Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File:                     AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier:          siH/669pGVJa1A24ENeQbELTs77g7hUSIfNOezFcs6s=
Subject key identifier:   93:37:AE:B6:97:68:5E:2E:30:67:DD:5A:71:59:E2:81:72:7F:48:01
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer:       /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial:       01962F3D7BFF9EA9CEAF070D71687035D2AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number:          0DAD
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: 8ELcCfobxwVo27GN8iUzqG9MWHFqKbakfIXxKD3eD1k=)
                          2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7b:ff:9e:a9:ce:af:07:0d:71:68:70:35:d2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=9337aeb697685e2e3067dd5a7159e281727f4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:21:1b:49:16:d1:a3:0c:53:76:76:dd:03:
                    ca:35:af:c4:f4:e1:7d:af:fd:f7:56:86:9f:d2:4a:
                    90:ef:b2:31:ff:d2:ae:b1:79:f6:1e:4a:f2:14:b6:
                    68:4f:72:b8:1c:14:5c:e4:33:8a:90:d9:7b:ca:dc:
                    77:3a:5c:3e:a8:1f:99:c9:3a:d7:64:60:16:d6:cb:
                    40:bc:59:71:d7:38:9a:0b:18:91:7a:13:be:9a:78:
                    bb:7c:04:7a:4f:d5:0e:98:de:00:8b:13:06:f1:98:
                    a2:b4:f0:b7:53:43:cc:07:7f:d4:f5:bf:0d:f8:30:
                    48:b1:79:24:fe:ea:f0:b7:23:11:20:8a:96:97:bf:
                    78:c0:d8:97:df:e4:e4:3f:5b:e9:bf:29:d8:6b:40:
                    33:a7:41:19:f3:09:27:67:81:38:1a:25:05:c2:4d:
                    53:d3:fc:df:9b:ad:0b:3d:a3:2e:cb:8c:2a:69:e8:
                    3b:a6:3e:72:23:0b:b5:e0:2e:80:86:00:24:a2:2b:
                    14:0c:bc:7f:08:cb:30:13:b7:dd:59:e1:df:91:3c:
                    1d:2b:93:80:73:77:53:d3:1d:6f:18:7e:ff:d5:24:
                    fc:ff:45:ce:a8:ab:10:5e:15:96:47:7f:2b:a6:1c:
                    c9:2a:9d:2d:5d:84:fc:59:84:2a:8f:70:d1:44:d9:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:37:AE:B6:97:68:5E:2E:30:67:DD:5A:71:59:E2:81:72:7F:48:01
            X509v3 Authority Key Identifier:
                keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:3e:6f:c8:ae:d6:12:9c:e6:74:55:fc:e2:19:40:5d:55:
         f4:cb:94:e8:b0:85:01:a8:6f:95:cd:a9:45:0d:18:fe:1e:b7:
         8e:3f:13:6b:f6:62:09:50:7c:54:41:0c:7c:c7:d6:fd:9a:57:
         c2:35:4e:91:e1:09:39:63:b4:4b:b2:ea:71:82:cc:6f:b3:7b:
         f2:f2:df:d2:a8:23:e7:8f:41:f8:c8:1c:ea:b2:a8:fd:86:0d:
         5f:1a:99:74:fc:85:f5:67:85:fb:65:6b:92:c4:14:7b:3b:8f:
         b7:83:4b:2d:d0:e3:63:b3:d0:49:15:c0:62:ce:9c:f4:43:ea:
         96:54:df:dd:5b:ae:0d:ac:db:a2:32:70:bb:a5:e0:b6:7c:95:
         e6:0f:b0:f6:b5:5b:97:e5:2c:6d:01:8d:24:fb:82:93:5b:0d:
         e5:b2:c6:57:26:29:a8:30:39:dd:05:e8:74:29:cf:ee:d7:72:
         c7:38:7a:fa:fc:50:17:a9:08:b9:42:73:c5:ed:07:72:79:62:
         4a:62:8a:be:c6:19:d8:8b:14:fa:a8:b9:55:7c:f1:4f:5d:b2:
         ab:dc:54:b7:5e:b5:6b:e0:56:97:da:09:32:b6:85:1d:41:ef:
         e0:68:15:39:a1:a0:15:e2:be:d1:1f:e3:38:63:9c:17:5d:be:
         63:35:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----