Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File:                     AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier:          /7ogi8DgRAq0YAKOB8M0l2RGqI1muikOKaQ8DefJYJc=
Subject key identifier:   59:70:E6:20:49:F1:B0:35:D5:2B:BC:D5:BB:F0:CC:44:7E:B2:AE:C1
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer:       /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial:       01962F06A8251832771CAFF718F73E2D9A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: Db1mDcavP1K0YYnas5S2gjQv9lwJAeXokQgvO2loK4c=)
                          2: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (hash: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:25:18:32:77:1c:af:f7:18:f7:3e:2d:9a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=5970e62049f1b035d52bbcd5bbf0cc447eb2aec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:9b:1a:6b:35:a4:cf:09:56:ff:73:92:85:
                    7d:70:a2:57:e3:46:cc:cf:f4:ca:de:64:4f:3f:08:
                    e7:62:05:7d:fb:20:93:1e:1e:65:b1:dd:67:39:dd:
                    9b:af:f7:24:68:8c:49:da:93:f1:78:7b:10:96:64:
                    ea:00:49:4c:af:10:f2:64:6b:34:91:1d:ad:9e:f1:
                    ec:72:28:b8:56:0b:5e:7f:11:66:8c:8e:ec:24:3d:
                    e9:06:3e:e3:73:c3:5f:5c:4f:1a:b5:7c:11:47:14:
                    50:a3:0d:6e:dd:f9:31:fb:02:ee:ed:aa:b6:f2:62:
                    5f:84:69:04:1b:5d:e3:1c:c0:6c:61:4b:78:fb:f7:
                    ab:0a:ba:11:a9:6d:e1:82:22:9f:eb:3b:5f:67:a0:
                    8b:1b:28:57:35:6a:8c:63:a9:96:31:cf:53:0f:02:
                    dc:4d:88:c3:6c:45:d4:8f:56:ea:e9:4c:f1:14:67:
                    cb:98:9c:e2:a8:20:a6:d7:dd:ef:d0:56:da:fe:83:
                    3e:38:f0:84:1c:52:3b:13:d8:e0:ed:ac:79:af:30:
                    e5:a2:16:d7:b8:16:4e:0c:d9:75:14:98:a0:d8:72:
                    04:ec:0c:6a:9d:1c:06:e5:78:78:4e:ba:16:78:f5:
                    c6:f5:0b:4c:ba:d3:f7:a9:0e:14:5a:d3:be:e5:e7:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:E6:20:49:F1:B0:35:D5:2B:BC:D5:BB:F0:CC:44:7E:B2:AE:C1
            X509v3 Authority Key Identifier:
                keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9d:03:36:a2:99:11:0f:49:4b:a1:83:17:70:c1:64:78:70:
         fb:90:db:96:f7:b0:a8:de:a6:02:f3:8d:fa:17:f5:23:d5:97:
         d1:6d:3d:32:43:8d:bc:bf:d4:aa:f7:95:7b:56:5d:27:7d:d5:
         0b:4d:50:fb:29:4c:ce:5d:36:ab:24:1e:52:2c:48:2c:3a:cf:
         e2:a4:6d:57:9c:d4:7d:65:29:7b:bb:66:fb:6d:9d:84:04:20:
         df:cc:d3:45:41:b3:61:1c:b2:80:ba:cc:73:6a:91:a8:a8:84:
         db:35:f0:03:10:30:60:67:2e:a9:a7:24:90:b8:1a:4e:84:25:
         f3:65:60:a6:75:82:bc:53:b1:65:d6:05:31:1e:86:9d:93:74:
         d6:b1:29:db:df:3a:43:0a:61:97:4c:7a:57:45:49:98:83:0e:
         8c:6c:be:54:51:89:da:20:c8:73:f2:a9:ae:c2:f9:37:9f:ca:
         99:ba:06:98:f7:89:4e:b5:d4:16:53:ef:50:04:ec:34:74:7c:
         d7:75:d0:61:68:1a:f2:cc:2d:af:2b:e2:bb:ee:0c:d5:b3:3d:
         96:41:39:7a:9d:bc:e7:f7:67:74:e5:4c:32:e7:76:02:bb:a5:
         3a:7f:76:af:8d:40:80:35:ca:b6:6a:c7:07:98:4b:0e:83:e5:
         5b:22:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----