Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File:                     asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier:          s2eJpuN2YIgw/5RsJP02U8QjQLQ9g+IfaNmJAniyq+4=
Subject key identifier:   0C:D2:A0:DF:5A:DC:95:E5:AA:54:81:0E:15:E1:B6:AD:2C:A5:61:1B
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer:       /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial:       01962E9893CF30E02C2AC0EE39ED1E4B9B30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number:          0E69
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
                          2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: MoioTFuGoOTTrbC/UNrwcl6Gii71pEziblEAT1g58Ig=)
                          3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:cf:30:e0:2c:2a:c0:ee:39:ed:1e:4b:9b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=0cd2a0df5adc95e5aa54810e15e1b6ad2ca5611b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:25:b9:ee:af:85:60:ff:5d:34:22:91:db:
                    14:3c:e4:b8:bb:33:1e:60:52:4c:05:c3:6d:0a:ec:
                    14:47:ce:11:2d:f2:75:32:25:2d:aa:0d:0f:84:84:
                    86:98:07:bb:61:dd:2b:5b:d5:bd:2f:71:1f:3e:db:
                    e6:48:d5:ae:54:60:0f:fc:25:aa:8f:57:1e:89:8b:
                    36:99:4f:24:33:13:d5:a9:15:9b:68:05:a5:e7:0b:
                    32:ad:d7:a4:00:d1:a2:5c:72:8d:8e:bb:f1:85:d9:
                    61:71:cb:7c:bd:9d:0f:11:f9:20:48:42:5e:5c:30:
                    82:47:76:96:95:c4:84:34:ba:ea:19:1f:1a:0a:11:
                    be:69:f4:d2:1f:20:76:0d:04:02:34:64:3b:ed:f3:
                    4e:2d:c6:a6:c8:fc:76:36:94:9c:ea:28:21:51:4c:
                    04:3b:65:45:41:da:ea:3c:1d:d9:05:c2:e0:da:0b:
                    fc:52:8c:0f:f4:62:33:bf:9c:dd:9e:f2:91:e3:b7:
                    0d:84:8a:6a:c4:24:df:c4:ec:51:cc:f4:32:3d:ba:
                    cc:70:35:03:d8:cb:31:c9:48:35:0e:8f:63:39:50:
                    e7:5d:0a:32:18:3c:7a:93:da:c4:bf:bc:08:fb:83:
                    86:a3:08:e0:18:f1:63:67:73:7a:58:4e:a2:3c:57:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D2:A0:DF:5A:DC:95:E5:AA:54:81:0E:15:E1:B6:AD:2C:A5:61:1B
            X509v3 Authority Key Identifier:
                keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b7:5d:fb:c5:11:b4:dc:07:49:5f:39:ff:e9:03:2f:97:b9:
         56:c9:2b:71:07:f1:2a:31:84:f6:ca:2c:6f:d4:57:3d:e3:3f:
         f4:7b:de:29:93:5e:a7:df:5a:fd:6f:46:0c:79:e5:a1:0a:b0:
         7a:ae:e6:7a:b1:c0:f9:54:2c:f6:92:6b:d7:17:d7:2c:9d:3a:
         fe:af:2d:33:ef:49:dd:4a:c4:dd:e3:5c:8b:21:0c:ae:5c:a5:
         51:1e:32:30:d3:66:38:ef:90:a0:61:71:b3:4d:69:ba:3d:37:
         77:92:bd:a2:ed:29:c2:0a:ba:5e:a3:83:57:a5:5d:7a:21:04:
         7f:e1:54:e0:a5:7c:e1:03:0e:e5:3d:5f:a5:a9:56:80:47:6d:
         f5:69:a4:f2:c4:41:28:f8:35:a0:11:49:a8:0c:f9:d0:13:06:
         24:55:23:f0:b6:81:22:f4:19:42:16:ad:f6:a6:5d:d9:46:a0:
         cd:40:ad:e8:bc:98:67:b5:d3:c4:1d:84:25:99:cd:63:87:3c:
         30:62:9c:cf:86:fa:00:c0:9e:da:d9:19:ee:ea:3a:6d:a8:33:
         6f:e2:25:80:5e:3e:49:57:05:da:f6:6b:44:52:d0:f6:c4:84:
         6e:0e:81:9d:23:f5:69:b9:dc:9a:7d:d8:a1:71:c8:16:81:07:
         3d:98:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----