Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          t1iBKulHjr4f1xCSFVclDZt2ntIA5zARUugCUtEsr7I=
Subject key identifier:   48:D0:92:D8:73:42:73:59:F6:86:77:87:5E:0D:DA:33:34:75:B2:00
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       01962ECFD1AFA5FBCD4126F042BD2CC5D60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          14D3
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: mkk-KHtVpdSjRTu_tkkdV37L-30.roa (hash: ivbrYqlxOhyTn42BC3RV5SMdz9F9dKpqo8vRZ2G2vog=)
                          2: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: 3piuNxqJa5rF6bR+vcGiFZGJTi33qTa5uVVUsybQ0g8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d1:af:a5:fb:cd:41:26:f0:42:bd:2c:c5:d6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=48d092d873427359f68677875e0dda333475b200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:33:8f:d0:fd:1b:12:1a:ac:82:55:c2:22:
                    4b:fa:da:2c:17:7b:8a:e8:af:e2:ef:3f:dd:9c:99:
                    b9:09:e6:13:65:54:86:b3:c3:0d:c5:77:70:3a:4c:
                    39:05:bf:0c:32:cd:b9:04:77:6c:1c:28:0c:8b:6d:
                    f6:9d:be:e9:ea:9a:c0:b0:cb:cb:ed:b1:81:37:26:
                    61:60:03:12:dd:a8:ec:d7:c2:e1:7d:a3:d2:b8:41:
                    45:7b:bb:62:fb:78:a5:12:56:8c:71:87:bb:33:a0:
                    72:41:e1:c9:07:1d:3c:74:7c:c1:e0:64:e3:da:7f:
                    5e:34:d0:b7:fa:0c:bd:9d:47:cf:c2:18:c1:3b:36:
                    da:f9:4e:19:3f:7f:82:cc:01:20:d4:5b:67:5d:61:
                    6a:1e:55:19:f7:43:40:bf:4d:fa:6e:0a:80:94:2e:
                    ce:7c:29:89:6c:02:fc:ce:02:e2:03:5b:17:61:3e:
                    6c:d9:d3:b0:47:69:34:ba:39:75:71:30:78:e0:d2:
                    e0:fb:59:9c:ef:ed:7a:1c:fd:0e:7c:dc:da:d3:48:
                    bd:da:d3:5f:5a:cd:b6:cd:8e:99:db:53:42:41:b6:
                    42:67:8e:46:f5:a4:db:74:a6:06:45:37:28:70:71:
                    dd:00:ac:41:aa:83:a5:bb:00:31:9a:3d:af:00:6a:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:92:D8:73:42:73:59:F6:86:77:87:5E:0D:DA:33:34:75:B2:00
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8f:dc:e8:b7:1d:34:c8:a5:4c:81:b7:34:dc:66:57:30:c4:
         09:12:32:d1:5b:3a:3f:66:93:76:01:43:06:44:d6:7b:27:fe:
         33:d8:2b:d1:b3:be:fc:66:d6:32:b6:e9:2e:f2:0b:55:ef:7b:
         42:b6:8a:93:a9:45:fa:17:c1:b7:39:72:4d:de:3d:18:75:61:
         6e:b5:40:6c:fd:be:2b:d9:12:a5:28:02:46:46:45:13:3b:cb:
         93:87:b1:dd:93:d1:75:d4:8b:fe:42:02:a9:ce:b9:64:dc:d3:
         23:89:5d:f8:4d:cd:ff:19:34:76:c8:8a:1f:95:b8:99:45:08:
         62:f1:9b:97:0c:2e:ec:3a:57:6f:da:24:1f:e6:af:6c:1a:ea:
         b9:91:98:b9:99:55:f4:ae:00:f9:53:83:4c:35:1b:af:b3:27:
         d3:42:98:1a:33:4c:c6:d7:f9:8f:0f:e6:5b:4f:08:b1:55:37:
         8f:81:2d:1e:91:2f:ba:aa:be:96:d9:a1:cb:a1:3b:5c:e2:7f:
         27:d5:b4:81:48:b3:43:62:e8:b5:59:79:dd:46:e5:db:18:97:
         bb:4e:e8:a9:71:26:7d:f0:d2:d5:52:fe:d5:3d:4c:3a:8b:c2:
         d4:43:c8:a0:60:81:3e:bc:01:3f:78:95:e6:81:54:1e:a6:ab:
         4e:2f:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----