Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File:                     AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier:          j9o9/Pz27l9wkmXwTa7eGPMmyCXLld0qjkhO5LyaV+A=
Subject key identifier:   3A:7D:E8:F3:4E:C5:62:D8:02:EE:E9:C5:8D:5D:EE:ED:41:C4:31:12
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer:       /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial:       01962F063BBE7AB949ED64DF0E5DF73FEBF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: Lk0lWTJ+WKL/eCtyE4w89W5nU67EPoDQFguK+Sl+kv4=)
                          2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
                          3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3b:be:7a:b9:49:ed:64:df:0e:5d:f7:3f:eb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=3a7de8f34ec562d802eee9c58d5deeed41c43112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:5c:10:95:02:c1:1c:39:8b:ac:fb:19:77:
                    ca:5b:d6:25:4b:08:34:df:47:7d:ed:da:ef:31:db:
                    71:69:c7:1f:61:92:40:b8:18:71:0d:e3:74:53:85:
                    91:8e:af:7a:c5:22:b0:3d:fc:34:a8:bb:1a:65:c3:
                    87:56:c8:01:0a:36:e1:3a:87:b2:61:29:ae:96:95:
                    d6:1a:fb:e4:50:37:ac:a4:3e:23:7f:30:9b:f5:92:
                    a3:4d:96:86:e5:42:47:11:cd:4d:68:11:27:1b:86:
                    ba:2a:a5:60:9b:0e:eb:58:bc:5d:ea:e7:70:ae:f4:
                    bf:44:83:8d:05:74:b1:ce:55:af:f7:c9:6a:ec:f9:
                    83:66:8c:32:1a:40:3c:ad:fc:ca:8b:cb:d3:36:2f:
                    67:f5:7a:90:4a:83:a0:b5:ac:82:84:49:ca:3b:08:
                    a9:c1:01:4c:52:0b:0a:75:17:33:c8:5a:b8:f8:1c:
                    07:7e:3f:be:a7:42:ea:ac:de:f7:5f:8e:11:d5:f7:
                    af:ba:05:b7:d5:a3:7d:e0:bc:f6:0a:1a:89:a9:53:
                    0b:74:02:ad:7c:b4:31:83:00:bf:15:98:0c:ad:f7:
                    91:80:64:5b:b2:fa:14:2c:b6:20:01:8c:f9:14:d2:
                    ba:ba:7a:0f:07:98:87:2c:73:68:f5:3f:38:e4:26:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7D:E8:F3:4E:C5:62:D8:02:EE:E9:C5:8D:5D:EE:ED:41:C4:31:12
            X509v3 Authority Key Identifier:
                keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:78:57:2c:99:a0:e9:d2:d5:38:d9:be:74:fb:57:df:4c:
         8e:e0:9a:68:9d:61:95:b1:87:8e:82:39:7e:ee:50:bf:de:3e:
         f0:7a:8b:76:18:28:f9:be:74:95:d3:e8:67:d0:39:b2:e6:56:
         e4:6c:b8:80:48:f9:84:f6:16:c4:54:cf:79:2c:a7:a8:18:55:
         2d:8b:bd:15:c2:8a:67:88:36:13:2f:d5:d4:e2:f0:10:f9:c0:
         6f:79:b5:5f:b8:e4:3b:70:5b:f2:46:6d:67:5b:a2:eb:38:91:
         29:e3:1c:87:65:d0:86:ab:0f:3e:c4:73:21:8f:34:76:11:5c:
         c8:9c:2d:d1:32:d4:84:58:4a:d7:d1:a3:ab:7f:6c:ed:6d:14:
         f1:88:47:2b:cc:1c:d9:c5:0c:94:90:b1:5e:d2:28:70:11:82:
         da:f3:fb:31:df:79:49:6b:9d:95:f6:24:74:e6:5f:08:49:8c:
         f0:35:7b:f4:cf:2c:40:fd:99:23:e8:85:bd:98:8f:1d:2d:cf:
         a4:a6:47:ea:2b:ca:03:18:25:8d:48:c3:7c:c2:b3:04:be:c8:
         41:c2:a4:57:67:81:e6:ba:9e:0e:a6:ae:e3:48:3a:ed:bd:db:
         dd:ba:64:c2:a0:e8:1a:25:96:88:fd:54:ca:bb:29:49:9c:88:
         b7:42:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----