Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File:                     aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier:          Jc35PuMK0ixSrviLpIzWgYqW9tokVPVJ67mcDnO4w4w=
Subject key identifier:   6A:FA:6B:82:57:FC:28:C9:45:86:E0:19:30:89:6E:A3:07:31:DC:D1
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer:       /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial:       01962F064C271BB97ACADBB83D8D27D77CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number:          02AD
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: Mx+4/0+b+P/BQxLmovnbiWF7q7v64L6xVO1KNqvgmFE=)
                          2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:27:1b:b9:7a:ca:db:b8:3d:8d:27:d7:7c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=6afa6b8257fc28c94586e01930896ea30731dcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:ed:63:f0:02:f5:c8:3d:b6:f7:16:07:51:
                    37:20:af:b4:b8:b9:9d:3b:23:8a:dc:e6:6b:6b:ca:
                    ca:7f:46:17:f6:70:ba:1e:9e:d6:c9:61:ff:6f:58:
                    a3:be:55:a8:c5:41:ea:ee:e9:17:70:45:e5:74:67:
                    e9:6e:49:1c:c9:83:b6:8e:27:fc:0d:ae:e8:ec:1e:
                    0a:b4:a5:fe:78:90:b6:86:9c:60:4f:42:03:ff:ac:
                    86:5e:0d:f0:ea:7f:76:7b:99:80:13:2e:99:d3:9c:
                    76:36:bc:57:2c:cb:f3:9d:2c:90:1a:e4:cf:0e:3d:
                    8c:9a:f8:70:f5:1f:3f:8e:5a:b1:65:8e:88:20:34:
                    88:15:cc:86:fa:05:1f:95:f8:3e:df:1d:21:ac:3b:
                    d0:08:74:ac:ee:29:63:af:b3:46:50:25:b6:f0:2a:
                    35:73:37:45:be:3f:58:86:c2:03:c0:0f:96:f2:4f:
                    76:82:0f:f5:35:43:4e:a3:92:ff:17:b8:da:56:d4:
                    85:24:41:46:06:d6:f6:f4:ec:0e:4a:1a:34:8b:45:
                    7e:90:c9:71:7e:c4:b9:2d:60:b5:6e:dc:0a:a8:41:
                    6f:e8:00:16:e9:cb:d6:25:28:3a:b0:ea:1e:de:f6:
                    f6:fe:f7:e6:2e:51:8f:1f:6e:e9:3f:47:c4:c8:6e:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FA:6B:82:57:FC:28:C9:45:86:E0:19:30:89:6E:A3:07:31:DC:D1
            X509v3 Authority Key Identifier:
                keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:82:a5:6b:9a:37:fe:0e:4a:d4:27:d5:65:23:49:e4:f6:
         d1:c6:db:75:9a:dc:d1:b0:8f:e1:c0:52:f5:e7:7c:3c:74:95:
         a5:00:07:a2:ce:f7:53:0e:5c:7d:29:b0:54:39:b7:f4:3b:ac:
         10:65:40:bd:91:2f:ac:5b:81:61:6b:34:13:bc:12:eb:88:f2:
         d0:dd:0a:c1:04:2f:0b:3a:79:d7:fd:71:e2:eb:02:43:1c:cf:
         11:47:f0:a7:72:c3:35:4e:96:f8:5e:4f:de:94:72:44:2e:fc:
         7b:f0:1b:09:f8:9d:0e:3c:d0:5b:f0:cb:1a:54:7c:44:03:ea:
         35:7b:96:ec:df:3e:48:bf:37:ef:95:4e:51:1d:4f:3a:c6:4d:
         06:3f:4c:68:08:11:a5:ab:aa:30:81:50:44:bc:be:f2:43:04:
         91:93:ca:3e:67:00:f8:ab:79:1c:52:42:65:f5:a3:ad:10:bc:
         cd:32:78:9d:f6:0d:a7:2d:fa:9e:a0:6c:22:df:9c:f5:f7:c0:
         0e:eb:fb:c0:a3:97:65:ae:ac:2c:52:30:96:9d:cc:37:5f:c1:
         66:a1:10:b7:40:96:2a:2e:5c:a1:3e:16:b6:9f:1b:ea:bb:1d:
         6b:25:54:df:31:06:0f:07:2b:c9:45:22:bf:67:7c:82:32:90:
         48:5e:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----