Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File:                     Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier:          y8h3WYFO5CMda7jSQ2O/3kiLbih45AkKlMgKABcm3v0=
Subject key identifier:   44:5E:43:EA:0C:AE:68:B3:AE:03:0A:DA:B6:E8:25:06:EF:26:72:49
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer:       /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial:       01962E2AFC18D5C5BCE0D6E506362D5FD25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number:          11AB
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
                          2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: JDvFEhoV1oGkg+CtnEgcQz24Mu0N3wGXp6H34Vg/WAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fc:18:d5:c5:bc:e0:d6:e5:06:36:2d:5f:d2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=445e43ea0cae68b3ae030adab6e82506ef267249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:a5:1d:f0:d1:94:50:7c:f0:1a:97:e9:42:
                    39:72:fb:c6:da:c9:44:e7:6e:93:4f:d2:92:d7:ae:
                    7e:88:61:b3:e1:df:35:b7:82:11:c9:fa:95:5e:b3:
                    b9:47:35:5d:7a:9b:db:ec:30:35:67:0e:ad:31:14:
                    29:cf:32:6e:5b:49:f5:e4:56:9e:b6:1d:aa:28:ba:
                    7a:ec:61:7f:ba:5c:1e:54:8f:c4:ff:42:04:21:ed:
                    08:a4:43:5c:37:9b:1a:b6:73:d1:37:25:3e:63:bd:
                    e3:86:68:4a:24:19:fd:0a:8b:ff:a6:b6:a9:fa:c6:
                    26:79:44:ee:2c:06:f9:7f:71:d3:ad:e1:63:37:1f:
                    b5:ed:28:a3:73:65:95:82:af:b4:38:25:b0:ec:69:
                    11:c7:b0:b8:a3:86:42:f9:8f:bc:cd:ab:f7:31:bd:
                    09:77:d5:ed:3d:45:fb:e4:b3:19:b8:48:bd:7f:69:
                    ee:19:75:e2:0b:53:35:ee:dc:95:7d:19:7b:b4:d8:
                    12:78:17:0e:2a:92:93:62:fb:f0:b8:a6:b3:73:3e:
                    f1:54:3e:e6:11:d5:77:8e:cd:41:84:10:06:32:40:
                    6a:65:34:91:47:6e:6a:22:6c:45:9c:cb:15:0f:2c:
                    f8:60:b1:c1:83:d6:11:da:ac:8e:7c:05:6a:bb:7a:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:43:EA:0C:AE:68:B3:AE:03:0A:DA:B6:E8:25:06:EF:26:72:49
            X509v3 Authority Key Identifier:
                keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ee:55:13:f7:25:f3:77:cf:93:f2:ce:e7:03:df:9c:48:e5:
         e8:f3:51:dd:68:de:2a:11:a4:d2:01:d6:ee:b4:45:8e:56:f7:
         72:45:ff:ba:e8:c7:b5:0d:5d:cc:2c:a5:f4:08:43:27:14:35:
         0b:25:a4:a6:76:4b:9a:34:7a:6c:26:73:6c:c6:09:b5:3c:3d:
         42:b5:d9:ae:b9:0e:ad:39:3d:06:f0:f3:8f:1c:64:1a:f4:1c:
         25:d6:0c:ae:52:0d:05:24:a0:e7:6d:af:a8:87:87:c8:75:d4:
         1d:fe:a3:6b:4c:33:29:48:9f:be:69:b8:5a:51:8b:6f:50:c8:
         eb:a8:7c:ec:c6:92:c8:10:00:11:b3:38:33:54:5c:42:ca:54:
         06:4b:53:32:7f:26:1e:b4:6e:60:e0:5f:0f:78:24:4f:e9:40:
         84:d2:2a:0a:34:0e:20:68:b0:f9:e6:7f:a3:00:5b:e5:ee:3b:
         e1:cb:1f:01:6e:6d:a3:58:b1:a5:01:ae:02:53:87:c0:83:37:
         a7:ef:10:b3:90:af:77:ba:0e:cf:da:71:47:24:4d:85:b3:de:
         84:34:85:7f:00:57:ae:79:da:7f:ff:49:74:11:94:60:d1:0b:
         fd:f4:8b:a4:c8:5e:67:97:33:11:d5:08:16:99:8a:68:6a:d7:
         7d:70:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----