Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File:                     Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier:          4eXHTKmHQTQG2jSFNcQTbB+lISPQiAwJrdERdStDNSI=
Subject key identifier:   A9:C8:04:23:D8:6B:2F:0A:C0:1B:84:1D:45:66:64:65:3E:D7:5A:47
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer:       /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial:       01962F06FD3D9ADB5D2764B450E2D8487922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number:          0717
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
                          2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: 9qIu554R/+bL54lhm11vWJ6lJ974SzlotJWbbT+yozA=)
                          3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fd:3d:9a:db:5d:27:64:b4:50:e2:d8:48:79:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=a9c80423d86b2f0ac01b841d456664653ed75a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e5:c0:22:3f:5d:05:2a:e2:e7:90:83:85:23:
                    85:97:37:fd:94:ef:61:d7:fd:c7:e6:84:cc:df:56:
                    36:4e:e0:4e:9f:b7:5b:06:44:ea:c5:7d:18:20:16:
                    6c:c5:02:8d:01:96:7e:84:91:12:b3:2f:1e:56:34:
                    da:8c:a6:97:3e:89:96:91:f6:63:e5:25:9d:2f:d5:
                    a7:39:65:4b:99:b8:45:ff:e5:79:d4:52:76:fe:94:
                    23:6d:11:02:2c:4c:fe:38:ae:f7:3f:81:4a:e9:48:
                    57:0b:bd:99:7a:a1:7d:ee:db:98:e9:55:f3:87:83:
                    b9:d1:10:45:b3:44:83:15:5c:d0:76:2f:5e:f5:4a:
                    da:b3:58:bc:76:2e:49:ec:50:fa:2b:4b:13:71:a4:
                    23:00:73:89:c6:f9:a4:f0:e9:48:9a:ea:b5:ad:c6:
                    6c:fe:68:8a:db:d8:30:a0:94:7a:04:7e:26:79:ae:
                    04:67:34:d4:a3:a8:14:e7:ce:88:44:cf:0d:63:76:
                    80:26:66:f7:cf:e4:02:0d:9c:a2:7d:cc:79:b8:af:
                    69:9d:33:61:16:a3:c6:ec:12:eb:6d:b0:b8:d7:05:
                    83:a7:9e:20:6a:8d:5f:47:ac:42:d5:e1:69:6d:40:
                    1e:6c:62:cc:0e:bf:53:98:bc:ec:b7:7d:d9:1f:09:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C8:04:23:D8:6B:2F:0A:C0:1B:84:1D:45:66:64:65:3E:D7:5A:47
            X509v3 Authority Key Identifier:
                keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:ec:11:2f:37:76:70:d2:a5:62:93:96:39:37:6a:0a:b8:
         d6:6b:a4:50:39:c9:7c:cd:c0:ff:bf:1f:e2:81:28:46:29:a9:
         9e:08:7d:9e:62:af:60:b1:8f:a2:f9:ac:6f:ac:d3:c5:98:29:
         c8:ac:b6:67:11:7d:1b:f7:a9:a1:e9:96:56:4b:2f:0b:c9:f8:
         3d:9e:63:eb:d4:64:9d:5a:b4:be:03:92:67:1a:88:11:84:8c:
         91:59:a7:08:08:d3:00:8c:85:b9:a9:1f:b5:8b:51:ab:d2:40:
         38:3e:69:95:d9:1b:cf:4f:32:79:71:bf:58:3a:1d:e4:f6:de:
         2a:62:84:2a:ff:20:4b:6a:b8:b1:2e:61:1a:60:2b:e9:3f:cc:
         a4:4d:52:a0:af:90:55:19:3c:ec:ef:76:d7:e0:97:71:a5:d6:
         1c:8d:c7:87:4b:d2:b9:b6:48:f8:38:c7:5f:2f:e9:22:04:f9:
         e7:4e:d3:58:10:02:d1:6f:c0:a4:e0:47:32:13:e6:ed:cc:74:
         e0:ef:8c:d8:95:21:85:e2:28:66:ba:01:54:85:aa:1a:a9:e9:
         1a:83:0d:6f:6b:b8:22:58:f5:a8:2b:d3:c1:30:b8:5b:e1:46:
         54:e3:5f:df:36:85:ab:80:3e:95:2c:65:a7:aa:50:5c:c9:e1:
         fb:33:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----