Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File:                     ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier:          n1pxSb7Rc7M14w03W2aNEre6+DTYJ641nutbAePqdEk=
Subject key identifier:   44:61:D8:8B:D1:59:51:C4:A8:53:88:53:CF:87:69:ED:C5:2A:10:4A
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       0195E0466E465B0168486778C28A6B8EEBA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number:          03FB
Signing time:             Sat 29 Mar 2025 05:01:06 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:06 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:06 +0000
Files and hashes:         1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
                          2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
                          3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
                          4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: avi9H97+txZbGxInT2/D/1kRpJH1wrk7FoEJfcTfLTE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:6e:46:5b:01:68:48:67:78:c2:8a:6b:8e:eb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Mar 29 05:01:06 2025 GMT
            Not After : Mar 30 05:01:06 2025 GMT
        Subject: CN=4461d88bd15951c4a8538853cf8769edc52a104a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:88:16:92:b2:90:96:e0:4a:e2:6b:1e:35:
                    99:8c:96:a5:7d:67:af:b0:c4:1c:c6:33:9c:ae:54:
                    c2:57:98:90:9c:2b:12:9f:28:ef:e5:ea:e0:64:21:
                    e8:c0:7d:33:cc:67:88:7c:99:0e:ce:07:34:bb:d1:
                    90:5c:4e:bb:8b:6e:ed:7d:c2:6c:fc:05:28:eb:ed:
                    58:1e:c3:2e:b7:d1:5f:81:81:86:6a:de:30:22:ad:
                    55:a7:df:4c:d1:e7:2b:24:81:41:76:20:05:48:d5:
                    65:10:d7:da:fd:73:52:a7:b6:2b:d9:ca:2b:16:61:
                    97:99:53:f3:78:21:01:94:5a:55:12:30:ce:5b:bd:
                    ee:8c:9b:fb:88:66:9f:17:bd:c0:34:c5:42:84:07:
                    6d:d4:ca:0b:a6:37:3c:ea:02:29:26:ba:10:98:23:
                    ff:22:b9:b8:ce:c9:40:8e:92:35:f4:a2:0f:df:cb:
                    70:98:1a:b3:a0:1f:46:87:cf:9a:5e:05:37:93:6b:
                    95:78:2f:87:43:7b:d3:14:ab:76:04:a3:67:91:89:
                    ce:b4:1c:ba:9c:f8:46:82:1a:ef:75:b2:0c:96:fa:
                    b4:f2:08:63:4e:d9:a8:c1:5c:ae:c5:df:77:9a:e0:
                    35:99:d8:79:8f:e1:fd:08:13:20:8d:39:0d:68:4f:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:61:D8:8B:D1:59:51:C4:A8:53:88:53:CF:87:69:ED:C5:2A:10:4A
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:cf:a9:38:69:20:42:ae:b2:ed:94:88:90:de:18:ee:ee:
         ef:bd:e2:11:64:d5:5b:be:c1:a5:8f:3b:18:8a:8b:72:8e:e9:
         22:0e:6d:d9:88:76:0b:45:9e:eb:1a:ae:4e:a8:74:24:a2:29:
         7d:99:6b:05:3d:0c:90:9a:10:4d:e2:02:bd:40:1a:38:e2:44:
         32:62:51:41:1f:7a:7b:66:7c:d0:a3:13:04:c4:73:1e:4c:e7:
         0d:75:49:f4:e0:75:00:7c:4e:ea:ce:f5:b4:b9:87:92:a2:1a:
         f8:7f:e4:f3:96:b8:1b:8d:e9:8d:50:1f:d6:d3:52:c2:43:e4:
         89:e7:b4:76:20:4e:be:da:7b:a3:4f:f3:6e:5e:26:41:da:68:
         03:d0:b8:23:71:f0:1e:0c:df:ef:0f:d2:63:52:9b:46:9d:03:
         08:12:f3:92:f6:89:ac:80:92:e3:ce:ef:26:cf:12:71:30:f1:
         85:b3:a9:1d:2b:64:e4:3c:58:ca:62:e9:f4:b8:81:89:f2:12:
         d8:e7:f3:a4:3c:fa:b7:c6:9c:18:9b:d8:fe:62:d1:ca:17:ea:
         a5:c2:fc:c4:3c:0b:29:24:36:09:d6:51:3b:99:3b:c4:5b:91:
         d7:5a:26:a8:c0:8f:cf:37:aa:f0:5d:a7:03:07:33:52:74:e7:
         d1:e7:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----