Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File:                     aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier:          83kChV2raBXSKXuWwoEncWTuDGSK87RyU2gfQzUIMu4=
Subject key identifier:   AC:33:82:F3:48:E1:39:47:3A:65:54:D2:E4:50:91:1B:95:8B:F2:42
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer:       /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial:       01962DF3D08F4F38250C1CB21FB3CBE10AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number:          1204
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (hash: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=)
                          2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: DtggNg/c9+HTxM9fgysnOGd/Vh5pU1m1pIjZxEv6jSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d0:8f:4f:38:25:0c:1c:b2:1f:b3:cb:e1:0a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=ac3382f348e139473a6554d2e450911b958bf242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:40:ea:61:46:82:d3:1d:8e:3a:09:30:f5:
                    72:26:a2:e5:d3:d4:17:49:19:7c:34:6e:47:ba:29:
                    fb:dd:69:cb:43:bf:0b:ee:1b:bb:a3:38:a6:8d:ee:
                    63:18:74:32:60:34:f6:be:0b:6c:a8:37:f2:70:39:
                    6f:24:6b:db:c0:18:b8:7c:2d:1d:2d:c3:b1:fd:3b:
                    4f:49:68:f6:b1:6d:e5:de:1e:57:33:d0:49:ee:46:
                    b2:a1:81:9c:f6:05:c0:d4:f4:20:fc:e3:8a:a4:80:
                    4e:23:07:0e:a0:3d:6f:2f:dc:82:54:30:d4:ec:29:
                    8d:99:d8:59:be:68:14:07:fa:b2:86:17:05:47:d2:
                    ed:a0:99:69:7a:63:e0:35:45:a0:78:fa:e9:10:fb:
                    19:d6:17:e7:c8:64:bc:b5:ae:b7:f0:89:e0:58:8c:
                    2d:bf:3c:ee:4d:2e:24:07:d2:cb:70:48:ed:99:c8:
                    0c:35:92:7b:9b:1e:91:ce:1e:a3:0f:bb:4f:cc:9d:
                    4b:de:e1:bd:43:26:f1:9d:91:fe:c5:ae:88:3b:bf:
                    57:5f:c6:1e:e0:6f:df:19:42:b6:3f:9e:6f:2e:59:
                    c7:4f:43:0a:a3:81:17:86:09:cc:be:8f:51:0d:e3:
                    ba:3e:71:6f:ac:80:f9:5d:0b:1a:c8:4b:21:05:35:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:82:F3:48:E1:39:47:3A:65:54:D2:E4:50:91:1B:95:8B:F2:42
            X509v3 Authority Key Identifier:
                keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3d:99:84:1a:03:2b:6c:c8:80:12:df:95:63:03:52:ee:4d:
         7b:c1:67:72:2e:e7:86:0f:b3:dd:c2:a2:d5:84:3a:f9:a1:29:
         5e:fc:23:70:0d:27:43:64:e9:46:47:cd:72:39:c5:65:ab:5f:
         0a:19:39:ab:ec:e5:22:17:b4:df:ab:1b:36:d0:23:bc:ff:1b:
         6a:24:30:8b:86:d8:c9:a6:b0:29:e8:8c:bc:01:8e:4c:9f:58:
         60:d9:85:a7:7e:cb:d1:dc:24:98:02:7d:94:57:91:de:c5:e6:
         91:5b:34:72:52:b3:bf:dd:07:2f:4a:9e:71:89:df:4b:cf:0a:
         ad:21:d3:ea:41:ba:c1:30:29:b9:8c:da:73:3b:0e:40:cb:cb:
         8d:51:57:8c:eb:3f:3b:e3:4b:fd:1f:3f:42:3b:a2:19:78:1c:
         4f:69:3a:d5:10:fe:07:7f:f6:b5:f5:c9:b1:19:eb:05:89:b8:
         99:e6:0b:ee:40:63:17:a8:e3:36:4a:c5:29:9b:f1:f3:ba:97:
         9f:10:fb:41:5a:2d:c2:d6:7f:79:38:5a:e7:d7:e5:1e:4f:ce:
         92:a2:61:31:2e:17:ac:53:03:e6:34:4c:ed:d1:2d:a5:6b:a8:
         48:a6:db:33:e5:94:22:24:44:7e:67:37:3f:d9:ad:d1:7c:7b:
         fc:61:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----