Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          ucmhywAo+gfzfdH6RqyvrakHs2MCFyeqqMJEwnH7hIY=
Subject key identifier:   3F:0D:92:02:44:4A:49:61:62:EF:B2:13:CA:F5:33:AE:14:DA:03:A1
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       01962FAB5D9AB6438A306EC201395B92E78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          0641
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=)
                          2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=)
                          3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=)
                          4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: a2fGPuScL9OgV89UwEumxWudzPp18hT33J1kjS5dYXg=)
                          5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=)
                          6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:9a:b6:43:8a:30:6e:c2:01:39:5b:92:e7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=3f0d9202444a496162efb213caf533ae14da03a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:3a:5d:c6:d5:ba:ac:54:7a:a1:c7:12:cd:
                    91:1c:0b:30:a0:f4:b7:1c:fa:d6:81:4e:ed:65:fb:
                    6e:20:23:a8:ec:bd:ea:82:13:8c:3e:4d:35:2a:53:
                    1e:2e:be:ae:f6:13:3c:03:da:4b:04:cc:1d:f0:d9:
                    ef:5c:cf:18:32:15:7a:65:5f:36:49:06:4f:e8:f8:
                    79:cf:26:14:fa:01:ec:f8:13:9b:29:57:36:49:c2:
                    a8:08:31:38:f7:0a:57:69:be:88:39:39:a0:da:9e:
                    71:79:d6:cc:22:58:fb:6d:15:27:1e:52:50:a8:fa:
                    cf:1d:52:7b:e5:e6:93:d3:3e:1d:bf:ba:22:47:97:
                    ca:3c:a9:93:04:fc:74:36:30:d8:27:84:6c:67:5e:
                    a1:58:4a:08:11:c9:cc:f7:f1:3c:b2:10:5e:85:fa:
                    01:a8:1b:a6:05:d4:28:92:d7:15:dc:f9:c2:bc:e8:
                    a5:3e:9c:4e:9d:c1:85:76:f9:40:91:d7:07:b8:bd:
                    f7:6b:e1:0d:bf:17:2a:2e:3e:83:44:52:ac:fd:52:
                    66:db:5c:61:9f:36:cb:26:38:82:27:c6:9e:b6:7f:
                    58:a3:3f:6a:6e:fa:da:90:ee:c0:ed:29:ed:0b:bd:
                    d1:c7:6f:4b:fc:f7:20:14:30:13:00:d0:3b:ef:88:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0D:92:02:44:4A:49:61:62:EF:B2:13:CA:F5:33:AE:14:DA:03:A1
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e6:1a:32:95:df:a2:93:96:c4:b3:82:df:76:18:62:ef:ee:
         f9:d0:3e:86:11:c9:ab:fc:3a:96:05:77:2d:6f:1d:40:e6:32:
         d6:da:32:46:a5:11:1d:20:85:de:c7:8e:17:a3:cd:7f:b2:4b:
         d5:0f:43:b5:41:20:3d:f6:64:51:e0:60:40:e9:2d:4d:fb:cd:
         81:1e:39:dc:99:5b:a0:f2:b0:8c:bd:8a:65:51:06:a0:71:13:
         78:59:4b:52:a8:7e:7b:1e:f1:9d:9f:6c:b2:2c:98:df:2b:ae:
         f5:2a:37:41:92:fb:0a:e2:1f:c7:1a:da:2f:d4:26:55:7f:16:
         8f:ce:7a:2a:56:c3:be:03:7b:dd:d9:eb:3e:89:3a:15:9f:2b:
         0a:9c:8c:09:5c:18:ed:ec:e6:40:c0:02:43:cb:77:5c:a4:d7:
         4c:96:90:c5:32:8e:b5:16:92:fa:42:a7:23:12:94:dd:d4:5e:
         63:4b:0e:e7:de:63:f0:b5:eb:72:ec:9a:0f:79:66:10:81:a1:
         9f:1a:0b:4d:ab:89:39:32:53:09:c8:71:48:33:d4:3a:59:b5:
         40:ff:65:b3:dc:e1:ee:48:83:65:2d:32:6d:9a:9f:94:19:cf:
         68:61:d3:76:49:6f:e5:db:25:00:78:39:55:d6:a5:cd:70:29:
         0d:1f:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----