Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File:                     AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier:          fM1Q5aSdXk2s+c7ja5S1t7QCN1JlYHNnLLoHWwalMjc=
Subject key identifier:   4B:C7:6F:B4:6D:7D:94:ED:37:57:9A:E9:FC:57:39:89:50:90:2F:14
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       01962DF40162D21A9BB187161DF9E13C82C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number:          0E6A
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: ygbYOgut5gn4tv/kL5xdqvrJUpQKBtbhmveRPJ/Sj5g=)
                          2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
                          3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:01:62:d2:1a:9b:b1:87:16:1d:f9:e1:3c:82:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=4bc76fb46d7d94ed37579ae9fc57398950902f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8a:f6:86:58:b3:66:a2:d5:7c:75:9b:16:76:
                    de:ae:09:50:01:bd:0d:ff:e7:9a:12:99:84:88:59:
                    a9:c2:17:f8:37:ce:2d:4d:2a:7e:60:7f:50:68:09:
                    44:7c:32:d6:82:8d:c3:6b:ef:80:ca:7d:54:05:b0:
                    81:82:8e:3c:3c:1c:cb:81:7d:79:50:4e:97:03:cd:
                    e9:9c:e1:6c:65:00:fe:a2:cc:ea:b4:77:4c:df:d7:
                    83:8d:63:0f:62:6c:f9:7b:6d:79:da:db:82:b4:66:
                    e8:ab:f0:46:df:ff:78:68:a3:10:db:63:bc:f9:76:
                    b4:3a:7e:99:2d:e4:c7:5c:94:91:82:00:0e:dc:3b:
                    47:07:71:6e:24:b7:bb:c5:0b:1b:e6:fe:01:07:4a:
                    74:7d:d0:58:93:1b:38:72:c9:7e:3f:d1:37:2a:5e:
                    4b:c7:1c:98:fa:0f:0d:86:86:17:1c:36:33:b5:8e:
                    db:58:b8:d0:fc:27:0a:4d:52:c1:d8:71:7b:fa:ea:
                    c4:e7:71:2b:61:d7:7c:cf:22:42:d9:7f:d5:5c:24:
                    a3:f3:b3:45:e0:84:3f:bd:75:05:38:f8:0c:d6:38:
                    c4:63:0a:57:1a:02:59:bb:5a:e2:e0:1c:9e:03:21:
                    23:ac:78:a1:7e:20:ff:8e:e4:94:e2:2f:b4:2f:86:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:6F:B4:6D:7D:94:ED:37:57:9A:E9:FC:57:39:89:50:90:2F:14
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:98:dc:5b:62:fe:23:3f:63:22:61:cc:7f:9b:03:77:ec:a8:
         aa:86:0a:08:36:80:7f:bc:bd:2a:59:f6:81:4e:fe:d4:11:42:
         23:bd:34:58:ab:9f:1c:59:33:68:f5:06:30:2e:73:3d:d6:c3:
         e5:f1:5a:10:b5:fb:ca:db:46:e1:18:cb:d8:ec:80:b7:73:02:
         b1:0d:4a:ac:50:e0:34:16:ff:80:2e:eb:2c:85:4d:bc:ed:a4:
         ec:a6:a0:ec:e7:34:64:49:81:4a:25:43:ba:c6:32:48:15:b4:
         4c:06:75:5d:24:d9:8a:b4:54:89:5a:b1:74:53:12:c4:f5:7e:
         3e:f2:b5:a9:cc:67:6d:af:00:4d:0a:1b:3d:c0:3c:db:3e:3d:
         48:35:cf:f8:01:b2:9a:bb:42:59:eb:2b:98:bd:5a:09:33:e6:
         67:d9:ea:8b:b5:a6:1d:6e:82:bc:81:c5:94:71:75:10:8a:22:
         bd:6f:09:bf:ce:75:fd:d6:94:2b:67:95:8a:d6:11:64:1a:c2:
         67:ed:b1:8e:cb:08:4a:4c:be:8c:eb:7f:a8:0a:98:57:8e:e4:
         5a:73:4e:85:c8:9b:ae:7f:4e:a2:1b:2b:0e:b9:9d:68:d4:6c:
         d9:4e:e8:08:24:db:27:18:20:4f:e8:26:90:cf:7a:03:40:de:
         63:00:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----