Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File:                     AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier:          g3pARoq3HNDd3/8x+VSKvDJzhNqzO3gOmefZvgdMKNo=
Subject key identifier:   F3:1F:62:52:42:D7:D4:00:47:E6:21:41:6E:9C:AD:FB:80:0B:5B:83
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer:       /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial:       01962F3DB957885B0F29138DD3E86B2637E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number:          0DAC
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: KAI8WRZr51a9VKq9cFaEvzAzZw1wY0xZxtEBQcGK05U=)
                          2: D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa (hash: 4lHXyj3pRBx2LFAwlRyUS6mFr8ntH6TaBTAezCtdNUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:57:88:5b:0f:29:13:8d:d3:e8:6b:26:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=f31f625242d7d40047e621416e9cadfb800b5b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:c0:ef:10:8e:06:ca:29:48:85:b5:15:98:
                    89:11:9a:70:61:9a:6f:09:61:f5:c9:e4:29:36:3e:
                    f9:84:29:21:bb:f8:22:10:7c:37:c7:cf:92:0b:5b:
                    9b:c7:a4:10:32:c9:55:65:8b:5d:fe:6d:aa:72:1d:
                    cc:82:4d:54:8c:93:0d:04:46:fe:9e:c9:9a:6d:20:
                    62:de:2a:09:b3:1e:56:a3:3a:e0:48:65:bf:11:f1:
                    e6:39:a5:99:d4:79:d1:4c:44:42:57:ea:d7:cf:5b:
                    39:cd:d3:31:24:a9:ec:6c:88:cf:f1:38:ec:16:7b:
                    78:de:d7:03:41:fa:01:54:30:59:66:7e:92:e1:40:
                    eb:18:72:3f:bf:03:6b:a0:83:a7:fb:3f:19:c6:a7:
                    7c:77:fe:af:5b:7f:5a:bb:89:c4:00:09:41:05:82:
                    8e:cc:73:c0:5f:ed:ca:6e:fe:d7:9d:7f:d4:2e:b8:
                    b8:99:f1:9d:be:a0:d2:c3:5b:2b:8e:ef:ec:15:92:
                    6b:b4:77:44:0f:83:f9:f4:65:4c:b3:ba:e6:ba:2d:
                    d8:a8:5e:5c:de:c6:ac:09:30:69:83:26:51:3a:e3:
                    f5:71:ff:2d:a8:36:37:4f:3e:1a:38:0c:1c:e2:31:
                    a3:78:2c:a5:7d:2b:ab:ef:b6:fc:eb:71:fd:e7:c1:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1F:62:52:42:D7:D4:00:47:E6:21:41:6E:9C:AD:FB:80:0B:5B:83
            X509v3 Authority Key Identifier:
                keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:33:e8:d2:af:e7:25:c3:24:d8:a8:0a:0d:60:63:de:f7:
         46:56:88:04:ff:c0:35:4c:5d:df:05:22:e4:37:d1:f7:a2:93:
         eb:c3:85:16:66:40:b7:94:f5:ab:dd:e2:e0:1d:d0:26:5e:8f:
         83:70:76:8e:05:dd:03:af:de:fb:97:bc:a6:99:2b:68:26:68:
         1d:b9:b8:0e:98:68:f8:4a:99:61:6e:27:98:b8:34:5e:0d:42:
         8b:09:f6:78:95:ee:e6:05:2e:1e:cf:33:24:4f:5e:19:91:04:
         3e:7a:52:f0:ca:5c:dd:fb:b8:86:f5:4c:a9:68:f4:8f:4e:48:
         f2:22:72:2e:c1:cd:60:9b:8b:08:b3:3f:4a:da:f3:d4:58:df:
         83:4a:31:50:c6:05:5d:0e:05:f1:36:84:f9:cd:80:60:0f:28:
         d1:38:f6:82:05:e7:50:9b:16:00:ae:31:04:a3:fc:7c:7d:79:
         8c:0f:81:80:48:04:56:89:a3:9b:9d:a1:0d:13:3b:1f:5f:ee:
         5b:a3:03:e2:fa:9a:76:0b:0e:30:59:36:d2:38:ef:0e:f0:91:
         65:ab:f9:c4:ab:da:c2:a3:a3:eb:b6:25:b1:e2:31:8a:23:a3:
         f5:3e:4b:87:a6:b4:dd:62:8c:e8:27:c6:e2:66:2f:fa:28:fa:
         fd:0c:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----