Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File:                     Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier:          97rCwlH8zR7Mjth3I+BtHJzfmUzkhXYiOQkQ6ikzrDA=
Subject key identifier:   79:3B:13:96:AD:DA:CB:48:72:2A:6E:63:09:95:8C:45:54:3D:05:51
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer:       /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial:       01962E98EB038E131D74FF43C6D33F919DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number:          0162
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: yPhm0/xANrjfG40C34dkLGtmeUTzug2QmfF1yXP5Zi8=)
                          2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=)
                          3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:03:8e:13:1d:74:ff:43:c6:d3:3f:91:9d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=793b1396addacb48722a6e6309958c45543d0551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:d9:37:0a:7e:02:29:f7:2d:dd:e8:2c:a0:
                    a4:c4:ff:c1:40:60:25:f8:ae:57:de:b2:cb:a3:05:
                    41:fd:91:4f:1d:c9:ae:c4:af:93:4b:e1:0b:eb:1f:
                    8f:e6:bb:54:12:23:ec:df:45:06:8a:d7:c7:e3:59:
                    8a:33:27:5e:92:43:5d:82:35:17:ac:e0:e5:d1:71:
                    ff:ea:45:55:22:53:62:65:f4:f4:dd:82:a6:80:a5:
                    34:84:3e:ae:9c:d3:6f:67:72:4e:9f:50:93:e1:7b:
                    11:0c:c0:55:b0:37:b9:f8:a2:16:86:74:33:4f:96:
                    eb:61:b3:4e:f9:16:14:d8:84:4f:64:f4:00:c1:c0:
                    af:c0:d5:c2:7e:c0:63:c6:6a:39:f5:a0:ba:09:47:
                    91:2a:3e:e7:1b:bc:ee:b9:46:a2:c5:5c:d5:79:b7:
                    ff:d0:d8:17:6a:3c:23:75:92:b7:1f:8b:b3:64:e4:
                    b7:7f:e5:09:fd:b5:20:13:51:d2:7c:7a:06:bb:c2:
                    4e:eb:5d:84:dd:7e:35:72:0f:0d:a0:ea:e9:b7:a7:
                    ff:66:04:0e:e6:d7:86:a6:31:c8:99:7d:0a:57:9e:
                    78:aa:da:ec:91:44:d2:47:f3:56:e0:6e:eb:69:da:
                    fd:7c:e5:36:fa:0b:ba:2b:0f:9b:f9:df:c1:df:f7:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3B:13:96:AD:DA:CB:48:72:2A:6E:63:09:95:8C:45:54:3D:05:51
            X509v3 Authority Key Identifier:
                keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:3c:e4:38:cc:aa:10:37:b3:63:8b:f4:ce:0b:6f:a8:6c:
         c2:a1:9a:e2:24:30:4c:92:45:94:65:b9:40:76:4a:98:21:af:
         de:b9:38:68:a6:20:c5:8a:0b:dc:88:d4:b6:aa:1d:7f:be:df:
         50:09:e0:54:bb:6b:45:d1:9c:2c:59:00:b2:aa:c8:8a:e5:17:
         78:64:17:22:8d:7a:36:90:51:ab:06:5c:95:38:9a:cf:72:3f:
         ab:11:3a:25:84:2f:10:4c:c6:aa:02:01:33:25:70:0e:aa:d2:
         5d:9b:f8:43:01:78:90:49:86:40:13:58:e9:03:8e:d3:60:a7:
         57:57:1c:e5:20:96:95:46:6e:3e:dd:23:68:6a:39:74:2b:37:
         99:f2:61:42:97:f6:2d:8d:ad:f6:24:f0:c3:6c:20:b9:5c:85:
         0b:27:f8:2d:c6:a7:4c:bd:36:54:9b:09:7b:70:6c:65:81:42:
         2f:31:d7:f1:70:fa:b8:9f:1f:3c:07:4d:6e:26:d2:6b:aa:96:
         c6:d0:a3:6c:f5:03:8d:56:92:61:e1:6a:58:1c:e0:b2:79:93:
         eb:b9:99:32:09:22:9a:83:af:c6:8a:22:34:3b:2b:92:4f:eb:
         ef:5a:48:f5:62:13:7b:27:1c:e8:1f:45:0c:41:3d:6c:b2:18:
         c8:a6:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----