Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File:                     afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier:          hqzgeoUXg2FwWV2ms4V49Fo2HK+MWJXHuQ4rkJaZQRI=
Subject key identifier:   4E:1B:B2:51:74:8D:07:39:0F:78:9F:7E:CB:95:82:12:8E:9F:63:55
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer:       /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial:       01962ECF57546F6DE8187898E9F1054D6AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number:          0E6B
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
                          2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: 3BYIxIV7INbLvB8gkknsoTgOHV3izBCrrycoqM+toKo=)
                          3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:57:54:6f:6d:e8:18:78:98:e9:f1:05:4d:6a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=4e1bb251748d07390f789f7ecb9582128e9f6355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:4f:40:e2:55:6d:db:7e:5d:dc:82:3c:56:
                    4d:fb:b2:a3:96:06:e6:ad:f7:4d:9e:d9:26:7f:86:
                    ba:a0:70:35:8c:ac:4c:e7:7e:06:34:b4:31:57:7f:
                    02:4b:28:95:57:5b:13:9e:69:b2:12:8a:bc:e5:ac:
                    67:21:56:72:6f:6e:a4:e5:62:bd:8a:6b:61:c4:da:
                    c7:4e:05:fc:68:66:e8:e5:69:53:dc:23:27:30:16:
                    10:68:76:6b:2e:19:52:f9:4c:3d:bc:a3:2f:21:4d:
                    60:6e:a6:77:b8:97:d7:39:83:94:23:5b:3d:fa:ea:
                    68:16:a6:eb:c2:8a:33:42:75:55:d3:95:e8:6c:66:
                    df:ee:e5:0b:d0:47:22:7b:ef:d0:65:7c:c4:24:4e:
                    d4:cc:55:ef:c0:f6:e2:ec:ff:78:48:44:eb:13:7d:
                    8b:ec:d9:00:95:05:e0:d3:55:fc:94:4d:86:cc:0f:
                    7d:06:6a:06:9f:18:a8:ad:f7:2c:81:97:dc:59:b7:
                    9d:a6:33:55:35:21:f5:b4:19:80:39:68:63:06:f4:
                    c1:5e:02:db:55:91:44:2e:07:1f:be:db:f0:2e:02:
                    0c:ea:1c:98:e6:f9:66:9d:20:8b:6c:48:5b:0c:fa:
                    6e:36:e7:f8:e7:53:65:49:dc:e8:f4:6b:a1:c9:d5:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:B2:51:74:8D:07:39:0F:78:9F:7E:CB:95:82:12:8E:9F:63:55
            X509v3 Authority Key Identifier:
                keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:de:49:99:1e:cc:3c:0e:a8:08:2d:0e:d9:44:2d:13:6d:
         ed:4d:b9:87:33:e3:1e:1d:5d:f6:bd:5f:06:50:8d:31:2c:bd:
         d3:e1:48:fe:d5:49:3e:02:a6:e3:9b:58:b6:77:00:d3:03:b7:
         e2:58:89:b9:d5:e9:47:bd:d5:ff:c1:7a:50:bd:51:fc:bc:20:
         2e:34:6d:8d:44:50:0e:b0:82:4a:63:57:f9:c7:2d:4d:9b:a5:
         ab:b2:33:59:5d:05:05:99:6a:4f:60:a1:ce:05:ee:a1:34:aa:
         0b:14:75:c0:1f:60:25:a4:5b:f0:c6:4d:68:39:8b:2b:f4:b4:
         8e:d5:66:e6:18:43:72:88:41:0a:48:ad:18:16:c8:e5:62:56:
         ad:70:4a:ab:c8:f4:3e:fa:dd:04:61:45:7b:9e:4e:70:86:aa:
         62:49:a2:ba:c8:8f:28:88:69:45:f0:ba:db:f1:cc:6e:4f:57:
         24:4e:33:db:23:be:48:00:3a:04:75:06:02:8e:e4:62:0b:7d:
         44:ed:a7:45:60:bc:e2:b2:0d:65:b4:23:70:af:60:ab:2e:25:
         56:05:6b:91:de:30:19:a2:c7:5e:c6:c2:fc:a5:9f:39:aa:65:
         6b:9a:da:f0:eb:59:52:63:04:ff:13:0f:8c:78:d7:d9:06:98:
         4b:19:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----