Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File:                     aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier:          jqhGtarctoVYq/w5AXyTJXaxkbndmj3W718C0FxAqs0=
Subject key identifier:   94:4F:78:E6:6C:F5:FD:56:24:AE:AB:24:B2:94:D9:F7:E7:AD:72:08
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer:       /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial:       01962F3D58A9C84670CD0808FC2FC6C1F668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number:          0F59
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: MpXV+0ZYfVhNm9X30ItWHrJOifrU8fXEJc2+6kHAW+Y=)
                          2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:58:a9:c8:46:70:cd:08:08:fc:2f:c6:c1:f6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=944f78e66cf5fd5624aeab24b294d9f7e7ad7208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:35:74:f7:e6:bd:27:11:e3:ed:80:30:7e:
                    0d:d8:ca:33:7d:ca:30:3d:65:0e:49:64:be:0c:e0:
                    06:c5:3b:56:40:6a:fe:df:da:cc:af:d3:f7:57:27:
                    53:f7:a8:b6:4f:b8:08:52:a6:c0:fe:93:a8:11:67:
                    2e:95:dc:db:94:fc:d5:79:b4:db:fb:df:89:2c:cc:
                    9e:ef:9e:18:2e:12:5e:57:ed:1f:64:91:ae:b3:e8:
                    dd:f8:55:ad:bc:56:28:88:25:86:11:fa:d1:b6:c2:
                    39:30:c1:40:5b:a3:d3:82:93:b7:24:1f:e9:15:ff:
                    c6:d7:c5:6e:83:01:0b:a6:68:1d:a8:3e:fb:50:dd:
                    46:01:71:20:36:36:a7:77:cf:cd:9b:d0:89:7a:a4:
                    d1:b2:03:da:3c:60:b3:d6:e2:a4:61:b5:7d:9b:30:
                    de:aa:bd:93:d7:2b:f2:4e:35:ec:b3:46:11:38:36:
                    bd:5a:a3:3d:6b:67:ac:3d:f1:14:11:10:6c:66:de:
                    77:54:f4:13:17:d2:61:db:eb:14:cc:75:4d:7d:4c:
                    2b:25:70:98:2f:dc:16:39:fb:70:72:05:6b:cc:db:
                    11:62:6e:c0:79:b4:89:3a:81:67:dd:46:3e:b1:9a:
                    86:ea:5e:f3:d3:db:c5:c9:44:f1:96:fa:bf:c9:4e:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4F:78:E6:6C:F5:FD:56:24:AE:AB:24:B2:94:D9:F7:E7:AD:72:08
            X509v3 Authority Key Identifier:
                keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:89:17:30:35:7c:3d:fd:4b:76:ca:92:e5:07:fd:26:2b:2e:
         e1:7c:50:b1:f9:b1:50:08:ef:3f:11:47:4b:36:f9:ba:0a:9e:
         6c:b3:0a:97:39:b4:13:39:30:76:28:69:3b:27:2d:8f:94:ae:
         83:db:d3:41:9e:3f:dd:7b:58:b7:0c:3c:40:ac:60:c5:9e:0b:
         a1:5f:67:be:52:f0:58:0a:99:d0:e4:0f:e1:96:35:c5:5f:98:
         50:dd:d2:fe:f8:6d:5c:56:53:90:7f:ac:ef:b8:0f:47:fa:f3:
         33:ac:db:23:1f:52:bc:c6:20:3f:f2:c5:c5:11:79:5b:3d:4d:
         46:fb:e5:89:57:7b:f2:8f:a1:dd:e6:4b:c2:81:0b:29:66:3b:
         53:39:48:27:92:65:85:12:9a:d5:f8:c9:7e:77:38:4d:2d:ec:
         b3:13:ff:b1:be:5a:7f:cd:47:e7:71:18:1b:b6:19:da:d1:25:
         65:ce:34:e6:b1:41:69:8a:5d:a4:db:c4:c0:30:a5:0a:1c:5b:
         d1:39:ee:dc:4a:e0:fa:3a:42:e0:ec:0f:35:1a:56:17:32:c0:
         30:99:17:7a:21:12:f8:c2:6c:76:cb:4d:92:c9:f1:95:0a:0e:
         10:4e:5e:ed:6f:43:a7:61:f5:52:5d:41:b2:a5:54:de:d2:f2:
         7e:86:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----