Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
File:                     aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft (raw, json)
Hash identifier:          De+cZOnx/5XPu3D7YAaqizq1b1ft1I3HL9gtaIcNwPY=
Subject key identifier:   CE:A3:56:62:52:B3:C2:D9:1A:9A:F3:64:FC:5D:05:3D:7A:8F:47:8D
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Certificate issuer:       /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial:       01962F3D5C68328E02E0217DBE1759942E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
Manifest number:          0523
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: WhLENsO2y4UEzkuswA1wx41c4K4.roa (hash: qqWz2hpUFCfdOvnndjkfI9tgPQ2D7KLxkWgnxyi1reI=)
                          2: aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl (hash: PR3zSmgbYuEkLmDbL5ORuEZGIZMx7t3+aZLhoXh+ojY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:68:32:8e:02:e0:21:7d:be:17:59:94:2e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=cea3566252b3c2d91a9af364fc5d053d7a8f478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:35:a1:8b:34:33:0e:b0:2d:6d:e0:6e:9f:
                    8a:1f:fb:67:e3:04:fe:5e:39:c7:1e:aa:4a:45:38:
                    f9:15:0f:09:2f:47:f3:e7:44:76:8e:df:d7:64:ac:
                    d3:4e:c5:e7:b1:49:9f:b1:cb:4f:53:c6:e9:8e:64:
                    9a:90:a3:3e:41:3b:0a:ce:e6:3c:f3:fb:30:1b:83:
                    03:bf:c8:fd:10:43:50:97:f2:33:2d:23:0b:29:a3:
                    0a:60:4d:f4:fc:02:5f:5f:be:9b:0c:52:33:75:0e:
                    60:c5:e5:a1:8f:51:99:da:da:ed:b8:0e:97:5b:77:
                    b4:21:5f:00:1c:3b:f0:9b:e7:f3:09:10:45:fe:ba:
                    9f:2f:92:75:0d:ef:8d:b5:5d:29:36:e7:be:5c:d1:
                    32:37:33:d6:7c:bc:ec:58:42:5d:96:d4:12:74:5e:
                    a9:59:6b:a4:cc:ce:b4:ab:89:d4:b7:cb:b7:e7:ce:
                    24:6a:78:b6:30:e2:47:c7:13:66:15:85:a3:6b:1e:
                    b7:91:73:11:28:0e:a2:ce:0e:0e:0d:65:63:b7:e1:
                    07:62:7a:cd:f7:09:37:f8:c9:e5:c9:15:0f:7d:2b:
                    03:84:4b:dd:dd:37:ea:c0:80:42:4d:18:b4:5d:83:
                    ed:6e:7d:c0:67:7b:a1:78:4f:f9:09:a3:25:ec:f5:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A3:56:62:52:B3:C2:D9:1A:9A:F3:64:FC:5D:05:3D:7A:8F:47:8D
            X509v3 Authority Key Identifier:
                keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:a3:15:3e:36:0b:01:49:ca:8d:13:93:1f:fc:32:11:53:
         30:a6:94:ba:d7:c8:3d:cd:44:59:f5:6a:d7:d4:b6:01:31:09:
         e9:0f:4d:7a:5c:aa:07:3f:a9:03:63:08:93:45:7e:37:d7:c9:
         cb:6c:90:51:72:6d:66:ec:1f:ed:f1:69:cc:ba:c2:b2:b4:7e:
         3f:22:7d:0b:cb:da:3d:24:44:9f:3e:b2:d1:37:96:c6:21:ef:
         34:0a:81:06:7f:4d:03:84:31:19:e7:56:47:2a:39:d4:d4:0c:
         f4:d9:33:e3:52:ea:02:ce:0f:52:29:7b:0a:08:e9:ce:c6:e9:
         09:47:ec:1b:3f:4a:3b:ca:74:61:b0:c8:7e:36:e4:96:ee:37:
         77:19:8f:9b:4e:74:ad:b8:19:35:df:51:3b:4f:93:00:4a:37:
         cd:84:b4:ba:06:d5:6e:af:77:0f:d8:fd:a7:b7:93:02:b0:dd:
         1f:50:f0:a9:d1:09:87:27:de:51:d7:69:af:1d:80:3d:ed:f7:
         43:85:c6:2b:88:64:71:f7:18:99:15:2d:0a:9b:b5:37:71:75:
         6c:56:2a:5a:9e:82:fb:fa:5c:84:e8:7c:12:0b:1f:6c:6f:93:
         05:fc:75:67:d8:27:e2:cf:c3:8a:9d:70:ee:c3:3c:1e:79:5f:
         fd:fa:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----