Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File:                     Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier:          R/ONJZW2wY1aYpGJWYx8vdNjkiaOGde/eIY2cIvcq4I=
Subject key identifier:   45:DC:C9:68:78:6C:B1:8E:AF:C8:35:EE:70:B9:96:2E:D2:0B:B8:BA
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer:       /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial:       01962F743A7048D74687F79C257CC36F6A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number:          0BB4
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
                          2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: ohG4sey/0WM3AhmOCct1eElK0N/lV8OFnCe7gXCg0vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3a:70:48:d7:46:87:f7:9c:25:7c:c3:6f:6a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=45dcc968786cb18eafc835ee70b9962ed20bb8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:5f:bb:3e:90:59:94:f9:ad:99:66:99:4f:
                    86:30:81:4b:ac:c2:97:b6:23:10:f8:37:49:b7:7e:
                    93:b1:bd:e2:3b:2c:11:3c:51:4a:30:40:cd:ea:00:
                    8f:b5:02:64:ef:8a:02:21:73:a9:b1:7d:4c:e6:83:
                    32:97:52:af:79:23:1a:e6:bf:fe:b8:a9:b7:7e:dd:
                    8b:df:0d:94:df:de:ab:44:29:a0:bd:d3:92:ac:4a:
                    fd:14:0f:dd:aa:ba:49:2a:e9:8f:dd:ef:e0:18:41:
                    f4:94:d4:ea:1a:91:91:ca:ff:56:d9:e2:ce:e3:63:
                    e1:7f:30:41:03:fa:5b:db:73:14:a4:79:01:79:96:
                    37:ec:14:ed:ec:24:46:06:96:92:39:d4:4a:45:83:
                    7b:d3:e8:ac:e1:ef:8a:03:07:65:8f:8b:d0:15:6b:
                    78:5d:66:58:75:5d:8d:13:59:c3:6b:e1:f1:10:db:
                    a4:4c:31:9c:6d:6e:6d:91:48:79:4a:67:6a:62:77:
                    5d:98:7d:82:bf:6f:92:16:aa:71:65:be:d7:71:0a:
                    22:7f:60:fd:df:48:ed:75:6b:85:cc:87:9a:02:07:
                    2f:b5:a1:97:ea:02:c2:d1:88:79:71:64:7c:c9:8f:
                    8e:ad:e1:b9:5d:05:fb:96:8a:5f:79:67:e4:45:f6:
                    d8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DC:C9:68:78:6C:B1:8E:AF:C8:35:EE:70:B9:96:2E:D2:0B:B8:BA
            X509v3 Authority Key Identifier:
                keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:32:45:1f:24:e1:b2:03:8c:d7:51:5d:93:a4:36:91:5d:ab:
         bb:23:5d:e7:02:f7:0a:ea:a4:3b:a0:1f:1d:88:40:a0:a8:b4:
         d4:b3:fe:38:73:6e:2e:d2:79:35:57:b6:0c:b2:aa:85:8a:75:
         4d:ed:f7:46:67:d9:8d:b1:4c:94:38:2f:10:31:ac:41:a7:9f:
         92:6b:96:93:74:85:16:7b:92:64:7a:3f:7b:70:8b:f3:55:35:
         7e:b0:4b:a1:01:83:66:cf:6a:2f:0b:60:be:cd:fa:1f:2a:3b:
         1d:58:fa:87:9a:e1:94:c1:1b:71:97:cf:8f:91:1c:4b:ca:ae:
         23:8e:b0:e1:bc:3e:38:fd:98:a4:ec:35:cb:fb:52:f8:4c:26:
         f9:ef:70:4c:5b:30:e3:7f:4f:be:08:a9:f3:e4:e0:a2:d0:49:
         84:fe:b6:fb:4c:66:95:be:9d:e4:ad:1e:2f:8d:5b:6a:83:85:
         a0:3d:ac:9b:75:d4:d0:b8:2f:b1:84:69:69:43:82:08:5f:b5:
         ee:23:c9:36:c7:b2:17:fc:f6:d5:a1:3d:e9:de:56:1d:23:60:
         ea:64:1b:a6:5c:cc:20:dd:14:4c:3b:bc:1d:38:48:6b:68:06:
         0e:f9:21:50:ed:04:fb:51:20:4c:63:9e:4f:5f:02:4b:2d:e6:
         81:26:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----