Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File:                     aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier:          RLhoX3ny2nHGtQhIhLn7HcnFvjwsOQ71KnPoWq+rwBY=
Subject key identifier:   E2:76:95:ED:3C:60:1A:A9:47:6B:96:DB:B1:0E:1F:D6:64:DC:1B:B0
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer:       /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial:       01962E99B1544A6466C832AEC523CB2245AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
                          2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: xYas/5+4Lj5uQUZbqDNltHnD7eo+kY1n/+708OfGgwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b1:54:4a:64:66:c8:32:ae:c5:23:cb:22:45:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=e27695ed3c601aa9476b96dbb10e1fd664dc1bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:56:95:2c:95:1d:d3:71:99:fd:a8:fb:a5:
                    89:f7:1b:71:c1:bd:df:64:3e:8f:6c:78:94:a3:9d:
                    c5:03:71:c0:14:fd:6a:8b:0a:2d:46:52:fd:3f:74:
                    95:03:22:b6:85:3b:5f:6f:dd:d3:56:40:18:ae:a6:
                    26:97:59:7e:81:bb:ed:f1:93:f1:26:9b:c3:0b:04:
                    ec:56:fd:49:0f:27:6d:01:75:68:24:52:73:3c:02:
                    f4:2e:ec:b3:a2:ff:54:4c:83:e5:6c:da:4d:9c:f7:
                    ce:fc:96:52:bb:18:58:99:e4:90:8f:9d:b7:ab:f7:
                    9f:88:37:cc:9f:e1:1c:8e:c2:98:75:64:cd:f5:86:
                    99:56:ee:f7:7d:dc:57:4c:43:e5:1d:08:fe:64:58:
                    ed:0a:f8:11:f0:31:22:e8:52:72:e2:80:68:ce:00:
                    d7:03:80:dc:ac:e0:1e:38:b0:da:4c:84:b5:01:02:
                    48:34:be:2e:0c:a0:66:fd:98:fa:9d:7f:c4:53:0e:
                    50:2f:6e:b6:3d:7e:70:ef:fd:f8:b6:a7:2e:89:2b:
                    67:20:a9:c0:0d:b0:ae:28:23:bc:ca:af:28:2a:22:
                    3b:83:3f:ea:4a:17:be:90:74:8b:a4:19:4d:04:a0:
                    70:38:39:23:88:3e:83:4e:f4:92:c7:76:d7:2a:98:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:76:95:ED:3C:60:1A:A9:47:6B:96:DB:B1:0E:1F:D6:64:DC:1B:B0
            X509v3 Authority Key Identifier:
                keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:19:42:e1:40:76:a1:ca:60:85:d9:34:b3:59:a1:7f:36:05:
         04:1e:6a:e7:0c:bf:71:9c:33:bc:27:e9:4e:01:db:4d:86:ed:
         8e:48:24:55:02:10:7b:58:74:52:f6:91:f5:01:cd:f5:f8:f0:
         03:86:7f:4e:20:19:c0:2e:1d:e5:07:48:9b:b8:4a:9d:07:23:
         2f:80:ba:c6:7b:d0:1a:a3:54:50:2b:95:4a:a7:e9:66:02:30:
         ba:bd:ff:bb:eb:ed:e7:25:f5:e7:2f:fc:98:ed:59:68:9e:90:
         de:54:b4:c7:9c:76:dd:59:37:5d:67:13:ea:fc:d0:5a:cc:21:
         b2:1b:a2:ea:18:20:ee:9c:db:b6:99:2a:5c:74:09:fa:44:2c:
         97:c2:4d:0f:b6:57:ee:c2:5a:32:ab:7a:74:3e:f3:4e:d5:71:
         c0:7f:f8:ac:49:71:ff:72:6a:9f:b6:7a:73:af:13:f8:2d:4d:
         84:68:be:4c:40:e8:39:4e:0b:74:7f:79:e2:c1:6a:09:33:d8:
         e1:87:2c:cf:57:c0:de:44:3e:76:e4:91:bb:d8:f8:0f:39:5d:
         ec:20:56:82:dd:07:59:09:53:20:55:04:6e:97:86:03:4a:f9:
         86:63:74:47:fc:46:68:30:38:a7:cc:b1:13:d2:0a:4d:82:33:
         69:07:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----