Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
File:                     Ami5ML7spR-_NUP-efmxk0XPE9U.mft (raw, json)
Hash identifier:          kZ61S7Yv80/dDhyxtADJI5SlNTVab6Nrg3483hM2xZY=
Subject key identifier:   29:49:7D:93:34:9A:35:A3:8E:35:32:66:0C:73:88:90:8D:68:B6:B7
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Certificate issuer:       /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial:       01962E2AF10FE448D8A7486604E4C2791104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
Manifest number:          0AB4
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 7ocFAoRHk3yJWF4ccbCKPsPczz0.roa (hash: 3rzZftACx3aNRwkNijs0bb/ATBefsoIo/62WXVgzLj8=)
                          2: Ami5ML7spR-_NUP-efmxk0XPE9U.crl (hash: nrkvNvWML7gPZ0SpDb80jWsTubEP8aNJjYG74Ihv0jA=)
                          3: KQ2gfKjDTAqDCIF8rg6ctK4u8jw.roa (hash: SW1oNVSy3V9mCkDE3DhSyTP3T2L66HAY6yybOJ8XTqM=)
                          4: z58icxsnW3D1G-Tg8oJfAEu4K30.roa (hash: 2xl+ZWAT8+7LeSxTlZeMXeVfz1ij8cub6sBtbC4Yv/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:0f:e4:48:d8:a7:48:66:04:e4:c2:79:11:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=29497d93349a35a38e3532660c7388908d68b6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:6d:ff:ae:e8:76:86:20:8b:5e:0f:e3:f5:
                    44:72:1a:af:cf:b3:dd:5b:37:de:58:32:5b:35:08:
                    d9:79:03:da:24:40:e7:db:f9:73:28:18:a0:64:1c:
                    54:7a:5f:0d:16:77:12:f9:39:e7:49:4b:d9:34:78:
                    6e:21:3a:b8:4b:4b:1e:85:fa:d2:99:b8:2a:97:44:
                    b9:4d:81:4b:fb:07:b4:bd:0f:13:f3:d9:03:11:a6:
                    1e:fd:b8:9e:a1:64:dd:b9:28:b4:45:e2:e8:96:36:
                    53:2e:f8:66:b7:08:6c:e2:80:7e:99:76:8a:da:27:
                    7b:b3:a2:9f:0f:73:e3:34:6a:fa:61:99:af:31:8e:
                    c0:9c:ca:be:26:8e:74:af:70:06:f0:a7:0a:31:a1:
                    78:c7:4c:ad:a6:8d:04:0b:84:09:dd:0e:90:6b:a6:
                    cf:4e:c3:b4:53:8b:2c:a4:6d:7e:6b:c2:83:f1:c0:
                    9d:41:4c:e2:dd:7d:a2:93:cb:6a:e6:76:82:71:08:
                    63:9b:e2:ce:31:d9:7e:57:3e:d5:10:4b:75:a0:c5:
                    7f:76:ba:17:1e:d9:9c:8a:73:81:a0:24:87:fb:af:
                    f0:2d:d8:44:0f:42:05:8c:85:d6:a5:ac:2c:9d:33:
                    66:0e:b6:40:25:ab:25:0e:86:5e:62:cb:6d:21:fa:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:49:7D:93:34:9A:35:A3:8E:35:32:66:0C:73:88:90:8D:68:B6:B7
            X509v3 Authority Key Identifier:
                keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d3:14:04:f1:11:e6:05:79:8d:7c:fa:db:24:f3:4c:08:2b:
         ab:03:a5:35:31:79:12:40:cd:03:d0:e0:d9:86:3b:0e:cb:ba:
         70:94:72:d8:c4:df:b7:20:24:72:ca:0f:5e:dd:27:22:23:8d:
         5a:07:b2:c8:36:6f:d8:79:8e:07:5e:95:ce:01:ea:ef:3f:70:
         78:a1:a6:b9:68:27:2e:4e:31:8f:bd:49:1b:49:10:4f:05:dd:
         3e:e2:bd:cb:c4:3d:9b:6f:02:b6:c4:7a:a9:b4:dd:69:ff:3f:
         02:0b:29:a3:13:33:ad:b3:bc:ea:b8:40:00:2c:e2:34:50:82:
         a0:d1:0c:90:e9:71:e1:b7:4d:d5:18:ce:f1:5e:b6:82:20:49:
         cb:48:43:86:48:bc:39:47:f0:c9:ec:3c:bc:b4:f5:64:5d:17:
         8e:0f:98:eb:66:f3:be:dc:87:0b:fa:cd:ac:7f:1f:d1:ee:75:
         f5:90:8f:91:ac:f4:7b:6c:4b:65:7e:4f:78:26:5d:ff:73:88:
         a9:02:04:e2:46:85:18:6e:48:9c:95:01:1d:d5:7d:6e:ab:ba:
         05:17:61:93:11:69:7f:11:6d:79:d1:3d:53:52:47:e1:92:2e:
         42:7e:dd:cb:1c:7a:ee:d9:8e:7c:0c:5a:73:8f:3e:36:d9:4b:
         40:70:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----