Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
File:                     aPYGg7N3JXQn279uzjXixYWjsB0.mft (raw, json)
Hash identifier:          Kp/V9zz2/C6rrsLPUlSQUzKqRdFuk9rsO+znWe2uO4A=
Subject key identifier:   27:06:86:CB:5F:36:85:3E:79:DE:BB:B5:19:6F:28:C1:B5:34:8A:30
Authority key identifier: 68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
Certificate issuer:       /CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Certificate serial:       01962E2AD2C4CEA29DB58EF473EBD7C07459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: aPYGg7N3JXQn279uzjXixYWjsB0.crl (hash: du53j8NUkb8n+nXrnL/FktWWPBTol5X+I9oGUVu4BzE=)
                          2: nJZ2h-CE2RpObbNuUbuQAsAe9wo.roa (hash: XjXLrJ8ZAfMXOtdh84OSK02UeKqf16aa2sgmGiELBao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:c4:ce:a2:9d:b5:8e:f4:73:eb:d7:c0:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f60683b377257427dbbf6ece35e2c585a3b01d
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=270686cb5f36853e79debbb5196f28c1b5348a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:a8:98:48:d4:5e:b6:bf:26:5f:51:3b:83:
                    65:65:95:0a:a1:d4:48:1f:b1:50:d7:e4:ca:4b:01:
                    5b:bb:18:b0:98:29:cc:7f:b3:87:ef:30:bb:00:67:
                    4a:2e:78:d0:77:a8:98:be:5c:46:89:cd:97:ee:de:
                    ca:24:67:92:76:47:c6:92:dd:13:61:8a:6d:30:e1:
                    43:2a:92:7f:fa:bf:d8:6b:25:30:8d:39:18:44:c7:
                    f9:ae:70:a2:f0:25:ec:22:ea:ea:ac:16:68:d0:6a:
                    bc:84:4e:b6:85:2f:df:05:45:31:0f:af:01:ca:eb:
                    48:6e:ae:ce:8b:77:ca:cc:94:98:e3:bf:38:26:1b:
                    c4:0d:b1:08:bf:86:95:01:3f:f4:81:bc:90:49:5d:
                    77:01:45:6b:85:d3:cd:a1:68:34:52:7d:e8:dd:0a:
                    f9:7e:84:83:c2:75:7e:c6:2d:84:20:c3:7c:02:a0:
                    17:56:0e:67:c0:35:80:1d:35:b6:2f:b2:6a:eb:58:
                    db:e0:52:69:ac:b6:17:cb:c4:e1:f0:23:b3:81:d0:
                    36:d0:c5:bb:e5:ab:1c:b3:dc:8d:36:0d:74:bb:f7:
                    ce:ae:37:bb:3b:5f:e0:9d:47:33:0f:87:ef:08:f1:
                    3f:bd:a6:7e:1c:44:52:d2:31:9a:65:0d:83:73:ba:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:86:CB:5F:36:85:3E:79:DE:BB:B5:19:6F:28:C1:B5:34:8A:30
            X509v3 Authority Key Identifier:
                keyid:68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:77:9f:e3:fe:21:8c:0f:c9:5b:1a:54:74:b3:83:98:84:
         6f:16:e8:f3:4b:f0:2a:3a:aa:38:89:7e:f2:32:a1:14:fc:41:
         8e:f4:6d:72:c3:35:f0:81:fc:e5:2e:04:a4:b9:43:d7:ee:72:
         f6:cf:15:81:8b:79:9f:c0:6a:27:67:0f:ae:6a:31:9a:d8:78:
         23:64:a4:26:39:57:b1:c5:2a:1e:6d:73:4c:93:36:17:11:d0:
         08:5b:ff:21:ef:f7:69:fa:c3:9e:07:4e:ee:62:9f:84:8f:52:
         29:17:28:bb:16:8c:63:7e:d8:40:af:ad:89:92:02:22:2d:67:
         d3:22:1f:f6:ac:05:81:82:5f:70:39:19:20:62:bc:2c:ee:d3:
         f9:9d:9d:4f:70:f1:65:11:9b:79:0b:74:e5:6b:d9:1b:dc:24:
         b3:4d:96:d8:5a:a6:fb:d3:78:98:13:15:7c:6f:03:e7:21:02:
         cf:36:3f:63:2a:33:31:3b:47:8f:d9:95:bf:31:66:35:44:9d:
         7c:6d:9d:10:83:bc:c7:4e:b8:c6:62:35:28:b0:57:80:c9:fb:
         54:5d:ad:40:25:65:87:b8:f5:66:78:c1:93:a4:b7:02:cd:e3:
         5f:5d:77:c2:d7:a5:3c:e5:69:2e:42:72:6b:5c:2e:9a:1b:59:
         98:f0:1e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----