Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File:                     rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier:          +mfOCqxXx95y/3GTXsmcavm864mMqw/jiiQJYg3lnsI=
Subject key identifier:   04:B3:79:5E:3A:08:84:E9:2E:30:F1:8B:61:D2:5A:1D:95:66:32:E7
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer:       /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial:       01962F3D95B8C43660F5476BB3220A7AD59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
                          2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: 1Ho5ZNn1QG6iBjHfp0vDIJmEm0V4vtVk2UeUeuzR1Hc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:95:b8:c4:36:60:f5:47:6b:b3:22:0a:7a:d5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=04b3795e3a0884e92e30f18b61d25a1d956632e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:66:e9:8f:22:52:a6:24:af:60:26:30:fd:
                    ea:a6:bd:8f:bf:d7:f0:b3:33:4b:77:e3:72:15:d3:
                    bf:de:7c:8f:d3:8a:a1:7f:e6:cc:55:b9:0a:a3:d5:
                    2d:c3:fc:35:d4:90:1d:b5:bd:c5:c8:93:02:ef:33:
                    98:58:aa:bc:e1:8f:e4:5d:7b:98:03:8c:5a:78:b1:
                    5a:64:73:65:67:22:88:8c:89:8b:98:da:13:bf:6b:
                    39:57:3e:0b:55:40:c7:65:61:6a:17:41:d4:b7:e3:
                    3a:d9:2d:2b:c9:ef:fd:a6:dc:bf:d4:0c:72:52:30:
                    ae:69:d6:ad:14:2b:d9:b0:2c:a3:79:5e:2c:c7:f0:
                    a2:a1:c1:ef:36:6a:40:4e:eb:f6:42:7e:09:15:ae:
                    13:7c:18:d5:c6:59:93:27:88:1b:22:0c:2b:c3:cf:
                    78:c3:30:fc:ca:79:49:9b:7f:0a:21:77:bd:bc:cf:
                    d0:55:66:b8:a4:7c:a6:df:bb:a7:fc:35:fe:d6:3b:
                    1c:2f:7d:b8:fa:f7:e5:b6:cd:68:d1:81:55:ad:ca:
                    e5:13:e3:b3:25:ce:8f:3f:25:e6:9e:24:bd:75:e6:
                    24:c8:ba:88:1e:58:75:da:9b:38:96:ac:a6:24:55:
                    f6:05:7d:99:b6:18:1c:2d:0e:22:f5:f6:17:65:1c:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B3:79:5E:3A:08:84:E9:2E:30:F1:8B:61:D2:5A:1D:95:66:32:E7
            X509v3 Authority Key Identifier:
                keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:f6:11:0c:c8:76:ae:d5:91:63:06:71:69:1a:84:29:80:
         d7:89:ac:03:98:09:a4:07:18:39:29:11:a6:9a:00:4f:91:2c:
         76:78:0f:4c:a2:59:5b:d4:43:7a:f0:b6:d4:49:51:4b:61:a0:
         e5:80:14:93:4c:c4:4e:41:d2:2a:a6:76:ce:05:9c:73:f9:8d:
         88:fe:02:9e:0d:94:a7:93:39:24:29:0f:5c:05:90:9b:40:4d:
         c4:70:ff:04:78:05:13:0e:8f:14:5c:19:04:ef:bb:bc:9f:ba:
         51:0f:eb:33:88:15:d1:3b:32:58:df:da:dd:04:c4:33:2b:85:
         74:ca:0a:ed:05:2a:e7:9a:aa:15:b3:85:d0:56:29:c6:de:65:
         5c:73:ae:95:74:76:f5:8e:a5:04:cf:3f:67:63:12:47:32:ff:
         34:42:90:ab:61:f8:d8:76:a5:37:07:f1:c1:1d:54:c2:fa:66:
         ec:3e:59:20:67:38:d9:57:ae:43:a4:71:ca:a9:4f:97:81:41:
         69:32:53:f7:75:d6:23:a6:55:f5:51:db:f6:b8:26:f5:85:81:
         ec:01:b9:13:04:e8:64:fc:1b:ce:49:f3:69:70:8f:2b:61:27:
         b7:b8:fc:8d:03:f7:0b:6a:c5:67:38:7a:6c:ff:6b:8f:1b:b8:
         6c:3b:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----