Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File:                     yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier:          Ti6kBE6+QwXryuyHlunAnGjJrIloIwilj+aLUHAWdW0=
Subject key identifier:   B5:3D:BF:24:B5:D6:D9:CF:8D:0A:DC:81:DF:89:06:4A:79:79:5D:32
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer:       /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial:       01962E98A17523F7A13A860684CD0505D6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
                          2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
                          3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: 2tcah6yz45cTK5IHIwQQJqgRvdvfDvwYzu5IBcwFvUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:75:23:f7:a1:3a:86:06:84:cd:05:05:d6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=b53dbf24b5d6d9cf8d0adc81df89064a79795d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:ff:80:d3:8f:dc:2b:95:a9:21:9f:34:b8:
                    42:12:7e:28:14:31:d4:ea:98:f0:50:29:2a:6d:34:
                    a2:f0:52:d5:e1:5e:fb:4c:1d:4a:b6:51:99:9b:fd:
                    3c:89:86:cc:c7:4e:2e:f8:96:9d:70:79:b6:9f:fb:
                    ce:f6:bb:11:fa:43:53:61:b9:d9:45:87:ac:cc:4c:
                    2c:a4:03:f1:60:51:8b:93:34:47:0e:4b:84:bc:e2:
                    3e:17:4c:27:b2:67:9b:ef:37:6b:7b:cf:6a:33:98:
                    a7:80:64:78:12:35:19:87:ed:40:64:db:71:33:7c:
                    10:20:16:65:d4:92:dd:83:7c:e1:2e:2e:5f:60:27:
                    b3:8a:5c:57:1d:f8:dd:07:86:41:b0:f5:90:c1:e9:
                    ec:90:c6:fe:e5:2e:86:40:cb:ab:b8:f9:c2:c6:c6:
                    47:1d:2a:fb:e2:58:95:1a:35:a7:92:62:0e:ad:3a:
                    a4:24:ce:0d:40:93:29:b1:48:e9:96:e2:e7:93:7a:
                    22:63:a8:ed:5e:1b:b4:d0:0f:2b:f5:34:fd:9d:dd:
                    3b:da:86:b4:0c:55:3b:82:5e:da:a1:48:9d:3e:76:
                    1b:c3:6c:83:aa:d6:67:77:ac:da:69:93:f5:eb:e7:
                    59:fa:f9:72:97:a5:02:a0:b6:5c:77:ff:37:02:81:
                    4e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3D:BF:24:B5:D6:D9:CF:8D:0A:DC:81:DF:89:06:4A:79:79:5D:32
            X509v3 Authority Key Identifier:
                keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b3:1c:74:fb:7a:d9:40:0a:ef:39:ff:ba:0a:a0:88:6f:ce:
         36:74:be:38:44:bc:dc:5a:7a:10:63:18:cf:e5:21:96:0b:cd:
         e7:4e:08:49:28:f4:9b:ed:17:42:69:08:68:1e:f1:b4:10:87:
         28:9e:a0:da:15:e6:f0:d0:56:c3:a2:ea:fd:86:a3:a2:a3:30:
         d8:f0:b7:dd:14:02:d2:9e:37:55:24:05:53:b9:f3:0e:b2:cc:
         90:f6:c5:53:a2:90:66:4b:95:bf:56:8c:ff:6e:17:b9:a0:08:
         7b:6e:34:27:79:30:f8:09:2c:57:5b:27:b8:8b:6f:84:c3:c7:
         5c:f7:f1:db:48:2c:bf:62:be:15:6e:e8:1f:5f:c7:2b:6c:27:
         9f:87:71:71:3b:89:ab:ae:f1:43:14:85:c3:fd:a1:a6:74:0a:
         57:05:7a:cd:67:b6:e8:b9:78:4e:be:d3:bf:21:12:00:f8:2e:
         d5:71:bf:eb:61:9f:c4:b6:c4:ca:3c:ff:d7:dc:55:4a:57:56:
         3f:9b:c3:e7:7b:13:60:a1:f8:eb:27:59:a8:8b:d3:e5:77:11:
         05:34:f7:4d:10:a4:71:1f:1c:b6:a2:f1:be:72:c0:4f:a1:35:
         2f:69:3a:a9:0a:4f:e5:ee:b1:18:fe:78:4b:f4:25:1a:39:47:
         52:bb:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----