Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File:                     ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier:          6JznTxHIw9NDLr+q+qvYiFue+JDnss348bvzXPTJu9o=
Subject key identifier:   53:A5:BD:B5:79:C6:A1:C1:86:98:29:D9:95:A5:39:A0:E0:21:75:59
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer:       /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial:       01962E61B8C695F50F68A939CED215664E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number:          06FB
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
                          2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
                          3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: s4kM0nR/0i19Gzl4lgG88w7V2X0W6AWsR3WTo1KyNu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:c6:95:f5:0f:68:a9:39:ce:d2:15:66:4e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=53a5bdb579c6a1c1869829d995a539a0e0217559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:68:0c:21:03:2e:9f:ab:fe:f7:58:47:99:
                    45:34:7d:96:c1:20:42:b2:7f:96:a6:c6:57:42:7d:
                    33:db:dd:04:ae:9f:ee:14:2d:6a:0c:2b:8e:31:76:
                    a3:c1:5f:ef:33:af:4f:9e:e8:3c:7f:81:38:e1:22:
                    29:b3:fb:60:4d:4a:70:d5:06:8b:af:1f:71:1e:62:
                    50:33:b6:66:a7:f7:e5:03:01:56:84:5f:f6:f5:12:
                    69:87:32:09:5b:af:19:c7:88:8b:95:1b:f8:4b:64:
                    f4:29:74:18:ae:72:a0:fc:22:ce:25:c9:06:85:62:
                    b7:05:36:d7:a2:4e:78:8d:1e:5f:00:b3:5b:66:e8:
                    32:ff:0e:aa:f2:f7:24:f2:47:a4:ff:4a:cc:ac:8d:
                    a9:a8:d4:20:c8:64:21:be:f7:ee:1f:8b:b8:bb:2e:
                    a7:40:bb:cc:48:4f:eb:79:91:df:f9:df:a8:c7:33:
                    ff:64:ac:b4:e1:00:2a:95:a4:59:cb:b7:ad:7c:3f:
                    cc:44:ef:61:6e:84:51:82:6a:3d:8c:6c:67:8b:4f:
                    78:db:d0:ad:b1:3b:58:59:20:e1:74:0c:62:fe:eb:
                    7a:c8:ba:9e:60:0f:84:5a:c7:38:69:13:51:ea:fc:
                    8c:c0:5c:d0:96:4a:67:2e:7e:ba:4a:26:4a:f5:1a:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A5:BD:B5:79:C6:A1:C1:86:98:29:D9:95:A5:39:A0:E0:21:75:59
            X509v3 Authority Key Identifier:
                keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:fa:e2:52:9c:0a:8a:ba:8f:4b:dd:65:3c:b9:5a:dc:81:
         8d:33:74:85:b5:6c:98:44:9c:77:da:16:93:0a:c8:21:07:0e:
         82:f2:4b:cb:e6:13:cb:51:1c:e2:46:19:8a:8b:d8:58:ca:7d:
         cb:07:2a:5a:4c:35:51:72:50:6a:25:ad:7c:f0:c9:49:17:ab:
         fb:5d:4a:a8:b0:3b:c1:f2:ab:a5:3d:68:ab:4b:a2:02:2b:3a:
         80:63:5a:79:6f:54:26:a9:21:21:70:cf:45:47:0c:19:71:48:
         92:78:a6:f0:6f:d3:9e:9f:d9:e6:76:a1:da:a5:03:b8:f0:6d:
         9c:72:f2:c9:5a:e5:ff:a1:52:af:da:2f:25:ad:82:1d:2d:ad:
         d5:6a:18:fa:4d:6d:ad:76:cf:b9:19:05:f6:37:93:10:db:34:
         ff:3c:ed:66:5d:a9:cb:56:21:ac:74:81:48:e2:1e:6a:73:7b:
         a0:78:0f:12:e8:bd:19:01:be:de:0e:78:d5:b8:df:89:b3:bc:
         7a:5f:d7:94:98:8a:bd:a5:c0:5a:55:f6:79:f5:32:c8:03:86:
         f1:92:12:6e:83:2f:79:d4:ca:29:28:55:d8:31:68:20:a2:a8:
         8d:f7:89:2e:09:6b:36:99:78:dc:cc:b1:45:d8:7d:39:e0:1a:
         16:d5:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----