Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File:                     AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier:          BYKWn+VUtVssqty60jE5uygQLY+VBzSC6sy6KRrBmi4=
Subject key identifier:   24:76:00:93:D3:99:51:66:53:2D:42:D4:2D:A6:08:E4:52:55:1A:CA
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer:       /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial:       01962DF3F3B556768B511226B7B2669F8785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number:          13CB
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: 83nqN7fWnm08pTJCf6F2CQVEr6KxwJ3S6c78h8Aynls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f3:b5:56:76:8b:51:12:26:b7:b2:66:9f:87:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=24760093d3995166532d42d42da608e452551aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:74:83:6c:07:6d:6d:37:a0:7e:06:bd:e3:
                    8a:85:38:5b:f9:de:5d:e8:d4:cc:84:46:5d:a2:fe:
                    dd:d4:b7:3a:46:20:cf:37:51:f0:98:c7:b2:9f:88:
                    81:6c:88:21:61:fa:05:84:b3:7f:09:0e:a6:ec:94:
                    f8:eb:0e:c0:09:50:50:ba:97:5a:03:35:e0:c2:34:
                    19:ba:7c:4e:26:7d:1f:b3:3a:c9:19:66:36:14:72:
                    5c:01:d7:23:38:f6:4b:cb:e0:b7:17:3f:54:6a:9e:
                    d8:cc:45:12:2e:4f:00:b6:f6:df:62:4d:c2:58:4b:
                    f9:18:f1:2e:61:34:a0:08:6d:79:49:58:ad:f3:93:
                    c2:07:31:a4:aa:9b:50:fd:74:f8:ff:21:f0:23:5c:
                    7a:73:59:c3:b8:48:58:b2:90:78:5b:31:82:58:ee:
                    52:9c:b6:62:bf:59:70:9a:e1:b5:f6:64:e4:27:ca:
                    54:54:5c:44:59:e6:3e:26:ed:ce:dc:c4:a3:0d:fa:
                    49:f3:65:c8:18:a0:26:1b:71:f3:a3:0d:1d:c8:7d:
                    7b:f8:aa:f0:62:bd:dd:75:14:e2:6c:6e:01:34:e1:
                    af:bb:26:dc:5a:24:f5:14:bf:61:42:4b:4c:5c:b1:
                    be:43:ac:ff:21:2f:cd:d4:8a:90:2e:68:72:d2:39:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:00:93:D3:99:51:66:53:2D:42:D4:2D:A6:08:E4:52:55:1A:CA
            X509v3 Authority Key Identifier:
                keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:83:38:14:d6:37:14:1a:be:9c:32:6d:5b:84:2e:59:3a:c9:
         8c:d4:12:07:3a:4c:50:ce:ed:9d:cb:6e:b2:f5:f5:80:4f:92:
         53:58:d5:87:c2:cf:41:8f:86:f7:e7:70:15:94:9c:cc:fe:24:
         31:2a:13:af:e5:49:1d:ee:81:92:fd:d3:7c:a1:fe:91:bc:91:
         45:76:a0:c0:b8:11:56:4d:9b:68:15:da:3d:1c:84:42:ff:a7:
         2c:b3:63:99:0b:e5:dc:1f:c6:04:8b:f9:39:09:26:18:57:ac:
         c8:67:e4:39:c7:de:62:b5:13:95:13:18:c0:61:d5:cb:07:3f:
         0f:65:24:ef:42:ad:10:2e:1c:33:12:87:ab:7c:8b:68:d9:a9:
         33:84:f0:03:12:3e:e4:66:2e:8c:b8:a1:6b:b4:56:28:ea:4d:
         07:b7:48:ff:ca:ba:44:00:aa:db:92:69:0e:eb:37:9d:4b:31:
         41:94:da:42:b4:ed:d1:33:3c:3c:ce:a6:c3:99:5a:36:71:ba:
         c8:5b:a1:1a:dd:ca:49:4a:89:38:89:4e:66:8a:14:37:b3:9d:
         df:4c:de:91:e9:53:d5:ca:b4:4c:1f:60:b3:84:fe:56:52:15:
         b9:98:67:6e:70:52:28:a4:34:19:c0:c4:ac:8a:f1:0b:73:73:
         9a:ac:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----