Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File:                     YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier:          ntPLZip0zHNN47RuSicXUgROK+RFnoHc1blAfdNRd40=
Subject key identifier:   1A:F0:2B:6F:55:AC:EB:92:E0:70:A4:B4:FC:1C:A7:C1:4B:B5:27:D7
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer:       /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial:       01962E61E9FF82DB5CEC9D91457CD55235C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number:          13C9
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: bGl+BfHf/x47mvxTsQwnCGVsBNhGggq/x5Xajl8ljfU=)
                          2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:ff:82:db:5c:ec:9d:91:45:7c:d5:52:35:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=1af02b6f55aceb92e070a4b4fc1ca7c14bb527d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:27:3a:7f:3f:21:15:42:8c:72:eb:51:43:
                    37:6e:18:98:78:c6:6d:77:9c:09:fc:ce:9e:89:4a:
                    75:24:24:8f:7f:a9:8e:a2:dd:10:00:54:69:8d:49:
                    93:85:70:fe:8f:63:65:b7:f4:ac:7a:32:e2:15:cd:
                    ce:b1:24:67:3a:6a:2c:6b:59:34:29:7c:0b:4f:d7:
                    9c:63:0b:69:45:b5:fa:f7:56:b1:d5:2b:0f:7c:f6:
                    e2:5f:01:0f:62:4e:87:0d:ba:4f:31:26:a3:f8:5b:
                    af:82:7d:6d:e2:c5:3b:ac:b6:e7:13:38:4a:9b:df:
                    e9:29:38:90:e9:12:df:f4:67:35:ac:e9:86:42:c0:
                    a1:b2:30:32:f8:f9:32:8c:49:a8:5c:10:d8:d1:35:
                    24:c4:88:ce:d9:f9:1a:6d:a1:16:4c:1a:43:92:89:
                    e9:5f:20:23:62:c9:50:4d:b9:2e:d0:77:e6:7c:41:
                    08:20:cf:f4:98:02:99:19:cb:d8:e5:26:d6:38:5e:
                    80:68:99:70:69:b3:d0:97:f0:26:e2:82:41:2d:fd:
                    15:1a:b6:8a:8a:f5:40:57:6f:bb:c0:a6:39:72:f9:
                    f4:ab:8b:d2:ef:bc:96:e3:68:9c:65:0f:e1:e4:a9:
                    c4:5e:65:64:c7:83:91:37:b3:23:cf:ed:14:e8:72:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F0:2B:6F:55:AC:EB:92:E0:70:A4:B4:FC:1C:A7:C1:4B:B5:27:D7
            X509v3 Authority Key Identifier:
                keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f9:dd:10:3f:95:43:d4:f1:c8:f9:79:9b:f6:ff:1c:72:65:
         ec:3d:7a:9c:09:e8:d4:9b:ce:11:a3:b4:72:aa:31:cb:72:61:
         70:c4:9e:1b:92:be:ba:56:d0:62:27:e3:27:93:01:31:95:8d:
         db:58:e7:13:4e:0c:04:6c:78:84:6f:97:ef:5b:c4:2a:b8:5f:
         b7:8a:bd:d3:32:88:fa:14:4c:74:91:c3:12:cf:c3:d5:3a:dd:
         1a:6e:09:9b:0a:eb:18:c4:98:d1:c4:10:71:88:30:4e:ae:c1:
         95:d3:b3:3b:e0:3c:0f:8c:09:aa:3d:02:92:6b:90:8b:28:3d:
         21:17:d1:64:b3:0b:88:1b:c6:04:1d:80:35:b1:28:92:f0:2a:
         01:85:77:a8:46:76:92:bf:7c:46:9d:d7:02:68:8c:21:85:4c:
         f0:b7:df:1d:d1:d9:d2:5f:40:3a:fe:52:2a:42:4b:c8:63:b6:
         10:65:63:fb:36:6d:5a:25:8c:15:fe:14:73:ad:18:7f:b5:bb:
         25:30:62:e0:ae:d2:2b:51:29:0a:f7:b4:82:a4:2b:9a:92:5f:
         c6:55:e8:89:cb:1f:9c:6e:86:84:51:b7:f6:d6:d7:07:bd:5c:
         6b:55:6a:89:95:2a:79:7c:34:0f:14:ee:91:bb:b0:1f:d7:67:
         c1:ce:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----