Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
File:                     AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json)
Hash identifier:          hOQzGlIU5EpPSXnktJTKgQ6UoqAXHj51WS35CDLTbSs=
Subject key identifier:   12:C4:5C:14:89:36:CC:86:AF:D8:5F:31:3B:98:09:F1:6F:45:28:97
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Certificate issuer:       /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial:       01962E990BA724F8776D8EF3F8C2CECA821A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
Manifest number:          0B83
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: +KvCylZdbbg3XFe1hnsCxYQndd9T1pDZ1ibh3o4XDM4=)
                          2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0b:a7:24:f8:77:6d:8e:f3:f8:c2:ce:ca:82:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=12c45c148936cc86afd85f313b9809f16f452897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:38:ca:e6:58:38:7e:b0:9f:a4:6d:c9:6b:
                    e7:15:00:cb:49:1b:9e:c2:8c:38:d6:01:50:89:c7:
                    c3:4a:87:cf:ff:69:ad:b8:c7:0a:3c:27:c4:bf:8b:
                    9f:f1:8d:ad:42:53:76:9c:30:20:1f:61:33:f3:8f:
                    3e:13:0e:73:12:20:36:42:7e:30:2c:e7:f9:5c:d5:
                    90:c5:43:66:1e:31:f2:df:7e:4c:f1:4c:57:55:eb:
                    d0:a4:f4:62:89:a6:97:87:46:18:3e:11:37:fd:55:
                    fe:5a:5f:ac:a9:46:cc:a8:0a:0f:2a:f8:67:13:40:
                    33:85:28:a3:0d:3f:bb:e1:32:1f:b8:28:25:a9:3a:
                    d0:8d:bf:9f:08:43:1d:e6:3f:5e:f4:3c:8e:4f:dc:
                    86:9a:3d:3d:3c:43:52:7d:cc:6f:4a:29:0c:53:f4:
                    bd:c8:ae:f1:39:9f:e7:5c:45:1a:75:e9:3e:0c:b8:
                    8e:f8:ac:0e:4f:7d:f3:c2:40:09:bd:bd:44:c9:37:
                    28:0c:b4:eb:8e:0e:e3:4e:9f:cc:fc:ec:0e:01:d4:
                    00:ea:7f:53:13:aa:22:29:7c:80:c7:94:23:47:6a:
                    3f:64:10:58:14:bd:86:6e:e1:15:ba:69:13:39:70:
                    6b:2f:01:75:81:a0:71:4f:60:dd:97:46:92:ae:02:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C4:5C:14:89:36:CC:86:AF:D8:5F:31:3B:98:09:F1:6F:45:28:97
            X509v3 Authority Key Identifier:
                keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:be:6c:93:15:80:0b:84:85:dc:8d:c8:52:37:de:cd:db:ff:
         96:d5:6c:fd:44:ff:8d:6e:d6:ff:54:c3:0e:dc:ff:3b:c3:18:
         d9:b0:12:25:25:55:0f:fe:0e:b7:42:6e:86:e4:6c:3f:8a:c6:
         b9:d2:05:c0:20:a9:a0:63:0a:f4:0e:c9:5f:f2:68:1c:37:05:
         4c:71:e6:eb:18:43:80:87:e5:44:d6:34:de:e7:14:07:5e:6c:
         25:72:5a:43:75:29:b8:9f:99:d0:b3:91:02:69:d4:99:cd:32:
         6f:24:15:db:e3:ff:58:b9:30:24:9b:5e:b5:cc:ea:b2:d9:25:
         05:df:21:cf:1e:cb:fb:ad:83:2c:e2:48:33:a0:74:42:b8:0d:
         a7:55:fc:f8:65:ce:42:20:d3:b4:ea:34:62:a9:9a:90:8f:33:
         78:74:74:1c:e1:18:8d:16:be:06:d5:47:a3:2f:66:eb:fb:bb:
         93:85:f3:32:b9:c4:d9:0e:1f:1c:1c:11:87:87:87:1a:0a:bd:
         70:4e:64:59:95:f7:22:cb:81:49:ff:29:2b:21:af:33:e9:12:
         8d:9b:6b:cd:c5:5d:bd:5e:22:44:a9:c3:84:4b:0c:b3:75:42:
         94:30:4f:b0:9a:04:89:8b:7c:8f:5a:ed:07:d7:69:ab:15:72:
         03:f8:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----