Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File:                     AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier:          2vv1eScciB5xut79ohD+hJqo+tXBNG0XJbtmsnmrOZY=
Subject key identifier:   71:23:0B:D7:96:40:0E:80:B0:07:AC:59:B0:90:A7:6F:94:36:96:BA
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer:       /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial:       01962FAB603B5086DD51E9414801DB7418B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number:          0458
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: 2qI3BXE4cRCRJbSGnc9Y/AN5Y4MF+rTYTIIlM97A9BY=)
                          2: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (hash: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:60:3b:50:86:dd:51:e9:41:48:01:db:74:18:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=71230bd796400e80b007ac59b090a76f943696ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b5:ae:c1:06:bb:55:17:30:16:aa:54:5e:0e:
                    b0:a5:a6:50:18:d9:cf:e3:9e:0a:67:d8:ef:d3:81:
                    04:6a:7b:28:7c:69:a9:0e:db:02:a8:e4:af:f1:2c:
                    31:bc:2e:8f:a5:80:31:87:9a:e6:5a:ba:dd:0c:7d:
                    c5:ff:2b:0f:92:0d:2e:d5:a1:5e:5e:b5:1a:21:3f:
                    71:25:86:72:2a:ae:1a:3c:85:64:3f:c1:65:5f:29:
                    31:53:87:2f:64:f8:a9:2c:09:eb:8d:a0:6b:b6:11:
                    9a:71:35:4f:5f:bc:0d:b0:58:c8:e6:d2:29:6c:11:
                    fc:ce:e3:fd:93:6e:49:9b:51:55:12:91:c9:86:17:
                    da:8e:53:c2:e9:00:dd:85:c0:c8:a4:75:3a:9a:f9:
                    51:4c:94:e0:1b:e1:51:97:63:7f:cc:01:88:1d:47:
                    46:28:e7:9e:55:f1:4c:3c:b6:2c:48:12:d9:1a:66:
                    ab:8e:d2:29:c0:bb:d6:df:9c:34:07:10:35:1a:0f:
                    e9:f1:12:85:b6:df:17:26:b4:ce:32:99:04:b3:2e:
                    1f:72:4f:3a:cf:92:14:1b:51:a0:c9:73:4a:42:3f:
                    bb:dc:8e:f1:45:54:4f:13:82:04:54:11:ef:2a:8b:
                    e0:54:72:05:84:45:ee:e7:cb:71:51:e6:94:9a:35:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:0B:D7:96:40:0E:80:B0:07:AC:59:B0:90:A7:6F:94:36:96:BA
            X509v3 Authority Key Identifier:
                keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:5a:c7:67:bd:87:1d:42:8e:e9:7b:1c:13:3b:be:bb:d9:
         80:de:53:42:eb:48:aa:c1:f8:f5:a3:f6:0e:c3:cf:b2:b1:4f:
         58:0b:94:e8:55:eb:e8:f0:c6:f1:26:ce:77:95:50:6b:8e:4a:
         39:5e:08:b1:a8:5d:74:1b:53:73:40:5d:6a:13:ba:8d:61:ee:
         79:cf:23:d8:35:1b:ab:f9:73:2e:1d:cb:29:16:9a:e3:a8:57:
         4b:d6:ed:82:e6:f7:4d:71:5f:21:a4:04:27:ca:05:06:e1:34:
         6b:3f:e9:68:26:3d:1c:f1:b3:3d:21:55:e6:f0:5e:8a:7c:67:
         7d:6f:f4:e6:f9:6e:c2:ae:bc:11:3a:78:6f:1d:1a:22:a0:72:
         42:5f:81:ba:40:39:b9:fd:4e:2c:16:e4:dd:52:d5:b2:05:55:
         d0:46:11:67:65:53:1f:c5:df:43:1e:a5:4f:66:4c:55:17:d7:
         5c:29:37:5a:67:38:45:02:14:89:f7:62:75:3c:55:02:9a:fd:
         b8:70:b0:b4:38:ff:ef:73:dd:20:ee:14:8f:d0:95:62:c9:77:
         6e:76:c3:0a:f4:29:bc:00:95:cc:03:20:c8:7d:62:70:98:d9:
         7d:4c:3c:02:6a:15:2f:8c:57:f4:1e:70:75:a6:d5:7b:3b:20:
         67:38:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----