Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File:                     AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier:          Zv9ErqDFqJXOqWrgzJ+1vtwPB9SzjC6rHfVmMASkQmc=
Subject key identifier:   AF:48:80:41:52:73:EF:B6:DC:99:4D:3A:27:A4:93:A5:B5:5B:DE:FD
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer:       /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial:       01962E99BB180C2BAE385BEE4EFC633BB774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number:          0DD2
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: /I43gDgNPRi/s43fF17jXvjihYsOG7RQQFQMWJWK5Is=)
                          2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bb:18:0c:2b:ae:38:5b:ee:4e:fc:63:3b:b7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=af4880415273efb6dc994d3a27a493a5b55bdefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:8c:90:87:36:14:5e:e0:9f:66:3f:70:d6:
                    c1:30:f1:e3:f6:c3:95:d9:4e:40:e6:d8:0a:5b:11:
                    80:e3:d4:fa:1d:00:95:5e:e2:df:bd:56:e4:f1:0d:
                    24:11:2c:3d:18:ea:7c:cd:25:67:96:7a:a0:db:1d:
                    d8:18:f5:90:97:9d:6b:8b:85:cc:cf:8d:1a:26:41:
                    07:4d:e8:96:b8:9b:3b:bd:72:78:bf:e4:4e:bb:67:
                    18:7a:4c:ef:4f:e3:c3:b1:0f:4a:7c:a4:fd:70:f2:
                    6c:2e:09:61:03:cd:a9:6f:7d:b1:78:71:15:1e:1d:
                    cf:1d:fa:0f:af:85:13:38:22:b5:fd:8b:01:51:6f:
                    f5:00:63:30:93:5a:64:95:fa:93:a7:4e:86:b2:c8:
                    70:ca:3c:ee:b4:36:3d:ad:fa:90:50:f2:ca:43:c0:
                    e0:9c:6e:a4:e9:8f:f7:fb:6e:4d:4b:b4:b1:e9:14:
                    2e:58:20:17:6e:fd:d3:f8:4d:e7:e1:3d:aa:8e:ff:
                    92:bc:be:5d:8b:ac:b3:93:e2:5d:cf:3e:96:99:09:
                    f4:39:5a:9a:cd:1a:23:e7:dc:1e:e7:b0:e6:fc:86:
                    67:48:f2:ce:01:c2:63:1d:7b:3a:a9:d1:9f:40:c8:
                    1f:51:06:9e:03:b0:04:49:28:b0:95:60:5c:c2:ca:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:48:80:41:52:73:EF:B6:DC:99:4D:3A:27:A4:93:A5:B5:5B:DE:FD
            X509v3 Authority Key Identifier:
                keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a9:4a:8a:7a:3b:3d:65:52:e0:39:e7:2e:fe:6d:a3:18:7f:
         e1:18:bd:f1:9a:33:e2:3b:05:94:b0:f9:2b:e2:05:b1:28:96:
         50:86:0e:dc:45:a5:bf:f1:07:88:78:d6:40:c1:af:2b:65:05:
         08:4c:7b:9b:7a:f2:e8:29:fb:1a:ab:9b:b7:63:fe:29:96:62:
         c8:e2:07:c4:1d:ca:6f:97:8c:87:27:b1:03:55:8a:33:60:c4:
         10:d7:c5:f6:82:66:b9:46:ad:f7:62:b3:fd:c7:c0:fe:86:a0:
         ee:65:de:17:60:7e:74:c6:3c:1e:dd:0f:c8:be:08:9f:c9:df:
         ca:47:4b:7d:e2:68:03:0f:f1:24:41:2d:50:9d:d1:62:d2:74:
         22:fd:88:37:c7:d6:83:1d:54:b0:de:a4:c3:c5:6c:03:16:f2:
         fd:c7:1f:a1:87:51:54:16:53:db:b2:69:35:b2:de:50:a9:06:
         03:06:e7:6f:52:6c:3d:39:5e:01:75:3f:9f:2e:c4:f2:84:53:
         af:92:ae:ba:e4:b9:e2:55:9e:d5:b1:e1:b5:70:e5:9d:4f:96:
         0d:1e:ac:8b:81:63:51:48:23:bd:5b:a6:5d:a7:bf:c4:0d:34:
         5c:1d:58:28:91:1f:09:ef:24:fd:73:fd:e8:5b:cc:04:c7:04:
         49:3b:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----