Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File:                     aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier:          w3s/J6pQVCk6gt7l8ylfNzTPnFf8fmx16yhtEPekYic=
Subject key identifier:   A2:D7:FF:9B:20:B6:C9:A3:BE:BC:EE:DD:E0:74:85:03:C7:FE:8D:35
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer:       /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial:       01962ECF4DE2E37A0DA81116ADE7071AB875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=)
                          2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: WR/GYYPeyTODZDap2z1fF0JP6YnSYANk4t05vkoo31w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:e2:e3:7a:0d:a8:11:16:ad:e7:07:1a:b8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=a2d7ff9b20b6c9a3bebceedde0748503c7fe8d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:b7:4f:b3:71:a8:b5:86:28:ea:39:5b:c3:
                    cd:1b:55:3f:4c:b8:6f:be:9b:c9:47:82:b6:ae:b2:
                    8b:2d:e2:8d:e5:f3:1d:3a:e2:46:9a:d9:36:36:1f:
                    02:dc:89:14:de:84:3a:d1:03:06:da:e3:35:5b:0f:
                    0e:06:74:75:e9:ae:90:a6:42:c5:cc:9d:61:9b:ef:
                    2b:7d:0c:32:9e:40:c6:c6:31:66:7e:2d:6e:54:70:
                    11:da:e9:16:ef:18:1c:ad:2a:64:ac:f7:af:71:b8:
                    2d:ef:6d:33:3e:72:a7:f7:fd:ae:b3:ad:9b:36:96:
                    77:81:b6:ec:0e:2d:91:31:2e:cf:8c:8b:26:ba:9b:
                    c3:69:8e:f8:41:1a:61:5a:e9:0f:e2:f0:07:99:69:
                    da:fe:ae:38:b7:99:b4:1f:34:97:6c:24:13:c1:3e:
                    33:1d:14:a7:70:c7:5e:b1:30:ed:62:d5:89:a2:c8:
                    26:bc:86:84:dc:20:ff:bd:cf:65:9a:e4:fa:b5:0e:
                    c8:36:c2:2d:c1:b7:bc:0a:02:66:f4:a9:da:4c:21:
                    90:7f:55:07:ae:33:0a:8b:91:2c:9c:d8:37:ae:4c:
                    63:1c:1c:18:c8:ac:a2:e5:09:d2:c9:e6:6a:f7:ae:
                    9b:a0:bd:35:98:32:1a:8c:58:bb:db:b4:61:1d:35:
                    13:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:FF:9B:20:B6:C9:A3:BE:BC:EE:DD:E0:74:85:03:C7:FE:8D:35
            X509v3 Authority Key Identifier:
                keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:e3:ed:a5:40:3d:a1:ac:fc:df:fb:e2:53:f4:d9:e1:a4:
         aa:c3:ac:79:8e:ed:fb:db:10:29:40:73:3c:a0:bd:d2:14:b7:
         c3:b3:44:e8:f3:84:b2:f0:74:db:ca:31:68:59:0f:d3:77:8a:
         7f:a8:9d:a9:0b:63:96:85:7b:e8:62:cc:ec:62:f5:5f:be:22:
         41:be:0c:f4:a2:96:a0:29:12:56:44:65:ce:f6:83:dd:76:1a:
         f2:1e:3f:a1:e4:c9:66:9f:ac:52:a2:77:09:0b:86:77:d4:f1:
         e5:39:8f:df:ed:c3:b9:11:93:aa:d1:85:bc:5e:9a:9a:32:1d:
         a9:74:b1:cf:c6:d8:4b:05:38:68:60:d7:1e:3e:4f:90:ff:e8:
         0c:60:3b:48:ba:d7:ba:82:e1:3c:64:96:0b:1c:26:4d:ea:92:
         b4:80:ae:3b:bc:a6:2f:a7:0c:3c:db:41:cb:9b:5f:69:7b:7a:
         4d:78:f6:74:2c:e1:a4:78:0e:56:f3:f5:2d:df:d6:cd:3e:84:
         0d:c6:d5:87:95:36:35:27:f4:74:4e:f4:c6:65:43:12:ff:85:
         6b:14:a6:ed:33:90:65:cf:18:95:71:12:c6:0b:36:a3:3b:69:
         2b:ff:58:db:f7:c5:24:1c:a3:b1:98:ee:37:d1:9c:84:29:34:
         5c:45:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----