Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          9hRc0NQpw6d4pp0h0y4V4S4J7gS5VPd9Wyd5L+6qQRg=
Subject key identifier:   E7:15:7A:CF:98:76:C0:80:63:EB:17:87:B4:16:23:08:80:DE:76:A1
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       0194BD17F3DD0FD7218AEEAD47A00B54CBD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          1451
Signing time:             Fri 31 Jan 2025 16:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:51 +0000
Files and hashes:         1: N1MG3ptUi6lRkgCQgC4sjQwbS5E.roa (hash: JXk8TsLqv4eNpEsTxzdAoUG6ec7BUvgM4Lyhjc+WI9U=)
                          2: pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa (hash: KI7tUZnJYI1JaBjFs0d5L727l5SVVoE+xByQFUZQZZI=)
                          3: uiLIHzK4-mf16_OjnZc2yUpW0us.roa (hash: RlQY7OlYxlif+RwnDDphDKPVhonzC8U4YVG2wYszXJM=)
                          4: wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa (hash: /EPsVJFiMZ3O3IoH+IOAZdQSfyIhjr2V/FlxWvt6e5c=)
                          5: xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa (hash: rdwu1BaRed5RxmIo/GH4jXiyNp3cFaIjeNX4kVrFm70=)
                          6: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: Hg1nuYStogJduEGLmI1uHKpYaoohWP4DL11JO7VddXg=)
                          7: zPFc5xzrxxMWf2K11uBlgIiWqTo.roa (hash: 3x/T35aDdfP5Wrtlu3UJYc2NEgecLDM5KH+dyoNyYx0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f3:dd:0f:d7:21:8a:ee:ad:47:a0:0b:54:cb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jan 31 16:00:51 2025 GMT
            Not After : Feb  1 16:00:51 2025 GMT
        Subject: CN=e7157acf9876c08063eb1787b416230880de76a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:26:f6:47:a7:ba:93:5b:51:87:e5:be:bd:
                    91:b3:88:69:7b:ca:10:9a:5a:e3:38:aa:12:21:dc:
                    66:36:3e:9f:66:dd:b2:25:cd:75:1b:c8:7c:68:9c:
                    15:13:df:52:06:36:49:20:a9:a0:53:15:5b:fc:83:
                    62:37:16:cb:5a:cf:1f:6b:d5:e8:0e:b8:84:c8:94:
                    7d:4f:e6:bf:08:26:a2:48:73:44:2a:2a:6a:96:fa:
                    99:86:e6:43:1f:e9:bb:d5:fa:a6:24:b2:ab:74:50:
                    d1:b9:b5:ca:0f:cf:89:42:9c:6f:18:f0:2a:2b:ce:
                    ff:ae:42:e9:3f:eb:ee:39:d7:e9:0f:c7:86:db:81:
                    d6:9a:f9:82:cc:19:28:41:4e:f6:cb:e5:e0:42:37:
                    db:cd:a6:23:35:6f:29:e9:86:87:61:9d:0d:3e:e9:
                    5a:51:56:ce:35:33:30:2b:a1:7c:7a:ff:78:9e:83:
                    aa:91:66:e1:57:52:b6:1f:8d:ec:de:36:c3:4d:a8:
                    41:1d:7d:f4:d7:7f:07:74:18:7c:0c:9b:9c:fe:7c:
                    47:73:73:0b:3a:b2:e8:48:0b:4b:54:a8:f5:0b:91:
                    7d:32:15:91:b3:ca:51:cf:3b:05:bd:60:04:fc:67:
                    a3:1d:d7:fd:63:62:d2:c8:ef:d1:1a:37:da:e1:1f:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:7A:CF:98:76:C0:80:63:EB:17:87:B4:16:23:08:80:DE:76:A1
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:e9:11:b6:d0:aa:db:14:81:80:a8:24:c1:24:fb:a7:4b:
         29:34:b0:5d:6c:f9:95:1c:45:fe:7c:bd:e9:37:27:0b:04:a6:
         ff:96:ab:84:b4:21:06:9a:35:e4:c8:26:42:fa:7c:22:ae:26:
         9b:42:56:a0:f0:78:38:07:0a:e3:35:59:cf:be:c0:04:5a:be:
         d5:1a:f5:b8:f1:41:96:e5:a2:8c:3d:c9:8a:83:61:35:ba:2a:
         ef:fc:c7:5c:b7:a9:e9:a9:7b:31:d6:c7:f0:c4:ad:b9:85:e9:
         44:71:59:17:0f:c8:43:fe:96:dc:ca:1a:e3:e8:8b:42:49:35:
         f3:2c:a1:bb:08:68:d4:b6:f5:76:25:cb:72:5f:dd:f8:d5:36:
         70:9f:87:91:88:78:96:a9:09:b7:18:56:ff:bc:7b:e0:fe:83:
         fd:0c:d3:d6:b2:77:89:ea:30:00:24:5c:ff:20:81:87:ea:76:
         2c:e4:49:31:fa:46:da:c0:f1:d4:d1:c4:45:aa:10:ec:9d:d0:
         ad:1e:8f:8f:f1:15:67:6f:20:f5:e1:5e:b4:b3:5d:62:76:9f:
         dd:bf:48:66:bd:e8:76:90:a0:91:38:93:c3:b3:f1:c4:67:09:
         5d:20:3f:7a:dd:48:9e:1c:5b:13:b0:e6:de:44:51:8b:0f:f4:
         7a:4e:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----