Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File:                     aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier:          3HcpGx//aAeHoTwMvlLhF7okV5CPD3+qCakgOpxpxkA=
Subject key identifier:   1A:DF:85:E2:62:9D:52:57:46:F1:22:89:1F:5F:6B:46:A7:CA:7B:EF
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer:       /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial:       01962F07029325C82F13CF339AE47C9EC824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number:          11E1
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
                          2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: csGxXQEkufoTLJCP1igbcr1zILXqwpCW5qdBc8guI/c=)
                          3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
                          4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:93:25:c8:2f:13:cf:33:9a:e4:7c:9e:c8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=1adf85e2629d525746f122891f5f6b46a7ca7bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:c9:5e:24:e7:e3:d9:48:9b:d1:78:b6:c3:
                    a7:d6:1e:2a:23:8f:82:54:b1:22:5a:06:bb:08:b7:
                    91:f4:b7:78:75:08:a2:e4:e4:c4:59:2c:71:9d:3d:
                    23:4f:9c:31:b1:20:86:f4:03:37:69:52:af:c8:3c:
                    dc:8a:89:de:b5:33:cc:df:4e:f5:15:48:43:b4:52:
                    3c:6c:d5:8b:6e:88:35:af:13:1c:93:7d:13:ec:b5:
                    56:e7:05:c8:94:98:69:6f:ae:c0:77:73:80:0c:6a:
                    2b:a5:8c:8e:79:48:b3:29:2c:74:62:cd:d7:03:d6:
                    78:36:db:32:18:cd:ce:b5:67:16:cd:1f:59:23:8d:
                    53:c2:27:6d:00:c0:6c:d0:bb:e5:d1:82:a2:04:20:
                    36:2b:52:93:a0:9b:f7:77:db:40:9d:82:23:7f:28:
                    2d:bf:93:e7:f4:f8:08:ac:85:73:26:46:ea:d5:a2:
                    f0:ee:46:dc:8b:6b:f2:04:0e:7a:99:93:92:eb:64:
                    45:c9:c7:23:9d:76:8d:4a:75:2a:46:70:33:b2:4a:
                    4c:a4:c0:be:f8:d9:af:9b:69:c7:17:95:f2:be:93:
                    ad:2d:c5:36:17:55:4b:0f:e4:ea:89:7c:fd:60:cf:
                    69:77:f9:9b:fb:5e:c8:2b:fa:31:61:af:55:58:a4:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DF:85:E2:62:9D:52:57:46:F1:22:89:1F:5F:6B:46:A7:CA:7B:EF
            X509v3 Authority Key Identifier:
                keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:5e:c4:95:7f:43:05:e5:60:6c:8c:da:b3:79:7a:0c:6e:
         2e:6f:d8:ca:b2:96:5b:36:b4:d6:0e:3e:bc:45:98:10:2c:12:
         e1:72:34:67:8e:13:80:b1:7a:b8:6e:4c:5f:b5:49:34:06:c8:
         59:1f:1a:b5:83:9b:36:a0:40:e1:2b:76:c5:36:ad:6c:1f:93:
         e2:30:6f:be:ea:f8:2f:52:41:5f:68:9a:aa:0f:7a:ab:66:12:
         b3:88:69:87:2b:94:b2:f7:3c:22:67:94:6d:c2:33:37:14:3b:
         aa:92:69:e3:c3:d9:d3:2c:ef:7c:d9:84:61:a5:d5:aa:90:5c:
         64:5c:12:26:2d:8e:6e:3d:9d:95:4e:4e:ba:6d:1f:23:22:bc:
         43:c7:eb:6c:72:d8:30:7b:d2:cb:d0:c1:a2:0f:2b:3d:dd:81:
         75:fa:20:35:4a:f8:76:2e:e7:5a:d9:48:0c:3d:99:4d:f5:07:
         f9:40:18:5b:a5:17:fd:3e:fa:04:c9:56:da:71:08:7c:ef:88:
         b5:1a:d9:b6:8c:39:d1:cc:e7:18:b3:a9:48:99:b9:5d:51:61:
         db:c5:95:d0:34:0d:4b:7a:00:90:45:62:2e:3f:7d:21:73:3e:
         f3:e2:96:ee:8e:54:a8:0c:9d:06:05:33:aa:c8:be:bd:d3:6d:
         13:0f:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----