Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File:                     AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier:          1oyhGwtJO1j3WzhRIFwxpEQ4e2R8WqiYc0NOCRdsFXU=
Subject key identifier:   00:12:93:05:F2:70:AB:86:6F:D7:13:C8:83:39:2E:EC:BA:18:50:E4
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer:       /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial:       01962E61D69FCCEF41A5214A521E49F26370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number:          0E9D
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: KXX+xeyXyPYRJrfvN0whqHaFv2wRJLgos3GNvS/FnJA=)
                          2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:9f:cc:ef:41:a5:21:4a:52:1e:49:f2:63:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=00129305f270ab866fd713c883392eecba1850e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:e2:85:16:df:b4:2b:c9:33:c9:04:c0:11:
                    e0:7a:aa:ef:90:f4:97:8e:88:78:55:e5:15:e9:ca:
                    58:18:88:42:03:c0:07:c4:34:63:19:a2:4d:26:af:
                    04:65:e8:b1:0c:29:19:2f:d5:91:4e:19:2f:f0:4e:
                    7c:2f:62:6c:f1:77:8e:21:96:90:42:65:b1:6e:46:
                    be:fd:31:e6:dc:4e:66:4f:51:69:56:75:88:d9:eb:
                    97:aa:cc:1b:7b:c7:2d:5d:25:79:ad:c9:58:b0:57:
                    6c:16:78:57:b1:1d:67:3a:62:b8:f9:2c:a0:81:ad:
                    c0:d9:ef:e6:da:0e:ba:8d:ef:02:00:35:95:d0:dd:
                    6f:a4:f9:78:54:f2:d1:f8:c9:e9:f9:a0:70:7f:c9:
                    9d:f3:a0:b5:58:8e:8c:b8:eb:9e:30:64:eb:3f:c1:
                    0c:3b:bb:50:4b:77:b1:88:e7:66:49:8d:b2:d6:c8:
                    8a:69:39:94:b6:a7:b8:e4:14:44:48:70:24:8f:37:
                    b1:74:b2:4c:f2:db:3b:04:d6:da:ba:da:cc:55:86:
                    3b:60:d9:6f:a0:bb:a9:de:a0:dc:64:cf:97:e2:d4:
                    49:a9:28:8b:a3:51:2a:20:0c:2d:fe:dc:42:36:9f:
                    b5:4a:ef:cb:68:da:3d:99:9d:3a:46:37:96:fe:98:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:12:93:05:F2:70:AB:86:6F:D7:13:C8:83:39:2E:EC:BA:18:50:E4
            X509v3 Authority Key Identifier:
                keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:be:3f:c6:1a:0f:59:9f:44:8b:a3:bc:b4:e9:b7:5a:39:5a:
         fb:2c:b4:67:0c:72:10:e5:4f:55:08:53:7c:3e:46:c9:ec:d8:
         a9:a4:7a:66:71:27:2d:a2:04:8f:41:7b:8f:5a:d8:60:1c:7a:
         15:a7:8e:33:b7:44:9c:5f:04:0e:a9:c3:2e:1b:aa:6b:aa:9e:
         f2:24:94:b2:e3:6e:75:8b:a8:0e:09:78:3f:f6:5d:b9:32:d2:
         d7:79:7d:f5:cc:0d:8b:41:1b:87:6f:72:56:60:16:7f:03:c7:
         c9:aa:f4:ce:19:38:47:68:79:bd:c3:01:75:90:2e:a0:77:94:
         67:5a:90:66:f1:a8:a4:9b:a9:d6:25:c1:48:2a:e5:ab:10:36:
         55:58:0e:ef:07:1a:eb:9a:7f:ed:8f:0c:01:b1:f7:1a:b3:c6:
         2e:79:2c:62:37:e5:94:84:b9:b0:97:f4:1f:1d:92:ef:11:b3:
         bd:8f:42:db:c3:83:4e:28:2d:34:24:df:7e:5a:ff:b5:5a:17:
         b4:6a:a2:68:8d:b7:70:ef:6f:52:8b:d7:3d:a6:c2:fc:be:f8:
         3f:a1:5e:c8:f5:12:af:d4:20:90:14:46:28:05:4f:40:fc:ae:
         f3:7c:23:15:e0:9c:f3:27:cc:27:22:5c:8d:90:47:89:bb:46:
         6e:66:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----