Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File:                     aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier:          oqZbL1FEcHTofwvmscXJioMkXo2IVOTI7Cc7mnwDIGo=
Subject key identifier:   C8:46:D2:EA:D7:F7:C4:55:24:B6:EB:30:E4:AD:04:D1:E6:BB:7D:6B
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer:       /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial:       01962E98B1E16D9CCD36D0E440162D3D74D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number:          013D
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 1-FEZQAYxKOGbZtNoqgp3TsBstBI.roa (hash: mWm1xa0GsvGR4VAPAVWmqUQ/c+wTEHDE2Bz7si4FFW8=)
                          2: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
                          3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: 98o1NLdhdsPjVX1/UjIX8im0noulfPTm+1Rj4kPnV78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:e1:6d:9c:cd:36:d0:e4:40:16:2d:3d:74:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=c846d2ead7f7c45524b6eb30e4ad04d1e6bb7d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:c9:90:cc:27:63:35:0b:80:6b:80:97:40:
                    f6:3c:df:77:82:fe:7c:01:05:5f:61:66:e3:98:64:
                    cd:3d:1e:ad:aa:a5:40:01:f7:d6:9f:12:a4:fb:41:
                    8b:ac:b0:87:c3:9c:52:07:1d:e0:3b:d7:9e:22:e1:
                    27:01:4a:aa:bc:a3:7c:27:2f:fa:1f:a0:7f:2e:9d:
                    e4:a9:31:38:73:0d:d3:57:f2:72:cd:c0:35:6c:bb:
                    ff:66:31:fd:a3:b9:2c:3d:af:c4:be:df:29:61:37:
                    3f:f2:da:19:0c:24:bb:43:38:7b:d1:8b:cf:91:7e:
                    a2:37:bd:8c:16:94:d9:35:c1:3b:38:f9:21:93:86:
                    c7:f6:5b:9f:d8:9c:e1:56:2d:31:37:90:94:51:b9:
                    b3:4c:16:71:f0:0c:7d:b2:3c:37:d7:ac:35:57:57:
                    49:2d:34:b8:53:0f:6f:0b:5f:20:09:cf:6c:39:96:
                    df:9e:60:0c:cf:cb:32:08:4f:92:e0:da:4a:ff:36:
                    1f:13:af:13:ab:8b:e0:77:9f:56:54:8b:90:92:0c:
                    a9:d6:c5:aa:4b:e1:c3:4b:29:06:6a:8a:a8:ef:7b:
                    e9:03:aa:a8:c9:b1:e9:fa:68:35:e4:60:7a:92:a6:
                    aa:58:25:a2:85:67:52:97:d1:d8:bc:81:d8:79:56:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:46:D2:EA:D7:F7:C4:55:24:B6:EB:30:E4:AD:04:D1:E6:BB:7D:6B
            X509v3 Authority Key Identifier:
                keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ca:95:d4:7e:67:8b:68:cf:ae:67:d5:b0:45:14:05:97:36:
         cd:68:fe:c5:16:f1:7d:7e:ff:e1:8d:f4:6b:f0:96:05:14:68:
         86:b9:67:f7:8b:98:b4:63:1a:a4:8a:5c:ee:9a:ab:3d:a4:b4:
         ab:b0:87:8b:e5:b5:26:5d:74:81:13:dd:bb:9f:21:1f:a1:dd:
         3e:32:b1:ee:33:4f:4c:ba:de:82:e2:e9:e7:9e:0b:c0:9f:ad:
         30:27:5e:2e:62:1d:38:00:a7:fe:ce:e1:80:12:f9:02:8b:e2:
         0d:11:6e:47:ab:d4:f2:d5:c2:93:08:d2:3c:3c:82:77:f5:9c:
         97:dc:e1:f0:97:f8:25:b1:16:f9:96:f5:b8:53:3d:dc:fd:78:
         7c:25:05:ef:bc:af:5b:c0:19:7b:4f:6c:3d:aa:18:fa:14:71:
         77:28:a1:e6:6d:f1:49:2f:45:17:b8:81:cc:fb:4b:6b:6a:ee:
         a1:98:7a:9a:76:98:d9:d0:b2:9c:10:5b:af:8e:37:a8:f3:a3:
         f5:6d:25:c7:a0:14:e4:28:15:9b:2d:b6:5a:c1:ab:08:b5:81:
         93:5c:a9:12:f4:d2:ca:a9:41:d3:88:96:45:76:16:41:f8:b7:
         1d:33:22:dc:f9:35:29:50:8a:c6:f8:7a:26:4f:fc:86:f9:dc:
         af:f1:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----