Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File:                     aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier:          GCT3+LNp2AE2AJ6fOPTUOECfZEsz0ZXT00Ujl8zlPjs=
Subject key identifier:   F8:B0:C3:D1:29:C3:05:93:4D:FE:4A:B7:9C:92:BE:34:83:89:30:59
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer:       /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial:       01962E61A30D36099C9D4050F79C4DFEF94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number:          0A15
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
                          2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: M6lTMlWyLaJHy1Zhg/f2UfTICkp8eNT7MSoohbop16U=)
                          3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a3:0d:36:09:9c:9d:40:50:f7:9c:4d:fe:f9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=f8b0c3d129c305934dfe4ab79c92be3483893059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:85:07:2e:86:7b:f1:94:d9:c7:db:73:07:
                    e5:13:67:c2:83:a5:d6:a7:00:27:96:02:d8:ec:b2:
                    7b:d3:5a:ec:30:78:cb:db:9f:1f:e2:62:37:5f:9a:
                    af:a4:f7:ee:b6:8f:6c:82:d1:bc:64:1a:c5:7b:ca:
                    e0:a6:d6:f7:c9:8e:9a:f8:ea:ab:d8:60:d7:10:7f:
                    0c:3c:a6:1f:07:aa:80:46:ad:12:d5:16:36:30:8d:
                    b8:c9:40:fd:7c:26:9d:2a:17:59:29:2c:81:9a:44:
                    7d:8f:bd:ed:16:c3:b7:49:f9:7a:44:1b:aa:f4:1f:
                    24:14:1a:b5:2b:56:d6:c8:f7:fd:3e:2f:1f:18:b5:
                    9e:a0:99:d5:fd:6c:33:96:e1:22:13:8c:db:68:47:
                    b3:51:05:2f:1e:54:6b:6e:62:f6:a1:43:5c:88:e7:
                    94:c0:45:91:e7:27:e9:c7:8d:45:42:af:5b:68:5a:
                    36:b0:79:90:97:8e:32:f9:92:07:ba:76:0d:5b:34:
                    4c:28:b1:7a:36:f1:3a:98:b2:8d:cd:ce:56:0a:d7:
                    1b:91:8a:f8:fd:7c:c1:bc:83:19:c0:2a:98:4c:ca:
                    c7:ba:c7:dd:52:8a:7d:5c:f9:5d:17:f4:73:83:e2:
                    50:3c:07:f9:6c:05:11:fc:d0:e3:a6:27:c2:fc:07:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B0:C3:D1:29:C3:05:93:4D:FE:4A:B7:9C:92:BE:34:83:89:30:59
            X509v3 Authority Key Identifier:
                keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:16:03:2b:b4:96:bb:f5:1c:b4:f1:18:31:06:05:44:da:
         d3:53:7a:4d:89:6d:06:ef:16:50:ee:6d:3c:4b:09:d9:54:66:
         cf:ac:f1:06:75:a4:44:88:d5:c8:bb:af:31:22:88:99:29:51:
         d0:2a:90:de:8d:6e:39:c6:02:da:8b:cb:54:93:39:66:27:e7:
         54:e1:ed:bf:c7:05:fc:3e:c2:9a:03:2f:a2:e5:57:bc:1a:8f:
         d6:ea:65:f7:50:f3:d9:b9:0b:c4:ef:c2:20:f7:29:01:8c:b1:
         eb:ce:01:3d:09:bc:f0:81:fe:b9:e4:61:1d:73:ed:38:4a:3b:
         65:9d:2a:cd:38:f5:75:27:62:bc:e5:00:5e:83:fb:99:7e:a6:
         21:d3:f1:e7:10:a1:ca:44:ef:40:85:af:5b:6d:2b:21:ef:d7:
         2a:a5:7d:2c:69:c1:ba:56:62:9c:d1:03:17:e8:f3:07:14:b3:
         25:d1:6c:9f:85:53:ba:86:95:37:88:89:06:db:5a:d4:dd:53:
         9c:7c:25:57:31:45:56:8d:8b:05:ca:05:ba:18:a8:49:05:60:
         90:5f:ab:bd:77:7e:82:71:5d:fc:96:63:50:26:17:ff:d0:d9:
         da:b0:98:6e:71:22:9c:f9:16:03:bb:20:47:02:0a:53:ff:01:
         1b:a3:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----