Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File:                     imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier:          xF/7DxHz4/WnWN/i0xfj2WRPQu1NBSKS0aH6FAxZr1M=
Subject key identifier:   AE:91:7F:60:95:78:2A:41:63:8C:90:45:74:CB:1F:B1:98:1E:7B:28
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer:       /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial:       01962E61E0EC08F43F8195A62D7CEF0C964C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number:          0119
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
                          2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: /nY8pGckhJGRuowFbthiu1EPjixuCr9kutdyrIyS2Qc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:ec:08:f4:3f:81:95:a6:2d:7c:ef:0c:96:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=ae917f6095782a41638c904574cb1fb1981e7b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:07:b7:90:c1:1b:56:ad:f2:d1:73:11:1b:
                    50:e8:ed:19:f0:c8:06:b4:bb:79:20:85:26:d2:e5:
                    66:a2:2e:4c:e6:71:44:04:01:75:42:5e:5a:88:9e:
                    d4:5d:1d:07:7f:71:38:de:fc:cc:0f:c4:02:dc:c0:
                    4f:0e:5c:ed:41:80:9c:c5:4e:ec:fc:24:68:d5:c9:
                    bb:f3:7c:39:ac:98:9c:9e:63:4f:8a:70:19:21:b1:
                    a0:eb:b8:6e:67:f1:49:e5:d1:7a:03:5a:2e:20:5d:
                    5d:20:10:d8:c2:37:1a:f3:56:29:57:af:02:a3:13:
                    bd:05:e1:be:57:87:04:d9:0d:34:89:9a:c3:5c:0b:
                    5e:d9:7b:19:4f:83:2b:c0:dd:cc:5a:d0:9d:8a:b3:
                    77:f5:89:14:1d:be:8a:2c:a8:70:7d:56:72:39:7f:
                    ef:ad:ed:7c:64:9b:9a:fe:92:ca:96:1a:80:d0:11:
                    64:8e:0e:dd:9d:6e:95:c9:ac:75:0b:f4:10:a6:9e:
                    be:10:e5:e0:6d:ad:6d:d2:21:96:7c:61:80:ec:6f:
                    b9:ae:91:2a:00:d5:28:d5:9d:35:61:23:39:e4:00:
                    db:f0:b3:0d:5e:af:61:e9:61:6a:61:91:96:6a:9c:
                    86:dc:87:c0:a9:bf:fe:e6:81:9b:10:a3:ce:d5:da:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:91:7F:60:95:78:2A:41:63:8C:90:45:74:CB:1F:B1:98:1E:7B:28
            X509v3 Authority Key Identifier:
                keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f9:c8:64:33:62:64:72:de:7e:c8:19:ec:6a:45:c8:58:26:
         12:67:12:4a:96:fc:1e:34:25:f0:32:58:d3:e3:d5:85:d2:b0:
         c9:bb:d1:41:a2:54:ca:a5:13:0f:ad:4e:33:7d:00:8b:ad:4a:
         12:46:bb:36:54:2f:97:bd:4a:55:27:9d:c3:d4:6c:6b:4a:63:
         f0:15:95:ca:16:40:2d:10:d9:3a:b8:75:bf:c0:b7:64:06:d6:
         e0:40:3f:f1:12:fd:55:08:9f:3a:b5:4f:24:fd:cc:63:05:a0:
         9a:85:af:96:69:b7:52:a6:2e:e0:22:4a:9b:82:6a:89:18:d9:
         2d:b3:1b:88:b8:f8:94:fb:72:c1:a1:a3:e0:a1:05:c2:17:71:
         a3:d2:d8:7a:3c:2a:41:8e:56:b2:bb:f3:3b:46:5c:b0:c4:84:
         87:e1:da:f2:36:71:79:ca:1a:96:30:06:1b:c0:88:ee:55:2d:
         32:fd:b9:20:e9:88:16:8d:ed:24:86:20:3a:f8:ff:85:25:88:
         37:4f:a4:4e:cf:a8:96:40:db:b9:02:19:0b:7c:60:a6:bf:2b:
         42:93:f2:f8:b7:ac:71:ba:89:1d:1f:f0:48:fa:76:c8:89:e0:
         be:bf:81:99:a8:b6:d9:da:7f:b2:cf:8a:0f:bd:39:3b:1d:fa:
         5a:0a:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----