Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
File:                     aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json)
Hash identifier:          kMmIFfO21DdgxXx5ZFGxzlcFEab85sUS9m8UIuwYdVE=
Subject key identifier:   A1:7C:A3:8B:FC:A5:B6:E1:67:88:E8:AD:A5:6E:DD:D2:04:A9:D6:64
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Certificate issuer:       /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial:       01962E98DA8DA83563E8BE3FA27B5D0F8504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
Manifest number:          062A
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: M5V8V3tVJlmCpIMdZWZhBqlhbmxFgn3Y1Rp/ESKHT0M=)
                          2: szxe0DPYsGTMI_tgKM1yaWgLDtI.roa (hash: fjZgmmGMINi/iYDucRgC4NEVBx45QTUkAnBaw6M5XK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:da:8d:a8:35:63:e8:be:3f:a2:7b:5d:0f:85:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=a17ca38bfca5b6e16788e8ada56eddd204a9d664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:42:a1:2b:d1:b1:4f:da:98:10:3c:a0:66:
                    68:32:5e:a2:6c:ba:33:be:22:29:81:65:15:cf:9b:
                    f7:51:77:8e:62:35:ca:c4:82:14:be:a7:fd:44:fe:
                    bb:94:0c:65:f7:49:55:d7:7c:6d:f5:56:6c:d2:a3:
                    c7:b4:8e:b2:19:e4:b0:a6:b0:3f:6d:49:b4:24:16:
                    6f:ec:63:16:97:ec:24:7a:b0:f6:69:7f:03:af:2b:
                    f9:e7:1a:b1:44:d7:30:54:d3:99:01:f5:e5:46:7b:
                    e6:70:ef:a5:ed:86:95:fa:de:3d:86:06:2a:13:fc:
                    bf:65:52:ff:f3:89:6a:3c:79:57:26:e3:b7:62:1a:
                    ae:52:50:47:b7:6c:35:01:14:0a:9e:21:ab:02:a7:
                    46:a8:8c:44:d5:1a:12:49:89:1c:ed:c6:8b:ee:71:
                    33:f7:b5:62:af:3c:66:50:10:bf:60:72:58:57:89:
                    67:45:6f:75:3c:68:e2:7e:dd:05:4f:d7:e7:36:48:
                    81:7a:bf:45:17:af:b6:15:58:cb:0a:e3:3b:ee:1a:
                    e9:2f:35:9d:d6:9a:1c:45:df:af:3b:09:9a:66:84:
                    1a:59:49:f5:71:71:dd:f8:ca:0e:20:2e:a0:1b:fd:
                    e0:6f:62:40:72:82:58:fc:61:00:60:bc:4a:00:13:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:A3:8B:FC:A5:B6:E1:67:88:E8:AD:A5:6E:DD:D2:04:A9:D6:64
            X509v3 Authority Key Identifier:
                keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7e:fe:a7:f0:5f:ac:c3:ac:90:ab:c0:b1:42:73:b9:0c:79:
         4e:6a:a1:d6:75:4d:15:25:c1:14:d2:69:1a:51:c0:78:30:87:
         f7:17:7a:3a:ce:77:c9:f3:ca:10:6f:04:bc:b1:95:a6:30:4c:
         a3:b4:58:84:d2:f3:31:1f:81:07:25:76:ef:b6:28:f5:e7:83:
         b1:29:aa:41:40:86:50:82:0e:c7:36:e6:0f:93:b4:e1:d1:ef:
         17:4d:fc:45:4e:04:5a:aa:db:07:ad:1c:c2:f2:47:b3:ff:dd:
         7d:91:46:43:60:01:17:2c:e4:27:4b:2c:e7:05:aa:1e:49:13:
         d4:5e:11:35:08:ea:76:0e:9c:c4:3b:47:28:e5:90:49:83:f6:
         db:af:93:3e:cd:7b:a4:71:bb:27:a7:39:de:32:ed:b9:d1:4b:
         e3:8a:22:eb:aa:23:f2:8f:c5:66:89:03:f6:73:64:27:bd:43:
         7f:ff:01:fc:fc:11:d4:52:38:bf:7e:ad:e9:3f:56:b5:42:ec:
         81:4a:f2:ee:56:25:5d:96:3a:9c:9a:e8:c5:53:45:18:8c:cd:
         73:95:7a:6e:0e:5a:ea:5f:98:ab:a0:ee:a9:8f:55:67:fd:bc:
         1a:9d:ed:1b:46:93:a0:ea:e1:83:49:d6:a7:46:f0:09:84:c1:
         41:88:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----