Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File:                     aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier:          mlcki3pSa9bi8tbt1QLdJ5Hmt0xegpHGA9Z3WV08JO4=
Subject key identifier:   8E:F7:0E:D0:3C:08:22:98:CD:0F:A0:AB:FC:96:77:F8:54:FD:D4:94
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer:       /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial:       01962DF3B675A061BD3BFEAF946E0B3775E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number:          03D7
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
                          2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: fYVSH8EwONWhVkHpIYyxk88M5z35yEgbxBVGFPByWYo=)
                          3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b6:75:a0:61:bd:3b:fe:af:94:6e:0b:37:75:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=8ef70ed03c082298cd0fa0abfc9677f854fdd494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:c3:4f:ec:82:81:6c:c8:85:36:fa:ee:e4:
                    52:db:c1:0a:8d:e5:87:8c:f2:91:d2:8a:fa:e4:81:
                    7e:51:29:80:42:99:7c:a8:7e:af:05:5e:33:0c:f4:
                    9f:9c:2c:4d:60:82:5b:8e:cc:42:16:b8:b2:60:aa:
                    8b:99:ad:8c:a2:de:cb:11:b9:b5:67:1a:74:89:1a:
                    ee:2b:d5:9a:7b:4a:89:da:23:52:26:83:72:69:f2:
                    8c:72:ba:30:81:2f:ee:bd:2a:15:00:93:84:61:d5:
                    7d:14:0b:0e:e0:68:56:86:63:f3:08:24:10:eb:be:
                    17:ab:3f:1f:b0:da:32:05:7a:e5:cb:bd:b2:bb:61:
                    90:e8:f3:10:bd:0b:7d:23:16:0e:eb:2b:4c:dd:0c:
                    8b:2e:91:a5:f1:2a:a2:fc:a7:93:d5:13:80:af:78:
                    8a:ef:63:01:47:82:c5:75:54:49:57:a3:be:b1:e4:
                    9d:8c:ea:bc:dc:db:59:09:fe:57:a8:ff:f6:9c:5b:
                    c6:ec:b6:20:7d:17:f7:0b:76:3b:29:8b:38:00:b2:
                    71:0e:c0:20:59:2e:bc:e5:6b:4b:40:15:6e:7e:f3:
                    c8:0b:f6:af:d9:13:d1:37:3a:b8:7a:5b:41:fc:3e:
                    89:99:6f:08:fd:bb:69:7d:b2:97:40:b2:9c:84:6a:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:0E:D0:3C:08:22:98:CD:0F:A0:AB:FC:96:77:F8:54:FD:D4:94
            X509v3 Authority Key Identifier:
                keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:81:50:b0:6f:7e:24:fb:9f:be:d2:bf:90:93:9a:6b:12:
         ab:7a:88:75:4f:15:5c:07:ec:21:e5:62:9f:77:04:fc:0e:1e:
         25:3c:5c:9a:84:51:13:46:3d:f1:d9:79:1c:06:c6:e2:f5:06:
         1d:29:37:7c:01:7f:80:20:99:3d:d6:06:a2:7a:93:1f:6a:96:
         09:66:c4:b4:1c:2e:09:c5:cc:e5:35:57:29:bc:ef:0f:cd:6c:
         bb:ef:30:eb:6e:7b:e4:f7:8d:a3:9c:3c:83:55:7c:1a:53:72:
         85:68:4e:83:52:0c:61:5c:eb:18:d1:26:f9:61:9f:8e:8e:51:
         09:4a:de:34:e4:18:ac:c2:fd:39:74:c3:90:75:02:26:a4:60:
         b1:4f:1f:81:26:2a:32:dd:87:51:62:f4:82:49:71:b7:37:74:
         49:9b:38:2d:5a:d4:a3:fd:7a:6c:12:42:09:1f:18:d7:eb:45:
         c1:fe:ae:c2:37:ae:3f:2f:9e:39:1c:74:30:c1:f7:3e:9d:1e:
         ce:b1:b7:d1:d9:b1:6b:e1:92:d8:bd:77:83:b4:b3:c2:77:e9:
         16:e7:43:04:e2:86:a0:6b:59:96:85:dd:64:8b:5e:73:6c:0d:
         cf:b6:d9:b0:42:08:cb:83:bd:5c:90:76:5e:3b:2f:10:47:1f:
         ce:3a:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----