Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File:                     AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier:          tiYSs9ayyETvUVQnyl22x62PSgvVBXWNVC+ar85MUn8=
Subject key identifier:   C6:87:30:C4:2A:FC:CE:5E:63:E0:CC:F9:D6:83:5F:4F:42:32:0D:E9
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer:       /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial:       01962E61A1729D53AA29A85E754ADE422E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
                          2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: HJb7+qZyyrZftltiURg5uHbZKzQ8lUXjmfL+bmjTMj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a1:72:9d:53:aa:29:a8:5e:75:4a:de:42:2e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=c68730c42afcce5e63e0ccf9d6835f4f42320de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8b:9d:a2:b7:66:47:34:eb:6e:38:19:f2:b0:
                    ac:ab:86:9b:e2:cd:77:26:e5:01:42:ed:85:2d:78:
                    83:47:23:45:3c:d7:f7:2b:23:83:11:54:b0:46:ed:
                    31:58:48:8d:86:be:fe:3e:e2:7e:2b:81:15:4c:2f:
                    b7:ad:9b:3d:62:85:1c:c0:48:ed:c6:bb:c6:9b:8b:
                    f3:43:9c:f7:ca:2c:ac:f9:93:03:5a:ec:79:0a:4f:
                    4d:74:83:f5:cc:82:fd:e7:a5:f4:a1:45:7b:e6:97:
                    0a:7b:27:e7:f7:10:12:47:76:59:07:0e:88:d5:82:
                    6d:6c:e9:c2:02:3f:32:f9:59:6d:ab:d7:91:db:07:
                    cc:e2:89:69:2c:aa:21:b1:91:41:ef:83:d6:b3:73:
                    40:37:74:cd:fd:b8:f3:61:b4:db:89:eb:80:3f:d1:
                    43:f3:41:21:04:c8:ba:22:bd:82:8b:f9:09:22:a2:
                    29:e3:0a:7a:7b:e7:13:7b:db:5d:84:88:ed:f5:fd:
                    44:ec:24:d8:20:c3:b8:be:23:8f:a0:b2:2c:7c:b0:
                    46:63:14:eb:67:04:e6:b7:f7:db:81:7c:ca:76:b7:
                    6d:71:88:3e:ad:95:1c:e3:72:f6:44:49:ea:35:9f:
                    43:88:54:43:e4:01:1d:ec:e7:c1:2a:e7:b7:99:0d:
                    45:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:87:30:C4:2A:FC:CE:5E:63:E0:CC:F9:D6:83:5F:4F:42:32:0D:E9
            X509v3 Authority Key Identifier:
                keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1b:bc:d4:bd:31:19:1d:d4:f5:03:75:e5:08:fb:c1:29:b2:
         69:9b:76:7f:da:61:ef:3e:17:d5:9c:af:5d:f4:ba:2e:e1:b8:
         b0:f7:91:f2:5c:d1:d6:a4:7e:70:b4:02:e3:83:ff:66:92:ef:
         55:cb:c3:09:1a:44:69:14:d3:f3:c6:2e:91:df:3e:2e:08:64:
         bb:72:4b:96:1a:59:f6:dd:1e:a0:d7:54:05:e8:e5:eb:88:fe:
         06:39:96:61:65:e6:8d:b3:5f:fd:ac:b2:17:05:87:f8:16:33:
         3d:99:d5:4c:ff:20:c4:36:04:38:6a:6d:6a:bc:03:f4:10:31:
         b1:86:1c:a6:f4:84:05:0a:2c:33:58:b4:fd:7e:27:b6:40:12:
         45:d8:ee:e8:ca:75:be:93:60:1a:79:67:78:8f:a8:54:d3:d0:
         99:14:8d:d2:0c:14:0f:c3:e7:5d:d6:f3:48:4c:90:21:1b:1a:
         f2:fa:5f:7f:7b:e0:55:a2:5c:a3:de:3b:af:51:35:f7:0e:c0:
         6f:31:9f:6f:05:99:35:a6:3a:52:ba:21:2c:54:c2:cf:07:d9:
         8c:a3:7f:7d:a9:0d:f2:e9:15:41:f1:a1:5c:52:4d:7d:ed:c6:
         d9:d0:7b:55:9d:f2:b2:f8:1b:97:a3:3d:b1:06:ce:0b:70:87:
         59:38:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----