Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File:                     AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier:          mLUtD6aDIo7Zu1+u8kLA7nVljVJkpjlHgKQ6GqpOnj0=
Subject key identifier:   E6:7D:BA:93:7C:84:E1:37:26:0B:0D:42:76:AF:4A:71:3B:8B:1D:8C
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer:       /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial:       01962E99B726C9E5AAC566EFE0B8E4762909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: awVzKDGwMdg1hSxM7cTzGwUIk4S0rhcF8dRdIILpZWg=)
                          2: cHmzC5rP8FKDRkf607gnTwTvai4.roa (hash: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=)
                          3: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (hash: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:26:c9:e5:aa:c5:66:ef:e0:b8:e4:76:29:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=e67dba937c84e137260b0d4276af4a713b8b1d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:91:d7:60:a0:96:38:2f:12:84:42:59:22:
                    6d:7f:f2:0c:ac:ea:16:da:c1:ff:39:0e:d1:e3:2f:
                    13:7c:8b:1e:a4:5b:a6:1f:1b:60:c2:1c:fa:e1:8c:
                    d7:bc:16:9d:97:ef:02:6f:c2:3a:89:b6:1e:75:2a:
                    bf:4f:7d:43:06:18:c7:2b:fb:59:48:8e:f2:a2:7b:
                    41:f4:c1:36:46:71:4a:22:9e:fe:6d:7e:f6:5f:8f:
                    5f:11:50:8e:c3:de:52:89:40:ab:3c:34:6a:1e:c8:
                    b4:23:9b:52:0f:a0:0f:71:de:84:67:23:ac:b1:c1:
                    90:5c:e7:22:40:35:46:94:84:8e:bf:50:37:0a:5d:
                    54:15:20:a2:65:b0:34:75:c3:4d:bf:ae:69:3c:ae:
                    de:3b:70:69:0c:05:0e:17:14:6c:32:15:7b:2c:69:
                    52:75:1f:4c:0b:e3:a4:04:f3:8f:ff:d5:64:da:11:
                    c6:05:cf:50:1d:1e:4a:e1:f3:d9:24:df:68:b2:02:
                    c2:fd:b7:dd:f9:f5:0d:a0:c8:59:48:3d:ac:06:d8:
                    1b:4d:c1:d5:7d:f8:e0:17:c8:3a:e5:b5:80:f6:c4:
                    5c:a8:fb:fa:0a:43:a9:1c:39:e1:4f:b1:0c:48:14:
                    52:cc:ee:72:2f:7e:ae:ef:e1:52:05:5b:9e:5b:b5:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7D:BA:93:7C:84:E1:37:26:0B:0D:42:76:AF:4A:71:3B:8B:1D:8C
            X509v3 Authority Key Identifier:
                keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ec:77:e9:58:51:52:3c:ae:f9:67:fc:37:95:c6:83:6f:68:
         e6:c0:86:69:e8:5b:db:6b:17:be:71:6d:b9:1f:b2:3c:cc:e1:
         d4:bd:4a:35:1a:d3:6a:d2:3e:ab:a9:b3:39:ae:66:fd:5b:61:
         98:df:06:5c:d9:f5:55:bf:fa:9a:3a:38:4c:f4:85:64:dd:17:
         2f:06:a6:b4:01:d2:e5:c3:d4:e3:00:3e:4a:10:0f:84:30:20:
         07:ed:f7:0b:ad:40:b3:d0:09:06:ba:fe:be:72:db:f3:d2:31:
         26:fb:7e:4c:ff:d8:14:7e:f4:ef:8b:00:71:50:21:af:6d:c8:
         e6:01:a2:58:12:ef:1c:15:70:dd:0c:89:f5:37:12:cb:63:95:
         43:d5:5c:7d:86:df:45:04:31:d4:a3:3d:47:ea:09:18:c5:44:
         ef:12:fa:bf:f2:e3:cb:09:2c:78:03:e3:05:b7:cc:a9:ae:8b:
         3f:78:70:2a:a7:df:0a:80:b3:80:d7:55:2f:60:9b:2a:9d:81:
         57:e6:94:7c:2f:6e:b6:9a:0a:3d:5a:57:bf:f8:4a:9c:e4:06:
         e9:de:c6:2c:af:30:0c:a9:9f:6e:d3:39:a6:fd:e8:2b:96:44:
         10:55:59:71:be:31:d5:e2:60:84:92:90:c9:5c:b0:68:59:44:
         8d:58:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----