Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
File:                     ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft (raw, json)
Hash identifier:          9U/7nQqg4QpUl46wCXwyMETw6BCXWWGLAVra1CKS8hk=
Subject key identifier:   F9:40:3C:81:E0:17:E9:E2:5C:C6:71:A3:1F:50:7A:0A:3A:ED:2D:7E
Authority key identifier: CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2
Certificate issuer:       /CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2
Certificate serial:       01962F06F173323CF38A78EF6550A5CFFE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
Manifest number:          A2
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: knggMszGXslbbJ2_Oh2Jaifz1gc.roa (hash: 1NY+pqUYlKwDvhTu3JTqY8SDs7jlakZ17fJjnTdwI9Y=)
                          2: ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl (hash: aIIpg0LEV/5NP0BCrGgdYHfvnQ1rODO4d/wLWMnmAQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f1:73:32:3c:f3:8a:78:ef:65:50:a5:cf:fe:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=f9403c81e017e9e25cc671a31f507a0a3aed2d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:96:06:f9:ff:76:f1:e7:8d:0b:6c:b0:f9:
                    03:fb:ac:24:85:4b:db:e3:41:14:0c:88:2f:50:b4:
                    88:7d:dc:b0:f6:ce:e3:27:ee:58:97:22:6b:bd:94:
                    01:18:00:3f:ce:4b:3b:32:92:d6:9b:45:d2:79:57:
                    e3:51:9b:2d:1a:d0:e9:b6:40:07:66:32:fc:8d:b4:
                    7e:3e:84:89:13:7d:a7:2e:a3:98:8c:e4:4c:d7:36:
                    e4:78:10:e8:ae:be:7c:5d:fe:98:42:d7:14:7d:d7:
                    34:1d:39:72:cb:f8:a1:66:47:2e:be:90:3b:3c:70:
                    2f:d9:92:85:7e:11:30:b4:21:68:dd:b8:0b:17:2c:
                    21:79:75:3d:59:62:16:c6:cb:2b:91:f7:5f:89:d8:
                    dc:2a:db:95:fa:85:1f:d7:d0:e7:21:1b:2d:70:44:
                    38:39:9e:de:e4:73:ff:f2:e0:28:dc:fb:f5:db:5d:
                    91:e7:42:66:d1:ac:ae:10:7b:4d:05:b7:fa:38:ae:
                    ac:4c:e0:bd:8e:a2:83:e7:c7:cf:80:2c:bc:b8:55:
                    1c:8c:d4:da:3e:4f:c9:aa:be:84:f6:f3:bf:ea:51:
                    11:02:e2:01:fa:4f:a2:ce:ea:bc:16:6a:fb:e5:95:
                    2b:9b:7e:e5:54:3b:97:93:20:9c:98:35:66:88:b2:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:3C:81:E0:17:E9:E2:5C:C6:71:A3:1F:50:7A:0A:3A:ED:2D:7E
            X509v3 Authority Key Identifier:
                keyid:CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:86:d5:13:c5:0a:1a:8d:53:47:a2:4f:1d:f6:61:ac:a8:
         41:a3:39:f6:c0:c2:cc:1d:35:da:ad:2c:ba:00:27:dd:38:1d:
         69:ab:be:3e:a3:d0:70:ed:b0:b0:ea:90:1e:26:0e:75:57:56:
         fa:91:88:91:d6:43:7c:57:e6:de:8c:c4:e4:8f:26:9e:4f:e1:
         f3:3e:f5:1c:2e:ac:04:fb:eb:d2:74:92:c1:e8:c5:51:ac:b7:
         f5:f9:4e:ba:99:e3:24:d9:ea:d9:e4:ab:e4:ac:ed:98:80:a0:
         b5:68:ac:c4:9c:2b:66:9a:8c:c3:48:a0:4d:6f:4a:37:67:2f:
         4e:44:7e:20:1f:fa:78:4f:a8:5a:7c:62:09:a7:96:5c:2f:40:
         04:d4:b0:1d:4e:64:5a:16:86:ce:1a:d2:00:10:8c:0a:eb:00:
         ff:32:14:80:62:c0:94:78:a6:0d:cc:ea:ee:af:2f:6e:13:8f:
         61:09:31:80:2f:4b:9f:b4:81:ed:c9:0d:68:1b:58:bb:ee:81:
         de:fc:a0:23:d6:a0:c7:f1:0a:8b:ca:f3:15:b8:d9:c4:53:08:
         cf:0c:ef:03:3a:e3:81:a4:76:eb:48:60:2e:a8:37:b3:cd:30:
         3f:0e:46:7a:cb:90:74:f9:c3:73:9a:86:31:5c:1f:f7:02:3a:
         a7:3e:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----