Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File:                     apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier:          5cyGHqCQ5a/8h50ij8GCdXCSCGAA+E8bU6pdTQJNLYc=
Subject key identifier:   A9:B9:F5:D3:D1:03:48:4C:BE:DF:18:37:58:6B:BC:CF:DF:10:8D:C7
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer:       /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial:       01962F0722E5058268C7CAFD0D1700E3A740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number:          023C
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: f1DJFrWxAFbAjTwZS0/uLX12PXBIT0hHlD3jhtPP3kg=)
                          2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:e5:05:82:68:c7:ca:fd:0d:17:00:e3:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=a9b9f5d3d103484cbedf1837586bbccfdf108dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:4d:ea:ce:77:57:c7:38:18:6b:a8:3c:3d:
                    f0:f9:aa:02:55:f1:8e:87:e4:36:b6:fd:42:9e:fc:
                    52:ea:01:20:73:f6:c1:02:57:ca:9f:bc:8a:a3:80:
                    13:78:74:02:18:9c:2e:ea:45:c8:99:44:ae:83:7d:
                    a0:d6:3f:65:36:4a:eb:05:42:b1:62:01:ba:7e:ff:
                    ff:b4:a3:ef:b3:8f:80:de:9b:5d:89:94:37:e0:71:
                    d6:a0:42:40:e5:9e:ae:6b:1c:2a:69:a6:e1:59:8e:
                    4b:f1:6d:b6:ae:3e:c8:92:d9:0a:45:69:fc:c1:06:
                    71:49:4d:09:64:16:c8:7b:64:d4:9a:60:40:8c:93:
                    df:ac:21:02:c9:19:fc:4b:3b:fa:8b:5f:2d:cc:2e:
                    94:ca:b0:98:7f:d2:3e:53:01:1d:8a:f7:4e:da:26:
                    a8:a4:0f:ef:79:ce:9b:3d:af:54:08:39:bd:c1:c9:
                    7a:e1:0d:cb:d3:64:1d:77:bc:ec:22:ef:33:00:58:
                    67:29:89:b2:6f:40:8e:59:d1:9e:99:c2:80:8f:81:
                    5d:22:5a:46:8c:11:50:92:47:cb:4a:62:6d:de:93:
                    3d:30:01:2d:6b:65:f9:8d:65:c2:78:92:82:b4:a2:
                    d5:75:9c:2f:9f:54:2f:b1:d2:67:19:c3:7d:25:1a:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B9:F5:D3:D1:03:48:4C:BE:DF:18:37:58:6B:BC:CF:DF:10:8D:C7
            X509v3 Authority Key Identifier:
                keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:05:7e:16:d3:85:22:a7:ae:00:25:88:0f:34:00:45:e5:7c:
         70:73:6c:c8:fe:32:67:c8:10:e9:ef:c2:49:52:db:11:f5:5a:
         73:c3:ed:33:24:2e:0a:68:b7:37:34:f7:a8:41:91:3f:13:df:
         6b:86:a9:df:5b:df:ef:9c:3e:3e:48:0e:ab:1d:f3:d7:a9:c3:
         7e:49:ae:74:27:b1:be:06:d7:9d:4a:bf:bc:7a:be:8b:37:36:
         f3:15:1a:9c:68:d9:44:a7:c7:fd:97:9d:4e:fc:2f:96:3d:bd:
         55:13:54:60:3f:cd:84:4f:37:89:db:e9:3c:43:4d:dc:d0:1e:
         80:56:af:b6:bc:cc:d2:2b:dd:1b:c8:44:63:23:85:b1:55:28:
         b0:52:1d:2a:78:bc:72:80:e1:c5:90:14:8f:4b:8d:3e:e9:e1:
         08:da:c7:9c:c2:b9:46:74:a2:b9:9b:8a:70:43:19:b5:f4:be:
         f4:7b:33:95:19:6a:b7:ad:2e:7e:63:50:e8:bf:b9:af:22:28:
         89:48:58:60:e6:8f:b9:02:c6:60:1c:84:e7:e6:7c:75:a9:7a:
         a1:2d:2a:e0:82:a4:a5:3b:72:d1:c9:82:09:6d:ba:99:43:73:
         3d:73:71:49:51:1e:43:eb:c1:1a:fc:c2:de:83:c4:73:87:1a:
         15:fa:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----