Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File:                     YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier:          cFX+DjaSqUUv01SFICAGHcttRe1kJBADIrjujiDIkic=
Subject key identifier:   84:52:22:06:8A:CC:E3:67:61:5F:8F:95:28:06:96:7D:0C:F2:D9:07
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer:       /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial:       01962DF39964FC237DC00920260B6FAB5800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: E4EYXN522ndPntgF7L/nHajF5JjSc1uVasd+tk7Yg9w=)
                          2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:99:64:fc:23:7d:c0:09:20:26:0b:6f:ab:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=845222068acce367615f8f952806967d0cf2d907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:53:56:6d:67:4a:a5:87:58:22:0a:5d:e6:
                    0c:7c:ed:b3:5e:b5:24:8c:5b:4e:08:03:c4:2a:ab:
                    f5:68:b1:04:22:40:c1:f0:d9:e6:e2:47:1a:ae:99:
                    4d:3a:05:fd:63:57:05:f0:ee:74:5e:7c:0e:c4:cb:
                    69:0a:df:67:13:f0:1d:6e:d7:01:1a:f5:19:7f:ef:
                    c9:5d:79:fc:3c:ef:d6:90:95:07:a1:94:0c:87:fb:
                    db:0a:f0:7b:6b:58:ce:ce:20:21:fd:a5:17:45:9f:
                    e9:35:16:d5:d8:3f:de:21:52:98:e2:f8:b6:16:60:
                    71:a6:75:cd:42:1a:c0:ba:26:fc:d8:3b:11:82:4d:
                    d2:36:b6:96:c3:b9:ef:17:1f:50:d7:53:87:4a:2a:
                    ce:1b:16:10:2b:ac:02:06:7c:69:de:85:90:7a:1e:
                    a9:da:f3:fb:3e:f3:74:7e:1b:8a:0e:87:3b:4d:db:
                    49:e2:b6:a7:4b:53:f0:0d:99:67:a5:f6:c7:64:92:
                    0f:b7:9f:11:9c:6a:b3:f1:3a:75:24:5a:31:d4:5c:
                    92:83:2d:a9:61:22:a0:f8:e2:4b:fc:59:d6:39:d8:
                    50:62:fc:3c:e0:34:80:d5:37:7e:30:f0:d4:ed:66:
                    02:65:93:71:ad:3c:a6:53:6d:eb:ef:ca:fb:38:11:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:22:06:8A:CC:E3:67:61:5F:8F:95:28:06:96:7D:0C:F2:D9:07
            X509v3 Authority Key Identifier:
                keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:5c:20:98:9c:3d:16:35:a0:a2:ef:20:2b:11:31:c5:b6:b6:
         9b:36:07:78:c1:ae:d5:3e:41:64:4f:57:81:3a:34:33:24:fe:
         ef:d0:80:80:84:7e:04:e9:c3:02:99:11:f9:6d:89:5b:04:54:
         51:e4:69:3d:dc:ca:54:ad:67:af:11:46:41:77:a1:f5:28:55:
         c1:c5:00:e9:30:d1:63:58:25:15:cd:5c:ea:24:f2:43:84:54:
         4e:e4:13:15:9c:6e:13:9c:5c:cf:61:3e:8b:29:58:00:8c:19:
         ed:af:ef:0c:d1:30:ed:80:58:da:6d:49:c6:72:37:49:ec:fb:
         cb:4b:02:c6:fa:00:9d:65:5f:6c:cb:d2:d7:b4:0c:72:1b:81:
         87:be:d7:9f:bf:75:06:81:02:d4:0c:22:ad:d1:1e:0d:1f:21:
         99:4c:56:0f:5a:5f:5a:3c:ee:6c:8d:12:ad:6a:68:81:97:93:
         a9:91:5b:0e:bc:40:54:d0:26:6d:06:1b:b9:13:1d:f5:f6:43:
         01:ab:8b:2f:76:54:2d:68:19:3f:5a:71:ab:e6:4d:f8:f6:8c:
         12:59:a5:71:eb:f3:fd:10:f3:0c:25:87:35:1d:25:58:ff:a8:
         ab:fe:29:48:0d:15:cb:2c:8f:92:b5:3a:39:d1:49:41:df:b5:
         72:78:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----