Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File:                     aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier:          wINZTc+Nr1oa131vBvxe9yFUbXd0cvmS3TDVPI74NoM=
Subject key identifier:   8E:71:7B:57:B7:3F:70:E0:5B:12:DE:7D:4C:97:99:F6:DC:5F:EB:86
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer:       /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial:       01962F74FB95706C35F7C87E839D3E221FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number:          0F74
Signing time:             Sun 13 Apr 2025 14:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:57 +0000
Files and hashes:         1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
                          2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: 4BrQz+6h66pMZrAt5Qfbwf/tpWEJTfR1J7ncZ5WpWHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:fb:95:70:6c:35:f7:c8:7e:83:9d:3e:22:1f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
        Validity
            Not Before: Apr 13 14:01:57 2025 GMT
            Not After : Apr 14 14:01:57 2025 GMT
        Subject: CN=8e717b57b73f70e05b12de7d4c9799f6dc5feb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:01:42:eb:78:5c:a7:9d:0b:08:3d:fa:95:
                    91:b9:80:9b:40:ab:b7:a0:b1:79:4a:3d:66:63:fb:
                    b0:a6:8e:60:17:1e:b5:34:cf:2c:d5:28:65:53:af:
                    2e:75:65:f8:ff:70:4c:0b:a3:d6:e1:e6:15:75:14:
                    21:eb:48:ff:64:e7:54:ea:f8:cf:13:e1:0f:c3:df:
                    6f:50:a0:8d:2f:94:20:f6:a9:3a:38:55:cb:99:55:
                    ca:27:48:e5:53:a4:75:8b:49:08:62:d8:30:f0:51:
                    d1:d1:89:65:67:79:a8:dc:67:42:30:4a:59:01:c0:
                    fb:e3:9d:2a:f2:78:2c:8a:d9:67:60:cc:3d:89:80:
                    c2:67:ea:1b:d4:02:b7:73:33:fd:ae:24:fd:f9:1b:
                    16:c5:a6:52:27:40:08:8a:02:64:52:52:99:f9:69:
                    97:10:d3:e6:d1:f4:94:84:2d:94:b6:ac:50:35:2c:
                    cd:74:98:b4:c1:9d:08:3b:d0:e3:cc:8d:8d:30:fb:
                    0e:59:a0:73:3f:47:69:7f:32:a3:55:80:d2:06:a4:
                    c6:d0:24:f9:26:5d:25:ef:9e:a2:83:ed:63:7f:0e:
                    7a:96:bd:b3:4e:81:84:15:28:d1:62:9d:39:94:ec:
                    83:44:28:c4:df:3f:a3:e0:98:15:eb:99:a2:a4:d6:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:7B:57:B7:3F:70:E0:5B:12:DE:7D:4C:97:99:F6:DC:5F:EB:86
            X509v3 Authority Key Identifier:
                keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bb:7f:3d:01:d1:07:d0:b3:c5:51:16:c1:e2:d9:b5:47:4d:
         ac:4d:fd:4e:18:3f:0f:94:77:51:bb:48:87:33:8f:58:54:38:
         05:46:b2:75:fa:27:c5:44:2f:40:48:02:88:b1:8d:7d:86:2a:
         96:fd:d7:1d:17:bc:a7:76:cd:62:f1:1a:f0:e7:49:10:65:97:
         70:72:c1:12:3d:1b:13:00:61:4c:b7:15:a2:3d:85:c4:17:84:
         dc:03:54:2e:b8:0f:76:d9:80:cf:24:22:67:06:39:e2:a3:24:
         6a:2e:3b:bd:14:16:c3:5e:36:9d:cd:e7:e8:39:88:24:bc:15:
         44:0a:d7:a4:70:22:e3:8d:fa:36:22:b6:14:97:60:21:c7:fc:
         c6:b4:b2:8c:e1:07:f3:e5:9d:df:cf:e1:a2:71:54:3b:f5:d8:
         06:f0:bb:4f:21:6b:76:cb:a4:31:13:33:43:91:28:ac:ba:c5:
         e3:0a:12:51:44:7a:76:b3:48:b6:35:ba:74:ea:e4:97:b6:16:
         02:54:bd:60:9a:f5:05:57:15:dc:04:2d:ae:53:c0:99:d8:75:
         25:4f:d1:38:2f:e4:20:9f:ad:e1:24:12:5f:a2:79:52:51:97:
         74:02:5e:8a:03:05:2d:f6:98:ef:56:f0:ce:4b:41:4d:31:0b:
         83:c7:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----