Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File:                     aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier:          1FDxLY7mu3kn+NmjQ+682q1h5513tmC+YBJPbBdrv0c=
Subject key identifier:   4B:6C:4B:04:B1:63:A5:38:99:18:26:10:BD:E8:35:4E:90:58:CA:24
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer:       /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial:       01962DF44B3B06681992311D1C2F6A355E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 1-wEZKS5ROln113VYj-rYIVv3HMw.roa (hash: zd3NK5lHmlo7IZCKvHCkj4ue/ewdTG041qEpUCwPhSg=)
                          2: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: sowoYctFt5PfOs9XEXKkzcyvWxgQeseyg8175QfYTbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4b:3b:06:68:19:92:31:1d:1c:2f:6a:35:5e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=4b6c4b04b163a53899182610bde8354e9058ca24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:ab:90:64:8a:7a:ff:6d:ad:ab:88:95:b2:
                    3f:5e:38:3a:fc:cc:82:a3:bf:68:7a:fa:8b:30:f7:
                    6a:68:8c:68:fe:61:13:db:a0:a5:41:6e:b4:45:28:
                    bf:f1:90:ae:57:d4:d8:43:e9:99:28:e7:e9:b6:c4:
                    5e:3c:70:f0:53:b9:03:04:0b:18:b3:1e:4e:36:72:
                    b6:31:f0:81:d1:b9:46:fc:ab:a5:fe:06:c0:5c:41:
                    8b:ad:9e:70:76:3b:24:62:54:27:01:25:99:bd:4f:
                    e6:70:67:60:73:1d:59:f0:88:69:ee:99:07:40:fd:
                    13:43:4c:19:eb:58:27:b6:6e:ca:d2:bd:bd:9e:a3:
                    56:33:18:0c:66:6e:89:b9:4f:e8:4c:29:04:66:03:
                    48:0a:69:6e:86:0d:ce:6b:7f:d4:e5:ea:ca:a3:db:
                    a8:b7:a8:eb:b8:aa:71:a9:83:c3:9b:9f:32:3b:ec:
                    26:85:ac:e6:a5:2c:84:d7:2b:1e:df:39:53:51:15:
                    c6:65:4d:81:75:04:7b:39:dd:80:6e:1d:ed:86:bb:
                    06:5e:5d:6e:60:01:92:dd:48:bf:ab:ac:43:9b:52:
                    db:42:52:64:5f:83:47:db:98:2c:25:b5:87:a1:10:
                    d9:79:82:09:db:05:7f:50:fa:fa:38:53:9d:c6:f8:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6C:4B:04:B1:63:A5:38:99:18:26:10:BD:E8:35:4E:90:58:CA:24
            X509v3 Authority Key Identifier:
                keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:cb:62:06:50:2d:67:b6:30:91:96:b5:ae:4a:54:34:2e:
         47:13:d7:fb:b7:40:94:f0:87:0c:d6:43:ac:86:74:9f:1f:d2:
         ec:08:22:35:4a:1f:df:76:0c:f9:28:de:4b:86:fd:5c:a8:af:
         98:c5:bf:50:fd:a9:3e:1e:87:7c:d5:f5:95:61:02:31:7a:e3:
         d8:f9:ed:c3:77:73:84:31:59:33:81:13:d9:5f:46:bc:6b:3e:
         97:30:6e:cb:c0:fb:70:45:e5:89:e1:01:5d:96:d8:0c:2e:ae:
         09:97:ba:72:89:bd:a4:0b:5b:94:b8:47:88:bc:9e:2e:14:1f:
         c4:20:fc:3b:63:d8:4e:5b:74:5f:b1:14:e6:f9:3e:a6:23:e9:
         fe:b8:1a:5a:a5:98:8e:ca:b9:3a:31:e6:29:23:09:fb:97:5e:
         d9:9b:91:99:c8:f5:c5:f2:53:70:85:bc:d9:57:98:a9:90:92:
         aa:55:58:40:af:4c:16:08:8e:61:f1:39:5f:84:00:4c:7b:88:
         c4:c0:12:1a:32:c0:47:b8:2e:eb:93:e6:af:e2:cc:29:db:aa:
         75:99:dc:53:db:ea:0a:39:27:ca:8b:6c:a3:2a:26:6c:f4:d2:
         c3:8a:36:81:bd:06:e0:7d:87:0a:71:d0:32:63:a5:3f:06:d9:
         f7:0b:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----