Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File:                     AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier:          iKgpg2flB+85T4HM/Q3XGmAq23oUp2jx2lQxH01N+oI=
Subject key identifier:   00:C1:09:ED:47:20:E5:20:37:AF:61:A2:01:88:28:34:6B:F4:F0:2A
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer:       /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial:       01962E2B48E5E2062AEE01125FE88D8409CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: 3iKFnM5EPTG7+4dCmNtXgJ1ePCxaCfVGXC1hOqzowco=)
                          2: z3WUNqxKMDWur0KI4t-qxJ9N11o.roa (hash: 939Mn6aF9U81uAcv2w44QyTqf1evPpPjx2mvgDn5N/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:48:e5:e2:06:2a:ee:01:12:5f:e8:8d:84:09:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=00c109ed4720e52037af61a2018828346bf4f02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:6d:6c:09:cf:cc:06:1a:28:9c:c5:80:0d:
                    b4:e1:a1:1a:82:8e:77:b6:d4:5b:82:04:ff:a0:aa:
                    48:e1:a9:ad:dc:4e:87:c7:e5:0c:83:22:1c:67:88:
                    23:97:03:8a:dc:fd:2c:af:6e:1b:f3:93:d1:9c:e2:
                    d7:b2:e9:96:80:6b:4f:45:f8:15:f6:79:a4:5b:9b:
                    8d:fb:ac:af:48:19:76:1b:e7:fb:cb:8d:1d:ad:24:
                    f0:e8:f7:a7:fb:f9:4f:fb:bc:df:15:08:ae:77:7b:
                    52:be:4b:31:c5:bf:94:9e:b1:f7:f7:9a:78:e8:d2:
                    de:12:43:23:71:0d:22:1b:11:d4:84:56:4f:c9:5e:
                    06:0b:46:dd:2c:b3:ed:f1:18:4c:e4:b0:4d:c3:a0:
                    fa:58:78:3a:a5:8e:05:a8:f9:e8:aa:53:39:54:32:
                    c6:94:5e:92:a2:3c:a1:58:a6:b7:cf:fe:c2:00:64:
                    f8:1b:cb:a0:ca:d1:7c:50:0d:08:c1:cb:87:fe:e7:
                    74:b9:aa:33:07:df:fd:a2:69:60:6c:a9:46:39:aa:
                    06:04:d7:39:ee:3c:87:14:13:56:1a:55:e9:cb:37:
                    01:1e:dd:76:37:2b:72:91:23:c5:f6:8b:93:25:2f:
                    af:7d:86:d6:41:4b:c8:1f:d6:ae:54:ee:a0:9e:c2:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:09:ED:47:20:E5:20:37:AF:61:A2:01:88:28:34:6B:F4:F0:2A
            X509v3 Authority Key Identifier:
                keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cd:b8:b1:1f:b8:78:6d:3d:1b:c4:74:ea:be:c6:d5:d2:9e:
         32:ff:69:b2:d8:c4:85:d0:91:8e:bd:8b:89:2c:0f:0d:ce:26:
         2f:6b:a6:0d:aa:f9:f7:2b:33:0b:cc:8b:2f:ba:fe:82:f2:1e:
         4b:ec:d1:7f:dd:7e:ef:0c:b7:94:16:30:22:46:42:fd:64:fc:
         9a:5e:b9:94:14:5f:48:3b:0c:cb:7a:85:9b:82:f1:91:ff:e0:
         f9:8f:ca:72:ab:98:4e:78:85:a8:1a:95:f1:56:0e:65:fc:c4:
         7d:98:f3:25:23:9c:8a:67:0f:e3:d4:26:50:52:e2:18:e4:d5:
         c8:89:4c:f6:31:4a:96:11:ef:49:6f:00:35:a3:dd:b3:2a:65:
         31:1a:c9:3e:ba:f3:77:7b:fc:2a:46:fe:16:35:58:93:0b:02:
         d0:1f:7e:50:7a:13:90:5f:58:7f:8c:5e:e9:18:db:28:98:fe:
         73:8b:d4:19:7e:f6:6f:16:56:b6:32:34:12:69:ce:fc:1c:c7:
         ad:b6:0b:18:47:8c:27:7e:be:b0:32:ac:76:88:77:99:2e:c4:
         98:48:7b:fe:65:c0:7a:a6:e3:29:c5:cd:c9:14:fd:c7:54:89:
         2f:1a:cd:be:e0:d6:13:53:c3:6b:6d:e8:42:e2:12:8c:81:4a:
         ce:2a:96:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----