Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          AVSwAALrJ+LP+6jB7yG4pc51IXSmXlwwqcdF6tTqNyQ=
Subject key identifier:   63:4A:2C:74:D3:F7:7A:DB:AC:D6:31:4F:11:D9:82:69:34:9C:36:39
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       01962F74EB068CE23C04A5D552DB9F4227AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          102A
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
                          2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
                          3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: mFL16EvypXxd5D9KWBLa4UCgSW6iv2yzvhTnPQ2M4A0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:eb:06:8c:e2:3c:04:a5:d5:52:db:9f:42:27:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=634a2c74d3f77adbacd6314f11d98269349c3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:6c:f4:d8:b9:6d:73:f6:bd:6a:70:40:21:
                    b1:37:ae:88:90:95:91:e5:0d:f9:b2:3d:8f:15:d6:
                    76:3c:8d:0e:c5:69:81:f1:f8:ac:b4:05:cf:f5:f7:
                    df:6e:ad:cc:9f:65:d6:fe:c4:02:58:8e:26:48:14:
                    6f:14:5c:e5:d2:2d:d3:96:a2:20:5b:8d:cc:99:2b:
                    ae:8a:17:17:c4:43:f2:65:eb:f5:0c:72:34:74:b3:
                    06:6c:1e:e6:29:3a:5b:ef:b6:e7:c4:7c:a7:a1:67:
                    b6:20:fe:a5:f3:5a:5c:73:44:f1:e1:49:c0:c1:74:
                    5d:11:4f:80:68:a4:ed:04:5f:c2:db:7e:70:89:d7:
                    d8:f7:6c:3a:fe:4d:73:e4:d3:d1:1e:af:ba:81:c6:
                    da:73:92:18:40:7d:ae:e4:d2:10:9b:4f:15:eb:b8:
                    8f:cf:5f:97:15:5e:51:02:e2:d1:56:7d:17:dd:44:
                    91:dc:53:50:d5:5c:23:a2:03:82:30:df:eb:52:c8:
                    12:97:d0:5e:33:0e:38:ca:ed:47:fa:7f:d9:6d:8b:
                    31:38:19:07:07:d0:38:74:13:ef:3e:b7:34:0b:64:
                    48:89:ac:f4:00:0b:3b:41:16:d0:20:b9:c3:7d:9d:
                    9f:1b:9f:1a:55:a5:98:ee:d5:08:d9:04:76:42:f5:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:2C:74:D3:F7:7A:DB:AC:D6:31:4F:11:D9:82:69:34:9C:36:39
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:ec:0e:33:31:c6:6b:a6:0c:02:0b:bc:bb:33:59:44:49:
         55:d2:0a:c5:3b:b5:39:98:8b:dc:81:f8:72:59:99:5f:10:2f:
         2b:85:3a:ac:6b:6f:84:75:41:5e:6d:52:b6:35:8d:59:ec:6a:
         91:7f:d2:01:36:44:56:78:b2:f3:e5:1e:ce:35:1d:6d:26:ed:
         82:5e:d6:92:9d:7d:da:a5:6b:a8:be:9d:7f:e2:99:11:9c:d9:
         c3:01:2d:4b:17:de:63:d5:d3:40:c8:b7:d8:a7:48:90:7f:3d:
         50:3c:bd:70:8f:78:11:7c:d1:7c:9b:d3:b8:30:87:73:2f:bd:
         3f:36:37:38:95:6c:7f:4f:71:1b:e4:d3:3e:3f:21:60:f8:a6:
         b2:28:89:50:02:f6:c7:0a:41:50:8f:b7:64:33:e6:c9:6a:6a:
         38:84:30:6b:c6:33:72:18:7f:44:9c:74:c0:bf:72:92:8d:56:
         b3:b4:33:f8:9e:cb:dd:1b:63:c0:14:c2:8a:0b:42:34:da:22:
         17:9a:67:00:45:b7:ce:13:d5:e1:cf:01:06:86:5a:d3:a6:97:
         15:32:5f:43:19:1b:73:37:5f:a3:fe:96:50:b2:a3:d5:3b:7f:
         84:bb:61:a0:8e:1d:51:5c:e7:f8:bd:58:c7:c7:c8:36:78:98:
         98:8c:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----