Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File:                     afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier:          21fwsAcmHZTLZVdHr3MC4mEwrXIA7GDgbNFB2L/eJPI=
Subject key identifier:   5E:C1:3B:52:81:E4:0A:0F:D4:23:6D:63:72:19:A7:87:90:D2:AF:15
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer:       /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial:       01962E61F6764AE566ECC460321A8EA7D73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number:          0878
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
                          2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: lfuFN0YlXiS4B39z39G0MhrIqse6JgM+QIqzoZmzzWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f6:76:4a:e5:66:ec:c4:60:32:1a:8e:a7:d7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=5ec13b5281e40a0fd4236d637219a78790d2af15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:4c:2c:f1:f9:80:30:f4:98:47:b4:8f:a4:
                    94:bc:c5:cd:0c:3b:0f:90:3b:89:dc:02:bb:50:d0:
                    d3:01:7a:e5:06:23:88:2e:2d:7a:31:5c:93:70:0a:
                    a5:1a:ce:73:5b:98:7d:37:77:cb:4b:3c:d4:ec:34:
                    d4:0f:f8:20:f0:69:ed:0d:23:5b:f4:c3:36:f8:ea:
                    a4:6d:31:e3:f8:f0:c2:08:ab:3c:56:9c:d9:a2:48:
                    a4:a4:1c:c1:b0:06:3f:85:ba:92:e2:d0:83:71:4c:
                    96:52:f4:d6:36:86:e4:c1:39:70:95:31:2a:fc:97:
                    b3:a2:6f:dd:08:79:50:a9:57:35:52:37:c9:4f:dc:
                    2b:5f:50:48:6c:a4:f3:ed:db:5a:95:f0:6a:c4:58:
                    ad:00:8a:2c:69:12:21:ef:82:0c:0a:90:2e:ae:b1:
                    e8:ad:57:83:f6:4d:1f:b3:04:15:0f:d5:5b:dd:33:
                    82:ca:12:65:c6:e5:7c:0e:f6:39:1e:e8:7b:d9:3c:
                    6a:6a:f2:5f:05:b6:8f:cd:60:e2:9f:52:8b:d1:a4:
                    58:14:ea:e8:0a:5b:7c:e5:3c:45:62:17:ba:d9:5a:
                    41:3f:7b:0b:f4:e0:05:94:44:54:2f:01:d5:85:22:
                    3c:40:1c:7f:d3:ad:93:a1:09:fd:5e:ff:42:8e:6c:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C1:3B:52:81:E4:0A:0F:D4:23:6D:63:72:19:A7:87:90:D2:AF:15
            X509v3 Authority Key Identifier:
                keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:d6:be:c6:62:ec:ea:5d:cb:28:72:ff:be:84:af:08:38:
         69:f6:e5:75:00:e8:bb:85:82:76:c3:b6:6e:86:3a:0a:c8:94:
         2e:d1:c0:79:0d:e3:3f:25:4b:97:b2:84:8f:ff:a7:81:74:d3:
         28:bb:fc:6f:d5:c3:d6:54:e9:c0:ff:c9:3e:00:a7:46:ff:f8:
         c4:f2:78:ee:64:74:76:9b:99:2d:b6:67:89:4a:0e:d1:e3:f8:
         37:fe:28:e0:ca:0b:54:a8:bd:08:a9:0b:7b:41:6d:a9:0b:24:
         d9:a2:ed:af:dc:0e:d6:68:02:9d:3a:2a:9a:1b:90:a7:4e:75:
         54:98:84:33:30:fd:a2:9b:dd:52:53:b3:e6:24:5a:b7:d0:06:
         64:a9:8e:45:2a:27:a5:f2:61:07:c0:65:53:73:c4:bb:02:c9:
         dd:2d:18:f7:d1:0e:ec:e0:96:f7:9d:7e:71:ea:fc:29:0f:8a:
         ce:dc:92:df:ac:9e:b1:39:bb:bd:79:97:c8:d6:cc:b7:27:fe:
         53:d1:80:1b:4c:aa:15:9f:5a:89:c2:f3:2e:2f:79:08:9b:81:
         de:65:82:09:86:31:60:7e:d4:fa:d5:70:ec:a1:92:03:1c:3c:
         d8:4a:f1:1e:9a:1d:4a:f3:a2:eb:24:dd:a0:44:5a:0e:ec:c7:
         fd:3d:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----