Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File:                     aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier:          35YY3ThQm0elVjW/Y7BOaBKMIzs8gl3sgR0SDIxztBg=
Subject key identifier:   A4:C1:B7:8E:AC:A9:55:97:6C:14:22:E3:5C:FB:22:A9:C1:48:A7:48
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer:       /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial:       01962E61DC627D8E27C52C5D61F6F5D66E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number:          142F
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: 3XK3e5mMu+XQXK7IwGubyV+GnLUbtoLn/WPc3qfvIiI=)
                          2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
                          3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:62:7d:8e:27:c5:2c:5d:61:f6:f5:d6:6e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=a4c1b78eaca955976c1422e35cfb22a9c148a748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:4a:d6:76:75:0e:c6:90:d9:78:6e:66:19:
                    28:49:36:fa:7a:a0:bd:05:e9:af:a3:5c:19:73:0c:
                    0b:4f:07:53:df:82:1d:b6:5a:6f:02:e7:9e:0f:f9:
                    6b:8c:f3:74:81:e4:f7:ec:4d:aa:74:59:c2:f2:94:
                    31:99:09:8b:5a:a6:eb:73:eb:69:10:bf:c6:e5:b0:
                    fc:76:5e:60:80:c7:53:4d:c3:44:64:a0:90:2d:22:
                    c4:a0:94:87:a8:78:78:aa:d4:a8:3e:66:fb:02:e7:
                    78:c0:28:a6:03:a6:9e:29:cc:36:01:f0:1e:13:c1:
                    aa:b1:3b:90:ac:75:64:b0:17:53:99:a8:1e:9d:e2:
                    20:78:b8:80:f3:45:73:2a:aa:83:1c:99:9d:c4:22:
                    16:5e:fe:37:94:ca:5b:ca:ec:92:ee:bd:6b:d0:00:
                    bc:de:ce:1b:9a:58:21:d0:7c:08:c1:df:63:76:b8:
                    d3:e6:8c:7a:b7:82:62:51:83:bd:99:f3:a5:c7:59:
                    2d:18:94:16:e6:0d:f4:2f:43:19:64:60:04:83:8b:
                    e0:7a:f4:b8:e8:dc:b3:8b:42:a6:21:59:5a:3e:ae:
                    f1:84:78:1e:41:1e:ee:00:61:43:6e:a1:21:e2:5c:
                    a4:53:c3:1c:c9:0a:09:49:b6:c5:f4:71:2a:7c:38:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C1:B7:8E:AC:A9:55:97:6C:14:22:E3:5C:FB:22:A9:C1:48:A7:48
            X509v3 Authority Key Identifier:
                keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d8:26:9a:1d:a1:f3:b5:1e:73:7c:c1:9c:5b:88:22:3e:af:
         dc:d1:a9:1e:e3:70:3c:c7:b3:23:aa:c7:46:b6:35:2b:f0:49:
         37:36:ad:25:b6:12:6b:9c:2a:20:44:da:4d:c2:78:f1:42:76:
         57:fe:33:47:6a:45:86:26:71:a4:ee:25:10:78:cf:13:59:23:
         e0:de:51:01:12:03:fc:46:1b:ca:4a:6d:59:15:75:d2:98:10:
         60:f8:60:f6:aa:c8:e2:dc:22:74:52:be:2f:20:22:b6:a4:01:
         de:84:a1:36:38:a0:04:b5:ac:28:0e:bc:53:d2:c4:fc:0b:70:
         9e:c9:b3:de:f7:a1:f4:01:ed:75:19:91:aa:a4:45:e5:ff:95:
         64:dc:53:9b:56:05:d9:ae:4b:18:0c:68:f1:9d:1d:82:b9:85:
         d6:57:de:3e:56:8d:f3:d9:d2:3c:4a:fc:24:6b:72:f7:08:1d:
         dc:a6:31:fa:74:07:fb:df:d0:5a:6b:0d:02:4b:3a:62:52:98:
         7a:38:4b:b4:44:43:5e:5e:b9:81:e5:87:54:41:4b:68:23:6b:
         85:26:19:73:99:f7:ac:b3:ba:8b:d9:99:1c:fa:fa:00:25:88:
         8c:e1:02:a8:83:c7:4c:33:73:53:d8:f7:ec:a7:c4:32:1c:bc:
         ee:45:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----