Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File:                     AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier:          5n7njWJoAfhXN8EwOHJyNuW1dPebIoFCsRtQenxx8yE=
Subject key identifier:   48:64:6E:96:1E:42:F1:00:64:B4:7A:D7:AB:9C:61:B0:E0:4B:EB:77
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer:       /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial:       01962F066342FEFD6A369712CA387B869E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
                          2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: uTfzmRccKZ/xKSLzeEZp/Fnn6xc7FB2lfzkpr960b9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:63:42:fe:fd:6a:36:97:12:ca:38:7b:86:9e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=48646e961e42f10064b47ad7ab9c61b0e04beb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:eb:85:26:e2:12:e9:3d:84:f9:03:e4:4f:
                    77:cf:c1:f2:e6:f5:9c:2e:d9:33:c3:2f:b4:e0:24:
                    4e:35:0d:62:51:bc:4a:89:8f:0c:89:f9:d1:38:a0:
                    93:35:14:20:eb:21:4d:51:1f:6e:94:08:6c:3f:4e:
                    91:bb:60:ee:7c:e9:0e:62:a5:6c:09:36:42:4a:af:
                    12:de:be:ac:ad:95:b4:69:4f:a1:62:28:0a:99:a4:
                    97:03:18:02:3e:b1:d0:a7:60:5a:bc:1d:58:5c:b0:
                    0e:d7:de:b7:14:17:14:64:b5:6d:9a:4b:b3:27:ac:
                    a3:a2:86:a9:05:94:27:10:7b:76:5d:ed:c9:f0:9d:
                    96:da:5f:f7:cd:81:8a:50:d9:77:d2:ab:80:96:4e:
                    5b:91:0a:cd:9f:01:dd:71:b8:05:0e:51:bd:86:79:
                    48:1d:b6:ab:0b:83:5d:cf:6a:fb:98:b7:71:31:4f:
                    e1:80:1f:61:9f:30:f0:73:11:6d:55:c4:ef:66:7d:
                    cd:7f:23:ef:b1:3a:46:4a:76:c7:a9:17:45:a8:41:
                    3a:ce:77:04:9a:29:19:35:8d:ae:b7:fb:b9:0b:10:
                    27:21:94:74:8f:28:1b:fc:b7:5a:b2:d4:45:75:e2:
                    58:9d:a1:ee:64:0c:d3:6b:bb:e9:83:58:59:88:17:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:6E:96:1E:42:F1:00:64:B4:7A:D7:AB:9C:61:B0:E0:4B:EB:77
            X509v3 Authority Key Identifier:
                keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fb:a6:10:8a:48:c9:d1:89:bc:af:58:c4:79:a6:f6:69:c5:
         a6:55:fa:17:8e:e9:d9:80:d2:05:88:12:96:c8:22:8f:f3:48:
         08:c5:e3:dd:1a:fb:1b:2c:24:5e:dc:67:f4:ea:f2:4f:1b:37:
         cd:02:28:7e:69:03:83:ea:76:f3:17:2f:1c:0c:3f:f0:2c:45:
         20:ab:19:df:b2:4f:b1:61:59:c3:32:56:a8:e1:13:14:b7:cd:
         98:53:93:62:00:9e:55:a1:10:22:5e:a4:0e:28:20:69:f6:33:
         ea:d3:06:b2:e8:52:d3:83:a4:b6:96:a4:0a:77:73:7d:0e:6f:
         c5:2a:cf:c9:02:38:c7:42:2a:14:94:60:5f:94:ae:a4:35:d8:
         73:88:20:d2:86:b6:4f:dd:19:4e:5a:c7:42:be:c7:eb:4a:66:
         0d:31:76:9c:a9:56:41:43:1d:56:50:56:ff:75:aa:d0:61:92:
         32:12:28:ee:7c:fb:48:60:2d:47:e9:1f:cb:a0:5e:8d:a8:61:
         8d:16:6b:01:42:95:2c:90:ee:82:4a:06:3d:73:b8:e5:41:fc:
         6c:d3:5d:0d:70:3b:fa:f1:f1:76:f3:86:6b:39:ae:1a:43:51:
         6d:88:88:65:d4:0f:3f:24:f0:68:d1:fc:4c:42:82:3f:43:aa:
         55:89:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----