Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
File:                     aKUCPY4CESaZfXkmpHcBYIqs48c.mft (raw, json)
Hash identifier:          Kduj7rsJD0rSVEjdQrtZq/A6XJvje3JvAHBZGJs4rEE=
Subject key identifier:   52:41:9C:BD:B2:21:25:BF:3D:E3:54:A9:F9:4B:4E:72:30:CD:56:93
Authority key identifier: 68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7
Certificate issuer:       /CN=68a5023d8e021126997d7926a47701608aace3c7
Certificate serial:       01962F06E3204EF83DC5011BB1C152DC1964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKUCPY4CESaZfXkmpHcBYIqs48c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
Manifest number:          065B
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: aKUCPY4CESaZfXkmpHcBYIqs48c.crl (hash: ui58QuAcJAvWjlRiTn1IW2XEHFYK0tyAe0OaDfUAKXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e3:20:4e:f8:3d:c5:01:1b:b1:c1:52:dc:19:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a5023d8e021126997d7926a47701608aace3c7
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=52419cbdb22125bf3de354a9f94b4e7230cd5693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:15:6a:2b:e0:ad:6d:db:c6:bd:a5:5d:44:
                    a4:5f:24:28:13:2f:98:d5:e4:34:c4:54:f4:bb:d9:
                    31:01:aa:f0:7d:58:02:69:9f:70:1a:c7:d3:82:6f:
                    f9:86:2e:84:c0:be:34:5b:ff:75:a4:d0:7a:fc:6c:
                    fa:1b:10:f9:70:f3:05:06:36:67:62:cd:07:c4:12:
                    98:e1:2c:71:1f:56:95:3d:62:06:ef:32:61:e7:67:
                    d8:d8:e5:eb:4d:37:eb:61:c4:07:6e:8f:9d:bf:8f:
                    41:76:04:ea:09:62:01:77:4f:8b:2b:24:0b:af:65:
                    99:22:03:b9:4a:5c:f3:f5:c4:e5:01:39:c0:4a:be:
                    d1:ca:86:dd:fb:39:30:86:61:c6:23:4e:f2:19:ee:
                    9c:61:b4:ce:7f:4b:80:43:90:a1:59:f1:08:81:05:
                    bf:c5:65:79:e5:4c:b0:40:cf:9d:f6:2a:f7:88:db:
                    2e:ba:15:c6:ae:7d:92:11:09:7e:c6:d6:ba:68:fb:
                    db:ec:51:e9:c3:b3:25:ed:d4:96:0b:fe:25:37:27:
                    0e:d3:7d:0f:24:37:ab:83:47:e6:d1:4a:82:bd:30:
                    b7:4a:75:a6:23:e2:bf:76:43:8d:6f:2b:32:89:2f:
                    ca:16:d2:c5:ab:b2:dc:dd:2c:d5:a9:19:16:f7:b1:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:41:9C:BD:B2:21:25:BF:3D:E3:54:A9:F9:4B:4E:72:30:CD:56:93
            X509v3 Authority Key Identifier:
                keyid:68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKUCPY4CESaZfXkmpHcBYIqs48c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:13:db:2c:a8:2d:aa:3b:9c:14:77:89:c2:51:1b:df:07:23:
         2f:10:c1:70:7a:71:4d:03:9b:3e:2e:53:c0:85:d8:86:81:4b:
         1d:c9:3a:d0:73:4a:b9:00:06:a2:4e:8c:e8:51:c5:3d:d6:5a:
         0a:7b:45:ed:9a:af:c3:4a:e2:b2:6c:2a:9a:b0:f7:37:07:dd:
         f0:09:94:2c:72:86:e1:75:4f:84:9c:a9:3f:ff:ba:48:78:a2:
         cc:e9:66:bf:da:08:e2:44:35:95:c7:74:92:aa:0d:e7:14:96:
         d4:d1:32:0a:b5:ea:6f:53:93:17:5e:92:0c:1e:8e:72:a9:11:
         ec:67:9f:ce:78:33:7b:f7:23:3f:4d:e4:6b:55:3d:af:72:ae:
         49:c8:96:8b:80:af:91:6c:e5:dd:39:76:11:ee:4c:ef:32:3d:
         a2:03:e0:09:42:b6:4e:a6:a9:67:0f:54:91:b4:9e:18:98:1e:
         82:b9:58:22:8b:ad:67:c7:ca:58:62:1e:3f:d2:22:5a:48:88:
         d6:c4:08:37:97:7f:3d:50:59:e6:9f:36:2a:10:d0:bd:a2:bb:
         ec:b4:29:78:41:c8:23:b6:30:cd:24:cd:27:99:e1:ee:c3:4c:
         91:b5:bf:52:a8:e9:d8:c9:c4:2b:3e:f7:1c:f6:5e:6e:e1:c4:
         1c:ea:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----