Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File:                     ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier:          slJytR5zJhffcuQWxc6vuoCjLQGEa3Z0rXmn5dBTsP4=
Subject key identifier:   34:CD:1C:F1:13:74:3D:91:B0:47:1F:FA:90:E9:35:1C:6F:CC:CB:EC
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer:       /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial:       01962F0673CD2EC7AD41AE86211EADE9A8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
                          2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: KnLkR0XCSemctWQPbDco5XiN52OO1+WvJqENxDwy37Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:73:cd:2e:c7:ad:41:ae:86:21:1e:ad:e9:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=34cd1cf113743d91b0471ffa90e9351c6fcccbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:54:b6:33:d9:ba:8c:d7:6f:0e:24:af:86:
                    91:bd:2a:40:0b:ad:dc:4c:03:33:f5:0b:ab:1f:0f:
                    87:48:21:4a:86:2f:65:49:c8:05:88:8e:13:c6:22:
                    6b:d5:02:06:84:ed:fe:17:3c:3b:a9:63:f6:0d:6f:
                    c1:4b:81:f3:5d:2a:3f:7f:a0:9d:7b:bf:a9:ae:78:
                    50:f9:dd:b4:1e:69:89:4d:bb:c8:22:3f:fc:8e:7b:
                    31:3e:2d:c4:b9:16:99:93:24:cd:70:04:c5:6e:c3:
                    5a:88:21:5b:4f:dc:19:7a:21:bd:a8:51:84:57:71:
                    69:76:66:c8:a0:06:74:ba:f6:a0:85:49:90:2e:f0:
                    7a:e8:b7:a6:03:20:0b:5e:b4:e7:c6:9f:b4:0d:3f:
                    ad:92:be:39:9b:dc:f1:3a:7c:e5:f0:36:80:d0:50:
                    a1:ff:62:6e:8d:e0:cd:dd:7f:b5:f7:01:f4:9a:e9:
                    6a:85:c3:40:f6:01:53:19:4e:bd:ee:09:36:8e:96:
                    d8:d6:75:2a:fb:cd:15:3c:27:86:6a:62:32:71:e9:
                    58:a3:93:8e:6e:35:ad:a3:bb:c1:50:1e:55:86:6b:
                    52:b4:d6:af:1e:d2:b9:00:b1:87:b6:be:22:ea:5d:
                    87:38:9b:74:34:db:11:9e:f5:f9:6b:33:fb:5f:2e:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CD:1C:F1:13:74:3D:91:B0:47:1F:FA:90:E9:35:1C:6F:CC:CB:EC
            X509v3 Authority Key Identifier:
                keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:17:f8:a2:2d:a1:6d:b3:ee:ff:84:d0:ec:2f:70:b9:ae:
         3f:ec:9c:b5:e6:9a:5b:f2:fa:6f:3d:a1:ba:ca:94:07:48:50:
         41:16:6e:43:76:8b:09:96:c2:f8:67:ab:94:ce:1f:a6:83:73:
         43:aa:4d:e3:f4:c5:dc:61:ed:38:f6:3a:6c:52:56:ce:c3:ab:
         fd:4a:06:ed:a1:16:01:fb:08:18:8c:ea:bb:da:2b:b4:9d:c9:
         c6:d4:63:76:b4:39:c7:e5:d8:5b:fa:ae:7c:d2:3f:c4:52:a7:
         f7:95:f0:19:00:98:7f:70:cf:43:f0:76:68:aa:10:08:17:87:
         34:20:b8:ab:7f:63:04:62:bc:f4:10:74:23:c7:33:33:6a:3c:
         ee:86:df:62:58:1a:55:c8:dd:f7:01:26:ee:29:5d:d0:89:12:
         02:80:4c:8f:4d:0e:e0:55:9e:57:cd:70:ed:6b:1a:eb:dc:04:
         ce:a3:a1:98:aa:23:74:6f:c3:65:ce:eb:bb:de:2d:2c:da:f8:
         6e:34:9d:c3:d6:8e:97:49:31:a6:eb:50:3f:a1:55:a3:71:0d:
         dc:1d:55:79:7a:58:04:8e:56:e2:3c:e5:00:e2:0d:db:52:0b:
         f7:b3:28:c0:05:5c:92:ec:f4:6c:4f:d4:02:c6:f2:4d:60:f2:
         8b:4e:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----