:5F:7F:2C:37:1D:FF:3E:C0:FF:07:3A:23:B2:91:B2
            X509v3 Authority Key Identifier:
                keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5e:8d:96:e1:6a:36:14:c0:f2:4e:a5:49:2f:c4:25:a7:80:
         e6:e7:98:3f:08:21:bf:72:7f:dc:7b:d5:64:91:6f:2f:73:7b:
         5a:8d:e6:98:a6:78:90:70:31:8f:d0:bd:e3:00:e3:d5:3e:8e:
         2e:6d:ec:61:1b:7b:dc:bd:eb:d6:b9:7a:ee:b1:b2:56:67:4d:
         3a:78:03:3a:5c:7c:63:75:c1:42:75:20:05:4e:bb:89:f4:e5:
         fd:88:2e:5d:e2:b5:c3:5c:be:43:bf:ed:ae:c0:51:c6:77:99:
         dc:16:9e:1e:06:22:cc:4a:84:9e:e4:aa:91:de:34:ea:ed:a4:
         9d:06:76:56:7a:e8:cf:57:7d:c0:d0:21:73:c4:99:ce:b9:86:
         c7:b2:62:76:5a:18:d8:b0:b9:bd:6c:df:79:26:45:18:a2:69:
         e3:c9:c2:82:52:f3:be:d4:80:8b:19:df:c4:48:25:1e:d1:39:
         1a:4d:15:0c:f5:1c:35:8f:8d:05:15:77:36:20:84:66:49:c9:
         7b:85:4e:24:42:9a:87:a8:6e:84:6e:99:f0:0c:0c:ec:f9:a0:
         94:e9:ad:c1:41:05:3b:85:ba:9b:7d:c2:04:92:bb:6e:ee:74:
         d2:1f:6a:fa:84:05:ea:77:61:8a:84:80:11:a9:3d:8d:13:22:
         64:16:41:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----