Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File:                     ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier:          qHqf7RWgDxyu71Bm1WwD3zzRVfdJJqrvRfBSC/oUbfg=
Subject key identifier:   81:5F:C6:04:96:9F:9A:9A:8C:8F:89:78:2C:2E:B7:8D:1E:4B:E2:CE
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer:       /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial:       01962E994B087FFED6FB8C48320AD50B1755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number:          1059
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: rZxv41cp7uTMubhRsmuYwR9EaSjJsH1eQiDuW3n+v7s=)
                          2: ya12EPtNrcF0udvEcU2cfD6dvXE.roa (hash: JqrMXae8q96ruf/DmoCDw76yVSkMluiHBgpoAg21vqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4b:08:7f:fe:d6:fb:8c:48:32:0a:d5:0b:17:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=815fc604969f9a9a8c8f89782c2eb78d1e4be2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:48:ff:f2:d4:64:fc:6d:bb:63:20:ef:9c:
                    b8:e8:ef:b3:e4:be:68:ad:0b:eb:a6:64:21:10:fb:
                    11:9e:da:62:75:c9:31:19:0a:c0:7e:76:c2:56:1f:
                    d6:2d:b3:a1:6f:f9:78:7e:b7:5f:04:94:b9:2a:67:
                    31:2e:c8:b6:fb:82:af:86:47:51:aa:43:68:5d:66:
                    e7:7e:74:d1:61:2e:ef:d1:ba:3f:0c:e4:ed:21:c3:
                    8e:1b:6b:73:ec:83:a6:5c:1a:4b:33:f6:70:fe:b6:
                    ad:b2:9a:e3:73:e0:21:90:03:3c:6a:67:8a:b2:4c:
                    e6:80:7f:68:1a:af:d3:8e:00:72:76:1f:88:33:d4:
                    ad:6a:16:3a:91:5d:b9:18:ce:12:de:2e:89:3a:5e:
                    dd:45:6a:04:5b:30:ff:f1:ee:88:ba:59:68:80:80:
                    6b:57:8d:83:45:e8:16:8a:4b:0e:07:11:66:40:09:
                    e8:c9:1c:65:7d:b2:ec:27:5f:7f:94:75:cb:69:ba:
                    81:82:c5:59:66:d2:55:5a:35:46:19:46:fd:9f:c7:
                    73:8b:80:77:88:e4:3a:b8:87:b6:2c:e7:ca:a7:4c:
                    64:fe:5c:33:f9:02:ce:5d:fa:c7:a1:77:aa:05:8e:
                    f1:92:04:22:3b:f6:b4:69:13:25:38:15:ed:8d:2e:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:C6:04:96:9F:9A:9A:8C:8F:89:78:2C:2E:B7:8D:1E:4B:E2:CE
            X509v3 Authority Key Identifier:
                keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:34:e9:ae:40:a2:65:a8:a1:5e:c0:dd:e7:cd:c7:4d:4a:
         2f:1b:19:c3:8f:1f:94:3e:10:5a:63:6a:1a:ff:ab:1c:f3:2e:
         be:5c:cc:2c:2e:4a:a1:34:9c:2a:e8:c2:5d:f2:dc:be:b6:d8:
         a3:9b:d6:d9:81:ea:6b:61:c3:6d:93:a6:09:93:50:d0:b3:1e:
         1b:42:78:b4:39:e2:af:28:2e:18:48:b1:1b:7a:65:1d:ad:b3:
         87:3f:16:55:d5:cc:bb:65:a6:a6:26:6e:7f:6d:ae:de:fc:c7:
         18:c4:62:be:aa:c8:7f:b2:d6:d0:d9:40:ab:32:d4:bd:b4:c2:
         7f:76:bf:2c:f2:b3:ab:32:a7:a4:eb:58:05:a5:78:b4:b1:08:
         0d:5a:cb:3b:74:3b:c8:a9:c5:f0:d8:cc:c2:24:24:36:57:bc:
         a7:43:fd:30:fc:6c:2e:ba:7a:5b:df:c0:dd:b6:18:e5:f8:f2:
         b4:6a:b3:4a:26:98:96:02:9b:9e:6a:4c:f0:7d:47:92:d1:74:
         90:f0:49:c0:f1:3a:cc:39:e6:a2:f2:38:5c:19:ca:b3:f6:6b:
         48:18:9d:3f:3c:bf:df:3b:3f:a8:a2:f3:56:86:45:d0:72:03:
         cf:62:89:32:84:94:a1:d7:2f:5c:1d:7d:19:fd:c6:3c:da:8a:
         19:3d:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----