Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          acO8Ye8mof/4nDZihzf+wvTtlU2p1YepSSFOJSYXNgA=
Subject key identifier:   9D:73:45:E9:76:6A:19:F7:5B:F7:74:92:F5:3B:49:97:31:74:7F:5A
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       01962E2AF5425D27D5B21C5F3C91E7F15FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          122C
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 0dT9gx4qOXkpqZlNkbev_-uBl0c.roa (hash: AhSSJUvXXS4MCpfi02OS/Sl/WMScliKSAGKKpGr/omg=)
                          2: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=)
                          3: S7cvUB4j_UAWLlorKkQpKplvSek.roa (hash: BzDMJKCxDcsJF5G/pnwJpmaeHc/VSanQaPg+mRpgeIU=)
                          4: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: +CuyV1+rHWuHEuCtRuoUPLVfjV+78hKolrh2j4qIWG0=)
                          5: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (hash: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:42:5d:27:d5:b2:1c:5f:3c:91:e7:f1:5f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=9d7345e9766a19f75bf77492f53b499731747f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:71:c2:fc:4d:3d:19:8c:ac:8f:e3:0c:d5:
                    19:90:1a:12:1a:ba:96:ca:74:ab:87:95:d9:47:91:
                    3e:c0:f9:8f:c3:28:2c:54:ab:d3:87:f7:eb:ed:d8:
                    05:ec:51:b6:0b:42:bc:09:3a:d5:17:8d:17:2c:6b:
                    51:5e:4d:6c:aa:a2:d6:37:d5:4c:1e:af:d7:f2:cb:
                    71:45:91:e1:ce:a2:80:56:8a:25:1b:2a:61:5f:03:
                    88:03:80:f8:17:29:5a:53:77:ca:79:82:41:17:bd:
                    29:0a:93:68:f5:9b:a4:aa:7e:a4:44:be:ae:b4:ce:
                    6a:c0:66:ca:de:45:ae:a4:34:a3:14:3f:c0:3f:bf:
                    02:12:55:d5:21:b3:c8:ce:15:f6:0e:0f:80:76:fd:
                    7b:02:3f:c8:c2:2c:06:73:30:db:95:83:4b:d4:93:
                    eb:56:c6:c1:c6:7c:71:b4:6e:af:7a:9d:ef:8b:09:
                    85:2c:78:87:05:4a:32:96:b1:b9:35:19:d5:79:7d:
                    17:bf:14:15:a1:4b:1e:1e:a3:5e:79:16:34:05:7d:
                    88:50:4d:d3:96:06:8a:f5:7b:3c:07:30:0d:0f:89:
                    2e:88:35:f3:b4:48:44:33:1b:cd:25:ee:a1:6f:15:
                    1f:2f:bb:b4:af:60:58:0f:b9:09:c3:cb:05:1f:e6:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:45:E9:76:6A:19:F7:5B:F7:74:92:F5:3B:49:97:31:74:7F:5A
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:56:26:4a:88:f2:ab:4c:b3:92:53:f8:85:14:a8:f2:4f:ba:
         3f:48:de:9e:bb:84:1e:87:57:82:4a:71:de:b1:ab:55:5f:3e:
         9e:43:07:8f:07:54:5e:f6:69:a3:74:00:40:66:e5:00:83:4e:
         bc:98:c8:45:bd:9f:14:6b:b2:f6:46:86:f3:02:4c:a1:ba:49:
         4e:1f:17:92:fa:69:6d:ea:09:8c:81:94:8d:df:58:40:d9:e5:
         20:46:68:7d:42:c6:d5:b5:ff:81:1d:55:c1:0a:a1:97:9a:d8:
         71:db:93:a8:df:8f:1d:13:fa:09:b0:db:10:f8:61:96:49:63:
         8f:7f:6c:e2:e2:34:36:46:72:6b:1d:4c:65:26:59:3d:3f:81:
         3a:d6:8c:8a:30:2f:16:ff:b4:d3:f0:cc:f5:83:43:41:c2:5e:
         6f:d3:f8:b7:9e:80:fb:91:32:ac:d7:94:a1:81:4c:ac:9a:0d:
         16:46:a9:97:26:ad:d8:f3:1f:36:f1:c3:14:25:e1:d2:ce:bd:
         07:3c:eb:56:10:c2:28:3b:78:be:f1:47:00:59:ca:78:d7:93:
         7c:0d:e0:4e:13:2a:c7:4d:68:de:03:18:7f:fd:e4:ab:d2:73:
         c6:36:29:7b:33:4e:49:c9:48:fb:5f:14:9a:fb:9b:e5:59:bc:
         6e:97:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----