Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File:                     avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier:          LYg7jAJdCb9bbMkMLdOG35SajY4d3fODTVsbFSaY74E=
Subject key identifier:   BD:C0:49:84:74:59:43:D5:DE:C2:68:3A:EB:D1:AA:1A:23:D4:58:80
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer:       /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial:       01962ECFD9AFA5EC03514D05B252CDC4970B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number:          0FFF
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
                          2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: BNjrujarkcRKGYAzw0IjLoKfNo8cAMiQOf30nE0NcWk=)
                          3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d9:af:a5:ec:03:51:4d:05:b2:52:cd:c4:97:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=bdc04984745943d5dec2683aebd1aa1a23d45880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:b6:bd:ca:f5:35:e4:43:ca:e6:b8:9a:67:
                    25:c2:7f:b9:90:06:0b:ef:72:a2:6c:cc:7f:c9:4b:
                    10:fb:56:83:47:3d:4e:ea:b2:cc:2d:81:11:4e:52:
                    7b:8c:07:58:09:39:f6:51:e3:6e:cc:a5:09:66:55:
                    eb:ef:bb:5b:22:dd:8b:0c:ca:73:1f:37:9a:f8:69:
                    05:09:44:00:38:cc:eb:ca:81:5f:08:a9:cc:cf:84:
                    af:f7:8a:b5:09:32:55:ad:e5:0b:fe:13:07:66:4b:
                    7e:1d:a1:72:42:63:de:9e:59:e4:1a:f4:53:00:84:
                    43:8c:d2:ec:59:90:f4:6f:53:68:eb:c1:5f:f0:e5:
                    f2:b6:a9:7f:15:0b:b5:5e:ae:1b:98:a7:94:dc:52:
                    83:c3:dc:1f:32:d0:93:ae:c6:8b:64:a2:59:9f:42:
                    de:9b:e0:24:7c:94:6e:24:64:7c:c2:a7:c4:d5:a7:
                    8c:1a:c8:9b:e3:b4:23:69:47:a2:f9:2e:1b:e1:bd:
                    85:ed:81:57:eb:ab:43:3e:ae:37:2c:96:6d:08:14:
                    7d:30:eb:ea:85:65:28:50:4e:13:53:2d:bc:ec:f7:
                    23:fc:63:87:a5:5e:74:47:7f:18:5e:ef:f3:4b:12:
                    29:f8:3c:f0:6d:57:58:45:df:f3:d9:82:96:b7:23:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C0:49:84:74:59:43:D5:DE:C2:68:3A:EB:D1:AA:1A:23:D4:58:80
            X509v3 Authority Key Identifier:
                keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:67:7e:98:6a:52:72:3e:24:f5:bf:ea:95:ff:b0:7e:d8:18:
         25:57:70:a1:cc:5f:22:ca:66:38:12:e4:3a:01:4c:78:dd:18:
         7e:fc:06:5e:2a:c9:e8:49:c3:de:bb:fa:ed:33:98:a0:08:9f:
         59:bb:cf:ab:9d:a8:6d:9d:d6:a8:31:4c:d1:2f:cc:24:d4:ee:
         7d:f5:16:38:84:63:e6:09:ad:b0:14:44:ab:45:c2:af:b1:84:
         d7:83:e9:a9:7d:87:74:a7:fb:dd:cf:c7:f6:55:77:f6:f0:28:
         75:69:68:64:f9:6e:b0:8e:77:31:c9:7f:1d:b0:95:f8:d3:44:
         2a:ad:17:fc:7d:1b:96:c7:18:19:97:db:22:1a:08:5d:ae:53:
         7b:14:47:d3:6a:bc:92:b2:27:05:94:ef:76:f9:45:d4:64:1b:
         10:44:c1:2c:08:1e:c4:25:54:f7:42:c4:a6:80:de:c4:af:96:
         20:98:24:85:d1:1e:0d:38:27:24:17:0e:77:00:a1:6b:96:7a:
         c1:e4:38:66:2a:32:b1:b4:af:62:52:9e:94:1c:e0:28:28:32:
         fa:42:a1:24:d0:77:72:7e:90:40:cb:c6:2b:76:49:81:15:0e:
         05:6b:3e:1b:f8:8f:11:4a:41:d9:eb:51:19:5c:fd:83:8d:39:
         11:a3:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----