Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File:                     ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier:          9qIpuUtjuFkzE6wuZy+42JMl/tl5LFxScw4zE8Gq6EQ=
Subject key identifier:   EB:89:5A:A7:5C:07:E7:87:4A:14:88:FA:B4:94:8F:8E:4A:F7:CB:EE
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       01962F7467D86CF28F4346FC94A6569B33CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number:          0424
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
                          2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
                          3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
                          4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: wjAdyZl54uB/KJeE8Zo9a8K/AH8+J7ouvftRQa4xPQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:67:d8:6c:f2:8f:43:46:fc:94:a6:56:9b:33:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=eb895aa75c07e7874a1488fab4948f8e4af7cbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:0a:cc:c4:db:1b:fc:3c:39:d2:d8:b4:97:
                    b3:3c:32:e9:5f:b7:d6:70:a4:49:d0:c7:e4:53:2c:
                    a7:28:c1:ce:44:b4:4e:2a:66:6b:91:46:8a:2c:e7:
                    67:66:d3:13:d0:71:b9:ba:3f:3b:52:27:e8:19:2b:
                    49:36:49:41:0d:d6:e0:3f:49:7a:11:fd:19:89:63:
                    22:f6:c3:b1:fc:e8:0f:56:e8:5c:43:df:2c:57:7f:
                    85:c6:cc:f9:4f:8c:74:de:26:91:07:07:f0:41:e3:
                    3f:6a:f4:00:63:29:47:63:88:3e:e2:3a:45:12:a6:
                    e4:49:88:e7:9c:c0:36:d4:fe:a6:3d:e3:6c:28:10:
                    bf:0c:b1:9c:53:9c:98:c9:98:ac:27:e7:38:4d:c1:
                    83:14:21:cd:74:06:b8:fb:e0:8a:bd:6a:e5:74:aa:
                    da:f1:bb:01:0f:62:c8:38:26:25:4b:6c:47:0e:68:
                    fe:80:21:fa:1e:f3:b1:4e:41:03:4e:58:ce:f9:4d:
                    a4:64:d8:3c:28:0e:82:49:4a:3c:08:de:6c:d4:bb:
                    d3:40:a1:02:c1:72:28:1a:b0:24:87:f8:92:ff:42:
                    e4:f8:f0:55:c1:6f:89:15:dd:64:e6:c2:b7:9c:ae:
                    7c:52:3f:84:cd:b7:8a:40:4f:c4:ad:0e:60:55:6e:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:5A:A7:5C:07:E7:87:4A:14:88:FA:B4:94:8F:8E:4A:F7:CB:EE
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:b8:6c:00:fc:f9:c1:e9:ce:03:12:a9:d2:39:9b:0a:92:
         74:3d:2a:9e:7e:78:93:93:3c:2b:85:bf:74:d3:33:c2:d0:a3:
         50:be:73:9c:c8:71:8a:d8:d3:cb:49:2c:49:32:79:a7:fc:44:
         45:18:f2:48:23:38:6e:b8:a6:24:26:a1:f8:06:7a:e1:86:93:
         c9:ba:a2:c1:26:8e:9a:93:79:27:2d:38:4f:5a:ea:b5:8d:ad:
         81:8e:6d:53:27:b1:4d:13:5c:00:65:97:b5:6f:ac:97:ce:23:
         b1:7e:db:99:c8:78:b9:06:0a:1b:75:40:bb:68:2c:c8:9d:a1:
         20:2f:05:d2:51:29:2f:b5:76:dc:a0:55:26:f1:99:e9:22:30:
         6e:be:5a:0e:8e:84:f5:ea:c1:13:c4:e9:ff:a8:fd:dd:b6:80:
         0d:06:81:eb:a5:97:4b:49:1c:a1:12:06:51:ed:20:69:66:27:
         82:a2:48:84:a3:2b:ca:16:3d:54:e9:39:7c:20:45:a0:56:bc:
         55:11:f3:ad:af:d9:cf:b4:19:8a:25:f5:f4:cd:8d:4e:ad:00:
         cb:e9:9c:c2:81:e2:88:c9:96:dd:e9:ae:7c:08:09:16:f9:25:
         d3:48:10:17:b1:92:75:f6:8b:40:de:9d:f2:4e:6f:03:db:ab:
         0c:64:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----