Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File:                     aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier:          4a2OmFKi+QBJQ0ngUTawJaYxjPt8Bd+brxiDHTSx0w4=
Subject key identifier:   E5:6C:A4:5A:14:0B:7A:4C:3E:39:F1:7C:95:22:B0:CF:41:DD:0B:E8
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer:       /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial:       01962E61A949B6C31BFC0477DD7C9CCA74DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number:          0C06
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: Hk8OntQ5zqlTFn040DQPSldzYiE.roa (hash: KP+8WLsncYNj0fRydYrCKf8Ah12qAHLXgrBdfpvlTN0=)
                          2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: oDmvo4snt3HbYAeP3lWSVbJ4TruqDYVaxHg2C7rlN6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:49:b6:c3:1b:fc:04:77:dd:7c:9c:ca:74:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=e56ca45a140b7a4c3e39f17c9522b0cf41dd0be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:06:8b:be:ea:9c:3c:19:4c:f3:f7:f0:c0:
                    13:12:ab:79:1a:b9:4d:f0:65:0b:ad:ba:79:76:06:
                    60:29:ce:bc:1d:b3:7b:a9:24:3e:ae:17:91:bc:a6:
                    7f:4c:bb:9b:e0:73:4b:93:e6:ef:b9:30:f8:e6:ce:
                    d1:38:5c:bb:1f:df:88:7c:3c:fd:f6:c0:b3:82:89:
                    a0:56:86:df:c9:e6:e9:24:e3:d2:b1:65:3a:91:c1:
                    8d:8c:01:79:e5:b3:8a:51:9f:f2:8a:87:d7:65:f2:
                    00:d3:20:08:6d:f3:6d:ac:73:fa:f1:30:d7:53:28:
                    b4:cb:2c:49:01:cb:52:35:76:67:53:0b:65:cc:59:
                    d9:e3:f8:59:e0:6c:2c:4a:97:03:cb:3a:d4:d9:5f:
                    4d:42:f8:d3:a9:16:cb:c2:16:4f:96:c8:96:b5:7e:
                    d4:ec:4e:2e:d6:7a:0a:85:ff:df:5c:b1:e3:17:9c:
                    30:76:1b:3a:e9:31:36:3c:c1:4e:4b:2a:db:dd:51:
                    a4:ac:05:10:60:ab:e1:00:42:5a:ec:8a:97:9f:42:
                    08:7e:6f:42:92:8d:e9:09:27:cf:c6:c1:54:b6:23:
                    08:c3:96:89:4b:01:47:4c:22:6c:e7:ee:45:13:24:
                    5d:f6:08:3f:a7:cc:38:04:da:6f:53:63:12:58:6f:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:A4:5A:14:0B:7A:4C:3E:39:F1:7C:95:22:B0:CF:41:DD:0B:E8
            X509v3 Authority Key Identifier:
                keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:12:ac:d7:8a:86:b9:d2:59:54:64:d0:86:a2:a0:46:0f:
         98:fc:ec:b6:a6:78:ac:2f:d5:72:8b:ce:ad:4c:55:cc:db:39:
         e0:e0:af:bb:ef:2d:c2:00:b6:6e:1d:a9:92:1d:b2:4a:c5:cf:
         18:14:e3:e8:73:d1:1b:e6:b9:25:f1:b1:6b:3b:43:b2:75:48:
         93:22:c9:89:59:8e:81:17:6c:01:98:c8:27:a4:30:7c:8b:73:
         77:58:cc:28:46:1d:0c:3b:63:2e:82:aa:13:e5:ed:83:0e:af:
         f2:4a:80:32:24:92:ff:4b:d5:ab:d8:2e:49:1a:0f:0c:22:ae:
         f1:81:b0:51:c0:da:5d:5d:66:62:6b:3a:f0:8b:95:e4:37:ab:
         bd:51:ff:ba:3f:e3:7e:a2:1d:31:bf:a3:7a:7d:14:94:b9:fa:
         90:4f:5c:1f:48:97:b5:b8:c1:6a:ca:a9:ca:39:52:90:8b:fc:
         92:13:bc:e3:e0:33:2e:93:43:1d:58:44:45:fe:38:28:5c:4c:
         3a:13:1d:04:3a:a1:52:28:8d:0e:db:3b:fc:fb:d0:e7:ef:63:
         26:7e:21:32:47:10:59:eb:b2:2c:f6:66:dc:a4:55:8d:9f:81:
         a9:0e:4b:53:24:c4:95:1c:b6:56:83:16:51:60:d1:c7:80:c6:
         eb:e7:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----