Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          KcMlDk3vtbaVpszI7ZK9obi9AZB2hNSQ3KBqKVlRAHM=
Subject key identifier:   64:97:7B:EB:1B:8A:04:32:60:26:81:00:FE:0D:C5:D2:65:FF:96:CD
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       01962FAB2DB0E251739507D64129ECF7AAB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          097B
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: wf685q4oL0494SR24TptjZJo17qyB2r+VG3le1PNVOA=)
                          2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2d:b0:e2:51:73:95:07:d6:41:29:ec:f7:aa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=64977beb1b8a043260268100fe0dc5d265ff96cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:ba:76:9a:10:91:bc:8f:89:b1:de:96:47:
                    17:a0:46:4f:d3:02:dd:d6:73:2f:91:c8:1e:eb:62:
                    f1:1c:00:58:cb:f4:4c:fb:05:c4:74:62:ad:4a:11:
                    7c:bc:52:e6:31:51:2e:16:8c:cd:90:bf:33:96:97:
                    d8:ac:f8:98:d1:8f:04:0e:ae:57:84:71:9a:50:42:
                    b0:07:e6:55:9b:37:9c:af:a3:3b:80:32:c1:90:33:
                    43:8c:17:b9:0a:c0:06:42:13:fc:54:5c:95:88:60:
                    fa:5e:59:37:33:f9:59:0d:e4:c2:ef:e3:72:a9:ce:
                    58:5a:c4:67:e9:53:8c:fb:3b:ff:03:ad:93:7c:41:
                    39:ca:78:eb:ed:b7:8c:ac:38:bf:3b:57:17:5e:6e:
                    ce:cf:89:6e:cb:4c:f4:54:77:48:4c:65:12:04:a9:
                    fc:79:38:9b:4a:55:55:92:8d:46:3e:e1:32:56:fb:
                    a0:aa:a0:2a:65:99:52:be:06:1a:82:40:48:6b:8a:
                    22:65:66:4d:fe:83:c7:f3:c1:f0:b3:b7:11:01:ef:
                    16:87:53:c1:bb:e9:4a:eb:20:db:a2:e9:ef:88:dd:
                    86:47:32:c4:5c:60:6b:de:84:51:0b:01:b4:82:fe:
                    62:f4:a3:7f:f7:7a:b3:4f:2e:27:13:4a:e7:4f:55:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:7B:EB:1B:8A:04:32:60:26:81:00:FE:0D:C5:D2:65:FF:96:CD
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:31:70:12:22:ff:ff:3d:b3:b7:70:bd:bc:50:52:6f:e7:87:
         0a:52:df:82:8b:42:75:9a:14:fe:ff:01:8e:69:30:a5:93:45:
         5b:4a:7f:f2:e2:fa:2a:2e:f9:5b:cc:78:d3:a9:e2:1c:fc:3c:
         2c:2c:ba:67:39:5a:a3:99:1b:26:f2:b4:c5:37:4b:24:fa:8f:
         f3:e5:45:45:6e:cb:b8:c4:f0:a3:34:6c:e3:8b:2b:a0:35:d4:
         27:7a:a7:7a:01:15:eb:ca:99:11:eb:9b:ac:2c:ce:2a:42:5a:
         bf:1b:aa:e5:40:e4:ef:6b:2f:73:bd:c9:b8:63:da:66:0b:93:
         09:f6:4f:b8:87:b5:18:73:cb:8d:25:63:01:fc:4a:3b:d1:d0:
         aa:1a:97:99:39:f8:8a:40:a8:bc:26:97:47:cc:fe:45:c5:c5:
         08:de:24:80:d9:41:e8:31:7f:dc:78:df:44:52:4e:45:63:69:
         66:56:e3:33:77:6d:7a:ac:32:ef:b3:b0:1b:0c:e3:df:0b:8c:
         6e:8b:8b:ac:1a:33:af:8b:cd:e1:85:cb:7e:3d:d8:2b:e8:18:
         91:cc:a8:31:5e:80:59:c1:53:0e:eb:b1:c5:3e:e1:26:6d:c1:
         23:96:ac:0d:0c:ff:4e:93:0f:49:4d:2b:2b:91:76:a2:cd:52:
         1e:6a:b3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----