Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File:                     AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier:          TVudH6CFDbkQ/b70mo6zP+YM0I+7Gul+TfXCRF3iJXM=
Subject key identifier:   FA:EA:7A:29:4B:9F:A2:45:C1:74:BE:B9:75:09:6B:32:62:07:C5:49
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer:       /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial:       01962F741BFD3ABD8B7E65AA3201208FA019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number:          0F65
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa (hash: bndS1Tzx6VzHh/lOs3pK1BLzPGIXQ0EzQwN4Ak3MXSs=)
                          2: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: Nb3aPgzLjRCeUE/Do7Wo8h8SYAgAIS0i9B9pnqZBBcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1b:fd:3a:bd:8b:7e:65:aa:32:01:20:8f:a0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=faea7a294b9fa245c174beb975096b326207c549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:0d:0b:aa:58:f4:d7:8f:36:c8:da:ad:d8:
                    e3:da:75:3d:75:38:05:c9:75:db:5e:3d:47:64:7c:
                    50:b4:11:be:71:90:42:37:97:74:fa:3a:89:fa:16:
                    a5:e0:33:db:16:38:25:40:f3:18:be:31:0c:4f:31:
                    b6:66:44:55:64:88:df:23:ab:27:67:63:d9:3c:c6:
                    e0:22:63:d3:63:ee:06:47:79:0d:7c:f2:e1:6f:fd:
                    13:52:70:10:3b:0f:f8:35:3d:fc:78:bd:ac:c3:17:
                    84:74:2f:05:0e:24:e3:8e:d7:f8:a7:d7:64:28:5b:
                    4a:ba:c5:0b:4f:89:7b:d7:5c:45:4a:a2:95:b8:9c:
                    46:69:9c:45:fa:30:c6:62:ae:2d:19:16:8a:d8:4d:
                    07:7b:58:6e:22:5e:af:b3:ff:ce:48:f3:ca:e3:31:
                    b0:df:65:18:c8:7f:27:59:d6:5f:5d:52:79:cc:e9:
                    b5:8f:51:c2:6c:fd:13:1b:b0:90:18:41:4e:96:4a:
                    9f:e3:39:1a:d5:e1:d7:d4:6b:2c:1a:15:2c:a8:92:
                    a9:6a:41:df:72:d9:46:aa:e9:9d:bd:58:e5:41:70:
                    f4:c0:0b:cd:d1:f8:9b:78:a0:5c:59:1a:a0:6a:ea:
                    22:75:3a:2a:13:e9:5e:b2:6f:4d:2f:4b:b9:5c:ec:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EA:7A:29:4B:9F:A2:45:C1:74:BE:B9:75:09:6B:32:62:07:C5:49
            X509v3 Authority Key Identifier:
                keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:cd:b2:27:df:1d:40:66:08:de:03:04:2e:e0:4e:b8:62:
         f0:32:2f:1e:b4:f8:6e:8f:5a:27:64:23:ba:c2:44:99:02:0a:
         6f:e1:2d:0a:b5:43:f5:6b:c5:bb:d1:3e:a5:77:80:d1:59:32:
         29:09:e8:ac:20:96:05:42:93:43:49:a2:dc:d2:8e:f3:8d:47:
         51:14:07:74:cc:5e:d0:de:c2:f1:bd:83:93:bc:29:81:a6:f9:
         10:c4:fd:da:44:e3:cf:24:25:fc:62:b3:dd:30:08:5e:02:b4:
         41:bd:7e:5a:8b:85:f2:ac:8a:ac:78:18:2a:13:1e:2d:0c:7d:
         e6:5d:e6:7e:32:99:f7:30:17:78:ca:4f:25:38:c9:53:0e:35:
         f8:4e:51:2f:76:4c:3d:91:a4:b5:af:1c:58:38:93:24:bf:25:
         53:3b:af:26:3e:fd:63:ed:18:d5:82:98:f6:da:b7:d3:eb:7b:
         eb:73:e4:f5:a0:23:30:d5:45:de:89:72:ce:4e:d1:7e:b3:11:
         9f:96:dd:ba:9e:cf:e5:3e:75:12:46:74:07:a9:ec:dd:3c:25:
         3b:3c:ba:ec:85:0e:19:0b:b8:f9:ab:4f:5c:af:e0:c8:f4:40:
         68:db:9e:34:67:63:7d:e6:d2:8a:73:17:36:6b:75:bb:a7:bd:
         17:4e:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----