Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File:                     aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier:          iB+uR7SpU3vVKo4R6X9gdxBWW8dxymXVnVipyS8unk0=
Subject key identifier:   ED:B6:20:F1:6C:F3:58:EC:04:84:55:37:A5:B3:34:C8:0D:6A:E5:63
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer:       /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial:       01962E61FDEFE62E42F36350CF9FE0DE37EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number:          03D3
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
                          2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: ONXozrXT4jxBD90BaZYv+r6Z/CYJjx/Ok1gjKuuTqMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fd:ef:e6:2e:42:f3:63:50:cf:9f:e0:de:37:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=edb620f16cf358ec04845537a5b334c80d6ae563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:69:87:70:c7:5e:18:8c:41:cb:79:d3:2b:
                    2c:0d:a6:03:7d:42:64:43:17:b1:94:95:d9:a4:58:
                    21:9b:ef:21:de:b8:bf:bb:0e:20:24:42:a9:44:33:
                    1d:33:85:06:75:28:5b:b7:17:c8:e6:78:8d:f1:0a:
                    7f:5f:d2:e9:44:3b:8f:8a:8c:bd:26:18:c7:79:d0:
                    23:17:4a:77:4b:73:01:19:fc:cd:2d:f2:43:0e:d1:
                    5d:dd:d9:cd:4f:92:a2:0a:64:b8:ce:55:76:7b:d2:
                    96:c8:ff:8d:94:0e:c9:94:47:ee:64:03:67:33:9c:
                    cd:fe:60:1f:da:b8:3c:b7:1a:3f:eb:db:35:36:a5:
                    66:67:8e:6f:81:b9:31:8d:64:c5:ae:00:d2:68:57:
                    a1:a0:7c:00:3d:23:30:fd:82:7e:06:37:66:be:e3:
                    f7:3f:54:1e:8d:67:04:84:be:82:10:65:6a:7f:ab:
                    e3:97:d9:5a:f3:5e:dc:44:34:1a:f0:19:9b:0b:93:
                    09:52:78:1a:c6:5d:ab:07:20:28:c7:08:6b:83:30:
                    fe:87:2e:eb:db:f0:92:c4:85:7d:bc:a7:78:07:9b:
                    48:95:f8:98:0d:99:d9:f3:85:41:bd:f2:8d:99:9e:
                    2a:19:71:ed:4c:bd:91:8a:11:e4:e2:b1:ec:fb:40:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B6:20:F1:6C:F3:58:EC:04:84:55:37:A5:B3:34:C8:0D:6A:E5:63
            X509v3 Authority Key Identifier:
                keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:e3:2c:59:f3:4d:9c:fb:0d:c2:a5:d2:2f:04:93:8a:be:
         e6:7a:cf:ac:4d:42:96:ec:36:e0:6e:ff:d4:f9:3c:c7:de:73:
         fe:11:96:1d:77:94:fd:25:38:32:f5:e8:1f:45:f6:6c:7c:fe:
         3e:11:df:f6:85:e3:c2:71:b3:58:01:f8:06:0d:8e:78:41:fd:
         d6:e3:4e:f2:96:fd:cb:2f:64:2d:35:ed:f9:7a:0a:2f:85:57:
         78:41:de:31:71:b6:40:8a:b1:0e:d7:ce:26:33:03:bc:0f:4c:
         6d:cb:9d:3c:01:a6:a2:b6:5f:81:9e:eb:87:e8:1d:21:ed:8d:
         50:73:c3:5c:fa:8d:17:bf:42:e0:36:cf:04:ff:0c:c2:f6:4c:
         2a:61:af:14:26:65:49:53:cc:6c:78:19:a7:bf:6e:65:3c:f0:
         d5:6a:f7:5d:47:f4:11:26:74:74:60:8c:0a:99:5e:05:ab:b9:
         97:94:84:8d:3e:3c:53:ff:50:2b:7a:e9:57:3c:da:20:cd:9b:
         ce:3a:24:c4:b7:a0:d0:e3:77:69:ed:cb:89:ea:86:ec:fa:a8:
         c8:55:69:ac:3f:f7:b8:c2:89:83:54:23:84:4a:a1:68:c3:01:
         00:e6:db:79:68:9c:4b:a9:4c:3c:c0:aa:79:6e:84:73:f6:99:
         e8:30:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----