Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File:                     AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier:          WlC0yAabc7qwBUbM74H0lAE4sExxltjsOKdAW9IDx+s=
Subject key identifier:   DB:77:46:0A:30:10:17:06:2D:B7:A1:CE:E8:79:E3:83:3F:66:E9:0D
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer:       /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial:       01962ECF90795C797755F8BCEE92122CCB5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number:          0F06
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 4HkmlcAuKhI8FxWS9vlMsQzFZW36hbZyFgQmnUFuCgM=)
                          2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:79:5c:79:77:55:f8:bc:ee:92:12:2c:cb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=db77460a301017062db7a1cee879e3833f66e90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:2a:e7:27:c6:ad:d7:e8:89:a2:13:88:c9:
                    b9:64:ef:1c:f9:d3:db:eb:72:af:23:f7:6b:b9:39:
                    3d:bd:7a:70:5a:fc:66:9d:15:3a:1d:f9:76:9b:be:
                    63:cd:33:52:0a:b4:78:a9:10:44:3f:6f:2f:0a:6f:
                    a9:35:5a:5b:b6:55:ee:16:ce:ee:7f:a9:79:47:aa:
                    3e:f5:c7:a0:29:4f:73:b4:48:cd:0a:33:fb:f2:f6:
                    a4:4e:0b:33:12:53:73:f1:71:1b:0d:c4:4d:97:79:
                    b8:3e:e7:19:5e:c6:9e:95:b5:ad:cf:47:f1:96:eb:
                    58:06:fc:e0:6d:e0:4f:a5:b3:1f:c6:13:f2:c0:9b:
                    a2:73:2b:ce:b4:9b:4e:84:01:fe:48:3e:2f:c4:87:
                    66:8c:3c:0b:06:85:5a:d7:f3:05:2f:bb:cf:23:f9:
                    b0:ca:10:f6:01:40:14:b0:c5:92:c0:48:c2:3a:59:
                    57:f6:4c:7f:83:96:05:b4:6d:6f:bb:8f:ae:f0:f2:
                    93:c2:9e:db:63:19:2f:30:22:bc:4b:8f:aa:69:4f:
                    29:c5:ed:6b:56:a5:01:53:02:fb:61:a3:0d:53:a6:
                    15:93:2e:1c:24:24:dd:3b:fb:dc:4c:24:e7:db:36:
                    39:2e:79:0a:2f:c8:77:f9:64:dc:f9:40:49:34:78:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:46:0A:30:10:17:06:2D:B7:A1:CE:E8:79:E3:83:3F:66:E9:0D
            X509v3 Authority Key Identifier:
                keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:83:7b:08:29:41:ce:d4:89:0c:6c:76:7f:05:a8:1d:bb:
         87:57:ab:f7:28:8d:00:d0:ed:f6:d0:19:03:ef:4d:26:bd:9c:
         f4:d0:e2:4e:db:71:2b:63:af:7f:9d:f6:ab:22:44:c5:40:47:
         4f:db:e7:1a:73:eb:4d:72:f1:48:ff:0d:80:01:8b:14:90:00:
         49:51:12:5c:4d:29:f5:19:33:e0:a4:e5:d6:3a:df:b2:d4:5a:
         d6:c6:eb:70:fe:4c:6f:99:b4:55:3c:f4:40:10:db:b2:e8:ab:
         f0:ff:58:cb:82:7c:42:ba:74:f2:d5:0c:41:cb:fa:37:d9:ba:
         ca:e2:c5:58:43:78:a7:96:17:38:5f:3c:ef:be:ac:7d:73:5c:
         4f:d8:4a:5f:89:b9:c6:e7:07:85:b4:d7:20:db:e2:70:22:b6:
         cb:49:2f:91:70:79:2f:06:ec:5d:96:a2:b6:46:2a:b5:c3:cc:
         1f:2c:34:aa:b7:51:f9:ac:5c:de:40:18:8f:54:85:0b:c0:71:
         15:61:c0:78:da:02:1a:7c:be:4a:21:b2:3a:7c:bd:ad:23:23:
         cd:97:73:65:6d:33:ee:72:b1:ab:38:1d:f4:b4:7d:5b:96:10:
         0a:9d:71:8b:76:50:e1:84:84:91:26:40:d7:5d:3a:20:cd:49:
         a3:0f:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----