Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          3ZmG+cDQgXYTYsf64P06UckkBGTOZqgQ2+RfCWWSHkQ=
Subject key identifier:   50:A5:DE:E3:AC:98:44:94:E8:C5:71:80:7B:99:37:ED:5A:E2:B0:4A
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       01962E61B72DAC2E470C25990073EE48C434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          0625
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 8IS2SGLZvuejfiILX_HZy4EbxZ8.roa (hash: rsd4qoWJU7YOxhWnkiEgm/sIgrMf/LleiBk2mG4ubQg=)
                          2: MUEabXTH7J0BwsIog7I6OfzuzkI.roa (hash: 9N5LvBOATRgD8zsq92oJDhXIXtyB1ta37GI9iUSZndY=)
                          3: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: 53vXPXnGch/Lq3zR6RwzXwgWfKs6f8xpwLG9i9D5CHk=)
                          4: bG3vNkLD1dncPLRJXBDHmzwN_FU.roa (hash: VPIXy61pzu1bOvlxodUgzAm3JOVOrTVgSVJvZhBRPLs=)
                          5: hGNfz54gyRLnZ2HB0VrO-_rGRRI.roa (hash: 2wA4t/VhJsViZsRF1HYTf4ibOtlo6K3RuVWnrObKB0Q=)
                          6: pTfgjw72gQb1KU5LFVg2dslTLZE.roa (hash: MUEYHe0OUZ4/qxz+h+PGHmIUdQjzg2Ugg7s8SLtROzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b7:2d:ac:2e:47:0c:25:99:00:73:ee:48:c4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=50a5dee3ac984494e8c571807b9937ed5ae2b04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:8f:8e:19:42:ce:bd:7f:9f:16:d4:89:0d:
                    a6:9f:cf:97:d4:ca:9b:3e:4d:59:bd:f0:b2:6d:90:
                    41:42:8e:7e:06:3a:1d:76:a4:2e:b6:8f:e3:17:1e:
                    6d:bb:96:80:04:ea:2c:77:b7:a2:ef:76:62:8d:21:
                    5a:88:97:41:ed:80:14:75:3b:07:0d:f3:f4:ac:f4:
                    1a:01:bf:5f:9b:b2:0d:cd:4b:ae:2e:87:c7:1b:4a:
                    4b:30:36:3e:e2:40:7a:13:c1:18:1f:af:b0:c1:8a:
                    1e:3b:5b:d0:ac:a1:17:50:74:34:52:93:d5:fc:8a:
                    26:2e:8b:94:41:2f:22:23:18:e2:c1:0c:df:c2:34:
                    a6:03:bc:2f:30:8a:6f:04:9f:30:c5:fa:50:51:8d:
                    ab:bd:5b:6e:fa:75:ab:24:93:b8:ed:32:f6:a9:b4:
                    1a:11:79:68:8a:b8:33:a5:e6:29:42:25:4d:07:41:
                    00:f5:30:4f:91:89:7c:e3:3c:eb:e3:c2:f3:6f:28:
                    2d:3a:ec:ae:81:f0:23:42:9b:a6:45:d5:ca:b9:44:
                    92:d8:1f:06:af:bc:e3:46:2c:fc:af:07:a7:17:59:
                    36:03:24:c3:14:6e:f5:ef:61:85:b9:cc:61:53:a8:
                    11:af:a3:45:7c:37:72:22:73:c9:d8:65:b4:2d:07:
                    15:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A5:DE:E3:AC:98:44:94:E8:C5:71:80:7B:99:37:ED:5A:E2:B0:4A
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:32:ad:6c:41:e9:a7:18:ed:71:6f:57:f7:2e:30:69:80:0f:
         6f:2f:b6:2f:be:89:07:02:f1:ae:c6:7e:0a:fa:3a:f7:4f:ed:
         4a:bf:db:56:b6:17:fe:4b:bb:7d:95:41:91:08:ac:02:71:c2:
         ba:07:4b:88:3e:f9:57:cc:ec:5a:34:ea:44:2b:31:d4:93:d3:
         5a:7e:24:56:fe:99:1d:99:57:e9:7c:b7:cc:33:e9:33:92:c2:
         38:56:a8:6f:a4:ab:2c:08:0f:66:f2:6b:0d:04:86:7a:af:98:
         b0:ce:31:08:2b:81:06:6a:4a:33:0a:8d:bc:bd:64:f3:3a:2e:
         b4:a3:24:39:a5:57:d2:a3:b4:65:e6:a9:28:c5:30:68:cd:5a:
         d0:98:77:cd:a3:87:af:a2:88:9a:b0:a4:cc:e2:98:fe:3e:af:
         cd:64:0a:bd:47:d0:86:db:ab:b9:de:75:e7:c1:93:96:1e:23:
         51:3d:f0:52:93:04:2a:9a:4c:78:76:eb:2c:58:5e:71:e6:13:
         92:bc:54:48:c3:a3:c8:91:c5:86:d3:d7:c6:57:72:34:36:1b:
         ee:cb:e8:e6:c4:cd:75:d4:74:78:c8:7d:1e:47:c6:4e:33:9e:
         6a:87:97:05:a7:e6:5e:e4:d0:5e:d5:66:73:5b:7c:65:5b:a1:
         7f:7b:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----