Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File:                     YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier:          6AsPBYxG3nhIYVfYpy3Ro8Rnn979jCGMkJs/W1XkYS4=
Subject key identifier:   6D:04:8A:D1:45:09:2E:7B:1E:33:F8:18:92:B6:B7:D5:91:B3:E2:8E
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       0195E07D62439AFF09A141CD15B5C1D755C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number:          0525
Signing time:             Sat 29 Mar 2025 06:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:08 +0000
Files and hashes:         1: 1DSZn5ns00u_zh3eaHcMM8S9LJ8.roa (hash: f2k2Rp4Tvmjd6WBxwwnYblRCaq4QO4K1UztQrgvzq4k=)
                          2: MNaMRPeSME_XYwjj2iW6Vinmifg.roa (hash: /1QrovjxUCyErSvoCQnPnqMxU5YJcSU6R6BPRoCuQcg=)
                          3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: ss19+CsqcT4VbBfExYSb21XsHUzWyptmGzwDCUqYVVE=)
                          4: yIFDC3DQyKnYJrOVoxpI_9NxtQ4.roa (hash: cgrK+K+/SobWe5sM1Xw8KgFBTC6aou6l85u0UGfO0is=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:62:43:9a:ff:09:a1:41:cd:15:b5:c1:d7:55:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: Mar 29 06:01:08 2025 GMT
            Not After : Mar 30 06:01:08 2025 GMT
        Subject: CN=6d048ad145092e7b1e33f81892b6b7d591b3e28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:9a:30:60:24:52:fb:ea:2f:2e:32:8e:fe:
                    f8:a3:49:c0:c6:aa:15:52:c1:5c:db:7d:71:4a:60:
                    2d:10:73:a7:38:8e:81:df:4e:51:6c:15:35:b2:c4:
                    f2:99:f4:cd:84:d5:68:a5:84:5e:f3:9d:ab:7e:7b:
                    de:c0:39:79:9f:94:fe:a1:db:9b:21:70:7c:69:2b:
                    a1:5f:62:c0:ee:a8:30:93:18:09:3c:0a:f1:e9:16:
                    ac:7b:ba:4a:64:d0:0f:ab:71:77:ef:e9:01:2e:ee:
                    8d:1b:aa:1d:c3:af:23:e1:2d:69:3c:04:5d:48:4e:
                    fe:d7:58:39:41:45:31:97:a3:3e:00:33:36:ca:27:
                    77:86:95:e7:55:33:2c:0c:b8:c5:db:2a:11:52:ed:
                    8c:cb:19:63:0c:36:cf:28:7f:b0:71:18:a0:d8:79:
                    9d:57:a4:ba:98:94:ed:3c:57:fd:0c:cc:7f:f8:ad:
                    ae:df:d9:14:ee:3f:9a:a9:3d:9f:dd:32:94:2e:6d:
                    27:ab:65:86:ce:74:4f:a0:ad:1b:87:97:fe:c8:b9:
                    9f:b3:62:2a:b5:cc:8d:f8:d5:42:7c:6e:1b:49:cf:
                    fa:3e:65:fb:65:b5:9c:0f:34:3f:cd:d5:6c:df:f9:
                    ac:35:e3:92:5d:a2:0d:67:70:a7:d6:bc:c3:b0:78:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:04:8A:D1:45:09:2E:7B:1E:33:F8:18:92:B6:B7:D5:91:B3:E2:8E
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:7f:a4:09:0d:d0:54:8c:40:9d:60:d0:7e:b8:60:05:92:
         dd:49:df:93:a0:21:9d:c8:73:ad:15:e0:e6:51:4c:61:39:a5:
         08:29:67:81:17:6a:06:e1:75:de:dd:f7:d2:4b:7c:e4:ed:4b:
         bf:f8:bf:a7:63:ca:73:a7:9d:24:cd:46:73:25:c3:ed:1f:28:
         38:bd:57:59:6c:6b:72:8c:3f:f2:5e:ca:04:d0:11:a3:2e:a7:
         10:ef:60:35:b5:8e:cc:f8:c2:dd:22:ed:c6:a5:c9:bb:04:b7:
         12:c1:7a:ba:25:c6:3c:da:8a:d8:86:f2:21:08:91:68:7d:5c:
         7a:8e:c8:ad:3d:34:6f:22:1f:43:22:ca:08:52:e5:cb:99:16:
         77:d6:b7:0e:b3:00:58:fc:9c:d0:be:c0:c5:34:ac:79:ad:dc:
         42:2c:1b:f0:b7:44:cb:19:47:60:75:4b:98:a5:0e:4c:be:36:
         5b:d5:0d:c3:04:c2:9d:cf:4e:13:b9:52:12:f8:07:ae:26:eb:
         ce:5e:ce:a5:59:6d:fb:cd:8f:5d:ae:88:e5:8f:1d:64:76:e7:
         e8:0c:72:8f:20:9b:31:a8:d0:1a:8b:32:cb:54:43:28:b2:3a:
         1a:06:a4:5c:51:50:28:84:05:34:ab:b7:69:74:53:9c:79:23:
         5c:24:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----