Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File:                     AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier:          5pmfGkPxCpegphvAK9vgjNYZjmrFtCrx9UpuDKoHT/A=
Subject key identifier:   D6:EC:35:4C:90:27:7B:01:AD:06:E9:43:9F:BD:88:34:50:5C:37:8C
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer:       /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial:       01962E98DFEF2EBA2A95F120AEBBF5898B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number:          0DAB
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: 5XaaKMB6iB1Bc1p8BOKEC360UaxHsr/Sxa2Cjlc4HlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:ef:2e:ba:2a:95:f1:20:ae:bb:f5:89:8b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=d6ec354c90277b01ad06e9439fbd8834505c378c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:80:67:9f:f5:7a:54:e4:4c:08:0b:d6:ae:37:
                    1d:26:50:ed:73:55:a2:cd:64:80:b3:e8:fa:9b:f6:
                    82:7c:07:53:c6:03:66:77:c5:5c:3e:17:59:bc:e3:
                    b5:ed:98:8b:87:62:f1:e4:be:4e:a1:3b:b1:92:3e:
                    b7:c1:42:3e:ba:5f:da:83:af:0e:10:7f:11:ff:65:
                    d9:1e:eb:28:c0:38:90:0c:66:53:d3:be:98:67:3d:
                    4f:1d:0e:aa:c1:3c:c7:68:ba:3c:12:31:c1:bb:25:
                    82:c5:59:8a:9f:e4:a8:af:91:1b:d5:1c:53:71:57:
                    e4:b2:a9:fe:3d:28:c0:d2:f4:0e:a4:75:10:7f:ac:
                    9c:60:86:b4:22:68:7d:04:f9:d0:74:b4:89:93:a1:
                    a3:43:9e:12:34:1f:4e:a8:f7:94:b6:eb:d1:9c:86:
                    09:39:d1:a6:d4:81:95:b1:8d:60:34:7c:3c:24:09:
                    7f:db:0d:ca:7a:41:b2:23:bd:6c:8e:17:02:a9:67:
                    63:da:04:4b:2a:4a:b2:c8:f5:fa:5b:25:ad:e1:8c:
                    53:c4:47:51:b3:af:1e:85:8f:be:cf:7f:48:c2:e2:
                    b8:62:09:91:2c:eb:53:47:7a:ef:d5:8a:15:84:5a:
                    34:f2:00:f5:71:81:77:65:ad:59:88:ca:e7:c1:b0:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:35:4C:90:27:7B:01:AD:06:E9:43:9F:BD:88:34:50:5C:37:8C
            X509v3 Authority Key Identifier:
                keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:25:2f:fd:01:09:b7:e1:c6:2f:a9:c2:91:df:55:e3:fe:
         a4:cf:99:17:dd:a0:af:81:39:94:5b:f3:7b:41:99:00:9d:40:
         5a:85:53:37:b6:3a:82:02:6f:3c:5b:58:e1:1c:35:fa:ab:a8:
         be:8b:ab:68:f7:be:f2:05:9b:63:07:4f:90:c2:d3:a8:c6:9f:
         29:40:94:3a:3a:4d:79:76:99:14:78:33:76:d6:36:00:48:e5:
         ef:e6:85:3c:fc:0d:b9:0f:12:44:2d:61:71:e4:5e:d5:6d:58:
         87:01:66:c2:34:cd:56:82:66:73:84:9d:c6:58:76:64:a1:70:
         9d:3a:58:63:2c:34:5b:2e:bd:ab:ab:41:6b:5b:f3:5c:24:df:
         c8:55:2b:7a:de:51:fc:b2:ca:55:54:18:11:ff:83:c9:8c:34:
         9d:70:76:6a:9f:45:46:ff:e5:89:9b:6d:8a:4f:1b:10:e3:52:
         b2:71:52:b3:25:99:70:d9:cb:ca:9a:68:67:da:a5:17:4a:a0:
         9f:3b:49:4e:a9:0c:44:58:40:a6:c2:ed:2a:9d:8d:88:70:cb:
         cb:4d:04:b2:16:eb:cb:7b:5d:2c:77:2a:2c:6f:f4:fd:4a:e5:
         10:b7:df:ce:96:7f:e9:9f:c6:3a:f5:0c:14:cb:d5:23:ee:7a:
         ad:ed:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----