Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
File:                     aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft (raw, json)
Hash identifier:          /LcK0B3D4v8+44QszjNJDRqbv2Bhxat/4NYAdQQRDOI=
Subject key identifier:   3A:24:E7:62:7D:98:F8:24:6F:22:9B:F1:C2:43:00:81:71:45:A6:72
Authority key identifier: 68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
Certificate issuer:       /CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Certificate serial:       01962F3D6D4C11625C3C38F67E6FB298C525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
Manifest number:          04AD
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: VftZMAe-HTAVpMfwxes2FDGztqs.roa (hash: KKajIYpdkVhXrGRISoXddoe+7uEBtFz7JC2M/TbIWjs=)
                          2: aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl (hash: r3xMkN/ferVWy9dm3NXF0xcBLWf5epCyyJuLbTL5+FQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6d:4c:11:62:5c:3c:38:f6:7e:6f:b2:98:c5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689c68a45661f90a4059bd8c29a3c967bf92e855
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=3a24e7627d98f8246f229bf1c24300817145a672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:13:e4:c8:1a:61:8f:91:91:24:fe:3d:60:
                    d1:0c:05:b3:6d:47:bc:31:9e:93:1f:40:09:f7:3f:
                    6b:42:aa:dd:2f:68:2d:c7:83:cd:ca:b3:25:56:d1:
                    8d:a9:6e:49:1c:af:a3:2c:ef:b1:04:f4:02:fc:7e:
                    36:72:f3:9b:a2:a4:a0:2d:d4:97:df:9f:13:67:40:
                    23:e4:9c:ac:71:ef:4c:90:e8:22:90:3b:4e:aa:08:
                    c8:2c:d6:75:d3:4f:c1:c8:d5:56:96:f3:b6:b5:5d:
                    62:0d:bb:61:07:4c:fb:cc:5d:a4:d9:95:cc:ab:cc:
                    62:60:93:db:40:26:02:d4:0e:6f:f5:58:db:2b:76:
                    86:6f:17:94:f1:d4:74:3a:d6:e1:40:92:0c:eb:59:
                    24:35:90:f4:5f:72:4f:14:b4:c4:28:8c:8c:6b:cb:
                    4f:fd:4b:02:91:d3:74:e7:9c:d2:1a:97:8a:2f:f0:
                    a4:80:f5:ef:a3:14:16:42:27:fe:ff:74:b9:7a:00:
                    82:12:5d:ee:e3:88:36:6a:5b:c7:bb:49:cb:59:9f:
                    a1:eb:5e:e4:75:46:37:2e:66:2a:b9:57:55:b2:c7:
                    d6:3a:4d:0c:44:22:dd:73:fb:99:7b:d6:c3:46:9c:
                    2b:d8:60:cc:4d:cb:40:64:35:79:89:6a:5b:52:4c:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:24:E7:62:7D:98:F8:24:6F:22:9B:F1:C2:43:00:81:71:45:A6:72
            X509v3 Authority Key Identifier:
                keyid:68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:08:a9:0d:3c:95:98:d0:a0:48:06:32:35:99:18:c2:27:43:
         b3:ad:56:20:42:44:8a:7b:88:7c:2b:7e:54:b3:5f:a8:75:59:
         09:8b:e6:1e:f8:f6:8b:a0:2a:fb:38:cd:3a:13:5b:e8:f1:75:
         29:45:44:97:25:69:2c:42:87:e6:b1:3e:33:15:86:c8:70:4f:
         b1:4f:5a:d3:d6:c8:61:96:34:4c:3e:d6:4a:36:5c:8b:36:79:
         00:9e:81:92:5b:ed:7b:e9:7d:da:2f:da:35:36:46:3a:26:17:
         75:46:cd:e9:b2:20:59:4a:35:1a:78:90:08:f7:a4:95:9b:18:
         7f:98:8f:71:11:d0:30:69:f7:77:05:4a:6d:80:aa:c9:c6:3c:
         25:d4:85:c0:c8:a3:89:bf:7b:a8:99:b6:6d:8d:b1:40:a6:eb:
         e7:b8:6a:46:0f:9c:c0:c7:76:05:33:e5:40:8e:d8:c1:8b:59:
         05:62:e1:da:eb:35:2a:82:10:9a:8b:89:0c:1e:69:84:7d:a6:
         88:23:f9:9e:7a:f4:e0:98:d3:83:a1:89:3e:b1:e6:fa:d6:6f:
         ea:83:b6:ec:f4:39:d3:36:56:d6:7e:a2:e4:48:46:db:f1:78:
         a2:2d:07:a9:9a:04:7a:d4:19:f9:9a:fb:dd:c0:ee:82:dc:5c:
         58:2c:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----