Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File:                     aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier:          zt5QGTWvYT+yBsK9AMRA8H1fC0UeLG9ucaT2hotYhL4=
Subject key identifier:   39:27:58:E7:8A:BF:3D:8E:B3:C7:50:AF:73:60:61:0F:D4:99:7D:5A
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer:       /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial:       01962ECF9DE9EAB24F072C0937753C18FF8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number:          08FB
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: /1SBg1YLcP+cMatl0LEZ9wobPR9cxJKveEZceCv0UBA=)
                          2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9d:e9:ea:b2:4f:07:2c:09:37:75:3c:18:ff:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=392758e78abf3d8eb3c750af7360610fd4997d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:fb:ed:6e:86:e1:1b:37:5b:96:f6:59:40:
                    b1:77:73:49:8c:67:81:13:1b:ab:b4:b7:9e:35:6b:
                    cd:4a:22:70:d7:45:f1:00:24:34:35:07:96:3d:c9:
                    83:49:15:25:13:ac:51:0b:a5:a7:cf:47:d2:1b:a0:
                    73:90:80:a8:98:3b:63:b0:5d:72:96:b3:88:e8:6d:
                    f9:97:49:1c:e0:c9:0d:e7:3e:ec:19:12:8b:ac:83:
                    b9:26:ae:66:25:72:96:67:24:c2:39:b4:80:ab:7c:
                    c7:e8:32:83:2c:f5:52:2a:ff:fb:66:ea:c4:d5:11:
                    9d:4b:12:5e:a0:26:78:b6:11:9a:09:3a:6f:47:c8:
                    a6:74:45:b5:79:71:e4:af:1c:87:1c:c3:ec:6c:50:
                    99:63:62:39:96:dc:22:ce:63:19:0c:32:99:e4:2d:
                    5f:97:bb:63:63:27:39:18:01:d8:26:ba:cc:82:54:
                    30:4d:04:df:d2:30:a2:42:79:bc:79:4a:de:46:e6:
                    2f:64:59:59:e6:2b:55:a4:26:cb:fb:21:47:b6:31:
                    2e:41:26:ce:6f:1f:af:a7:9a:55:39:15:24:11:d1:
                    53:5f:49:08:7a:f6:68:28:0f:f8:41:92:ce:a2:7b:
                    ff:27:73:ab:21:5d:5f:95:4c:aa:7e:99:5a:4e:b2:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:27:58:E7:8A:BF:3D:8E:B3:C7:50:AF:73:60:61:0F:D4:99:7D:5A
            X509v3 Authority Key Identifier:
                keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:73:d3:ad:e0:27:e1:c1:b9:7d:5b:b5:36:0a:6d:a0:24:
         da:45:51:ff:4c:3d:7d:15:75:d3:17:c0:09:8a:65:53:2f:84:
         c5:40:8c:4e:34:1b:7c:9d:58:3e:d2:28:7f:93:44:87:92:58:
         a8:7c:69:44:a4:ff:9d:59:b2:d7:8d:59:84:84:0b:4a:d7:f5:
         0d:2e:3c:6c:2b:f7:bc:ce:d0:31:4e:c3:9c:87:f3:29:b9:a4:
         44:86:db:80:cf:b8:c3:f3:44:ef:8e:4a:af:11:6c:1e:bb:8c:
         e6:4e:fb:fc:15:c6:fc:b0:fe:62:91:09:be:a6:68:e7:76:e1:
         9d:35:93:74:59:15:5a:27:f7:be:14:bd:2a:a9:1a:6e:27:70:
         41:33:44:a9:48:33:e4:c9:c4:7a:86:8f:73:48:31:cf:55:ae:
         6d:cd:3e:7f:5d:21:51:ef:57:88:96:6c:0f:15:92:d4:a1:91:
         f9:86:85:f9:49:b4:0e:05:8e:23:bf:48:91:0a:6d:96:72:30:
         83:56:cd:5e:7b:c9:5b:7a:09:6b:19:11:c6:37:14:93:2e:db:
         fc:fc:f7:a8:1d:42:6e:2b:38:d2:f5:1e:3d:25:e6:24:21:15:
         cd:b1:26:2e:b8:87:2e:c7:66:e0:d3:0a:50:cd:28:37:6e:5c:
         e6:ce:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----