Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File:                     YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier:          xF17UVzYPit7jNe2jAAA5CoHddrEoZYOe2VfJg3pTrE=
Subject key identifier:   AE:54:95:9B:78:A4:D9:30:C5:A1:61:C5:33:AC:B7:5E:BA:58:1F:84
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer:       /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial:       01962E98CC66610EC1FCB577A9A83B3E83CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number:          0F2A
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: wvW/tRajnfXNerK5RomDW3oXdZ6DNGjOL2xPNtUdSJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cc:66:61:0e:c1:fc:b5:77:a9:a8:3b:3e:83:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=ae54959b78a4d930c5a161c533acb75eba581f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:cd:09:94:cc:76:af:52:86:48:d4:58:0e:
                    36:ba:52:de:c8:d5:3f:fc:15:16:d9:0e:da:e8:ea:
                    41:23:44:3b:be:8f:b9:68:28:47:75:81:33:72:42:
                    78:1e:7d:4e:c3:72:1e:84:bf:22:76:83:ab:bf:96:
                    6f:4a:2f:e9:1e:0f:5a:8b:e2:e8:a2:b6:24:eb:e8:
                    0c:28:f5:63:3a:b6:96:56:06:85:5d:b8:65:ea:55:
                    ee:59:e1:4b:fb:f1:31:38:9d:68:93:2a:76:fc:52:
                    0e:c3:cb:f5:7f:c3:aa:2f:d9:6f:9a:fb:ed:fa:49:
                    3e:b4:07:d0:43:13:36:fe:3e:c2:6f:eb:35:74:a3:
                    fa:fc:15:80:4b:6e:6a:7f:8d:55:8a:09:ce:1c:82:
                    b4:78:b2:5c:4d:02:c4:87:40:2a:f7:e1:0e:4b:b7:
                    ea:2b:1d:8c:d7:b3:84:03:27:ae:00:f0:d5:04:23:
                    84:33:ca:a2:40:24:30:4e:1f:02:48:71:9f:f4:91:
                    21:4a:dd:a3:aa:58:c8:d9:25:70:d6:25:32:35:38:
                    c0:20:f0:7b:50:e1:00:8a:ce:26:80:f8:6e:1d:41:
                    e1:45:85:a9:2b:bf:70:7a:53:a6:da:f8:95:0d:b1:
                    9d:7e:47:01:ca:5b:25:02:08:f3:9e:b2:7c:54:f4:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:54:95:9B:78:A4:D9:30:C5:A1:61:C5:33:AC:B7:5E:BA:58:1F:84
            X509v3 Authority Key Identifier:
                keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:14:de:4f:48:92:2d:a0:78:2e:48:9d:ac:31:27:40:49:d4:
         94:9c:7d:83:a4:9d:48:e1:8a:e3:84:30:97:9d:69:3d:4b:1d:
         50:54:59:cb:90:31:48:50:f0:b6:a3:ad:7a:b4:e3:0e:b2:43:
         70:ca:59:66:bd:cb:39:c1:7e:2a:5b:e3:71:6c:b4:98:d5:a9:
         a2:49:5d:ef:27:e8:b0:0f:06:d7:6b:d3:8a:80:aa:28:10:2e:
         9d:06:cd:2c:38:d6:f3:93:c9:6b:c4:11:00:89:a3:8b:b7:38:
         1c:29:98:04:93:9f:94:bd:12:e1:44:5f:84:d2:84:fc:e2:5b:
         fd:b0:50:0b:cc:69:e2:41:f1:de:7b:42:27:90:6f:74:fc:79:
         19:9b:1f:9f:85:07:3c:75:30:13:46:ea:f6:1b:ac:25:9f:b9:
         e4:30:a7:42:51:85:83:94:5f:57:79:7c:dc:73:e0:51:83:ba:
         56:cc:6d:b8:b4:d4:f2:97:76:fa:a7:03:38:9d:ce:d4:5e:0a:
         fa:e1:f5:da:97:4b:00:53:7b:27:73:25:e8:30:d3:c0:d2:e1:
         82:a4:20:9c:d9:4e:6f:41:b2:67:2c:bb:2c:cd:c2:68:aa:73:
         54:75:0a:28:c9:96:25:98:3b:89:29:be:28:67:3a:a7:0e:c2:
         f1:fb:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----