Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File:                     ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier:          cznffrHSFe9XARg43gxUeVtCFoMBBmdCUYqY2oYy3O8=
Subject key identifier:   51:00:A5:90:4C:D1:4B:C5:EB:AB:0C:DB:00:D2:4A:15:2D:CF:73:0A
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer:       /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial:       01962E61B1C8DFEB3598CCFCBDC5C31324C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number:          13AD
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: YBO2uImDDVEnaoxfIxpg6LvqyvAXPlbU9RKhFM0hxjc=)
                          2: jkQdp6EX7jHh6f31YxZYZhR0C8U.roa (hash: FmayEZ/+k7yvcImZRXEurVZdNlGpk+kZM2DFLPiqTu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:c8:df:eb:35:98:cc:fc:bd:c5:c3:13:24:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=5100a5904cd14bc5ebab0cdb00d24a152dcf730a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:92:09:9a:ce:ca:10:f1:8d:91:f6:f5:32:
                    70:72:93:15:00:0e:94:fb:65:36:28:8e:19:20:1c:
                    0a:cf:f7:45:bf:bd:f1:2c:c2:34:85:a8:ca:a6:a4:
                    76:99:78:b7:01:eb:6a:b8:cd:90:7b:9d:25:b3:e2:
                    fd:a2:44:4e:4c:5a:98:94:6e:46:e4:86:29:11:76:
                    0e:e9:bf:8d:51:f9:ca:2e:03:93:07:78:6a:63:bf:
                    13:0e:1f:a8:fd:61:49:f1:83:f4:a7:2b:39:0b:cf:
                    7b:6d:03:25:37:b3:5a:44:f0:12:f3:b7:da:1f:03:
                    ea:31:d9:d7:62:76:1a:2e:15:be:1b:e6:e9:47:36:
                    42:42:f1:61:e8:b8:41:9b:8f:10:98:34:e8:e7:d8:
                    dc:b9:4d:93:60:d0:32:41:2a:66:79:3d:6e:e7:18:
                    f7:86:9c:34:66:9d:e0:bc:62:d9:41:a4:a5:0e:c0:
                    03:54:cb:55:de:c8:17:f0:4a:d8:b9:e1:1a:62:91:
                    7c:67:89:bc:30:0e:6a:2b:cb:7f:45:b9:31:2e:13:
                    61:cc:7a:ad:d3:e6:04:a7:9e:8f:10:f8:1e:6d:23:
                    f3:38:b4:03:59:82:65:0f:8c:4e:08:5b:61:f8:1b:
                    05:fc:fb:d7:24:c8:5c:a3:18:eb:08:06:0f:1f:ec:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:00:A5:90:4C:D1:4B:C5:EB:AB:0C:DB:00:D2:4A:15:2D:CF:73:0A
            X509v3 Authority Key Identifier:
                keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bf:1a:30:e5:e1:7a:0c:80:c7:c6:85:1a:bb:6c:fa:8c:7a:
         9f:b7:4e:74:16:a0:25:0c:92:d3:2e:6d:3d:ab:4f:43:e6:a6:
         7a:16:7b:c4:82:58:9b:ff:d7:45:77:cc:b0:fa:01:27:08:1a:
         60:58:af:79:59:f5:ca:f9:0b:ee:ca:41:84:c6:06:69:3e:c7:
         30:f9:2f:5a:69:7d:12:6d:ad:8f:f4:1f:fe:e0:81:ae:a9:92:
         11:4e:b0:5a:75:9d:7f:6e:3e:7e:9b:75:09:fe:b1:87:1e:4f:
         a6:f1:60:4d:10:a9:86:67:67:94:82:f2:87:d8:01:37:cf:85:
         7c:94:d8:be:06:39:e4:cf:69:e6:0d:f4:04:0e:20:80:92:78:
         53:c2:b6:2c:15:c1:c6:64:72:14:76:84:55:6e:54:4b:79:60:
         f1:78:0b:84:3d:ef:44:c8:66:f1:4b:80:8b:d2:3f:fb:68:94:
         bb:13:ee:6e:89:f9:a2:22:6c:79:9c:4b:42:23:eb:0f:28:4e:
         a4:28:e7:75:e3:bb:91:70:72:33:00:8c:dd:bc:49:ac:57:77:
         54:c8:6b:46:de:09:19:75:36:eb:15:1d:51:0c:e3:e5:48:85:
         61:54:44:69:84:67:04:13:3b:2a:8f:22:28:43:7b:42:c8:20:
         75:47:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----