Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File:                     ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier:          Jxo42relpE7+kdlXfsuZ3TYjO4E3ev37dofap3gTtOI=
Subject key identifier:   26:99:D4:64:3E:4C:59:CB:BA:C1:80:A8:BA:66:61:1F:C9:02:97:B1
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer:       /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial:       01962F74951B4C9C775825C95E25DF05D550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
                          2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: 6y21fnMJFGwzuH/jBGTugNYp7bb81vIi/xdIMeJDHL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:1b:4c:9c:77:58:25:c9:5e:25:df:05:d5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=2699d4643e4c59cbbac180a8ba66611fc90297b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:74:4b:2f:76:dd:64:a9:93:f2:65:c4:97:
                    cb:fb:69:99:03:6c:8f:fa:ce:b3:e3:ab:7b:33:f8:
                    11:9e:68:10:52:48:1c:16:7f:3d:ec:25:8d:ca:37:
                    67:87:68:3b:99:54:ff:5e:00:a0:d2:4f:55:5c:2d:
                    b2:8e:85:ad:e1:9d:97:3b:2c:e6:08:c5:d3:ad:d0:
                    48:32:60:0b:16:1a:41:f0:15:f2:8b:00:e0:83:70:
                    25:8d:f6:ef:d8:1f:30:2c:5a:0e:97:1e:e2:e7:fb:
                    d1:32:3f:42:50:29:14:e6:80:6a:6e:d9:9f:95:1e:
                    58:c8:90:3d:5f:7c:fa:b5:3c:54:41:a5:58:0a:5a:
                    8d:c9:a9:a3:c5:83:46:96:3f:a4:9d:5d:b9:49:6d:
                    02:79:5d:9f:49:72:54:82:72:74:56:66:52:2f:fb:
                    d5:1d:1d:f8:0f:b4:34:46:b1:ef:6a:1e:92:cf:a5:
                    bd:de:27:24:29:96:ac:0a:77:98:f6:df:be:ce:30:
                    c9:3d:90:04:6b:43:b1:33:a9:a5:9a:d6:e3:51:05:
                    ad:3f:83:6c:8a:f9:b1:8d:ef:87:8e:c1:a5:d3:8a:
                    b2:c5:dd:b0:e6:e6:a5:75:96:7d:ad:d8:5a:45:73:
                    20:6f:97:66:84:71:dc:9a:f2:0f:0d:57:92:70:fb:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:D4:64:3E:4C:59:CB:BA:C1:80:A8:BA:66:61:1F:C9:02:97:B1
            X509v3 Authority Key Identifier:
                keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2a:6d:5d:fc:65:47:bd:61:0a:9f:9f:e4:2c:a4:d7:d1:32:
         63:bb:40:5e:45:80:ad:2f:84:02:92:c6:9e:ee:d0:93:78:95:
         ba:2f:77:44:86:a3:f7:59:00:ae:37:c8:92:0e:46:3e:bd:2e:
         41:5c:1b:e2:fa:8f:3a:3a:56:39:a4:77:e9:4c:b5:ae:0d:e2:
         40:71:10:ed:52:78:ed:31:59:3f:8e:83:05:2e:44:9e:5d:b0:
         02:a1:c6:6e:3d:02:b0:64:7c:3b:15:97:7c:01:d1:5f:0d:0b:
         26:2e:a5:87:b1:bf:29:21:58:22:24:c6:aa:f5:1a:dd:68:19:
         b4:1d:c6:ec:c9:99:e7:3a:9e:63:97:b5:4d:fa:80:4a:dd:05:
         70:45:df:43:02:4e:fd:19:38:51:82:da:6a:61:55:48:34:4e:
         6f:68:05:34:31:a1:56:69:fd:f6:f8:d5:f8:ea:0d:95:f2:d4:
         4f:15:b6:c4:99:b8:b3:72:d3:5b:83:c4:cb:c7:d3:e9:d0:54:
         20:c3:9c:3e:24:f6:33:7f:e1:be:ae:0f:7c:21:b7:33:85:bb:
         6d:05:e2:c0:80:70:b4:26:c9:fd:38:51:31:52:46:10:db:74:
         c2:17:ee:9a:78:65:7a:36:63:b1:91:02:97:ec:61:24:3e:fa:
         8d:00:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----