Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File:                     rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier:          vdS9NfN1oiOWi0/EnhwPR2uwGIZKaMx5ktqhsR2MoTQ=
Subject key identifier:   0F:7E:6A:90:9F:1B:EC:58:F9:06:40:1D:43:2E:46:7B:3A:CE:B6:68
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer:       /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial:       01962F3DA72049737002A152625CA6D8FAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number:          068E
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
                          2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: /A5O2RtRDHPtRuzvDllgFAcIpmcVzNWPPhtbXNynTbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a7:20:49:73:70:02:a1:52:62:5c:a6:d8:fa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=0f7e6a909f1bec58f906401d432e467b3aceb668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:99:f9:b2:88:ca:d7:d3:a2:7b:e1:de:05:
                    17:ed:f8:ca:49:d9:07:40:78:cb:91:5c:6e:3a:ed:
                    be:73:38:f4:4d:f2:f6:ff:c5:f3:33:93:0a:83:85:
                    73:e0:b8:76:0e:a6:69:30:c4:4d:3f:00:3a:10:6a:
                    b7:7d:5f:4c:d2:8d:1d:42:83:74:e4:9e:cf:4b:7d:
                    86:d4:db:f8:44:76:bf:21:7f:30:b4:71:b3:93:f7:
                    bf:82:61:8d:bd:bc:7e:9c:9e:c2:09:9d:07:fe:a4:
                    c9:e4:cb:82:9c:32:1c:1f:77:72:25:3f:4f:48:ff:
                    0a:5c:f4:85:79:c4:8e:26:c0:bf:96:33:fa:96:ce:
                    b6:b1:9a:55:e3:68:22:36:3b:f6:2c:a0:91:d1:52:
                    cc:fd:ca:ec:26:1c:de:fb:2c:d2:ab:ee:c9:44:3c:
                    c4:da:7f:8f:fa:3b:60:13:8a:17:e7:5b:f4:25:2b:
                    2f:1c:0e:5a:6e:6d:11:59:84:e1:e6:b9:d6:06:4f:
                    02:24:c2:c7:c6:b6:0e:2e:30:c8:3c:9a:28:89:30:
                    4f:f4:d4:19:10:f9:58:26:8a:48:07:e2:3c:ed:8b:
                    14:a3:76:92:1a:32:f1:f7:8c:09:4a:70:8d:cf:c7:
                    b2:bd:44:07:e0:c0:0b:ae:25:f3:5a:f5:40:b5:27:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:6A:90:9F:1B:EC:58:F9:06:40:1D:43:2E:46:7B:3A:CE:B6:68
            X509v3 Authority Key Identifier:
                keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:84:d1:83:08:fc:76:78:67:a3:87:f3:e6:0d:c8:bc:0e:
         4e:ef:12:56:f6:63:89:b8:88:ff:82:4b:ba:d0:22:c2:6e:41:
         a3:e0:90:e9:21:8d:58:23:62:8d:f1:8a:e8:c8:6c:c7:af:6c:
         d4:d4:7e:bf:5d:b7:e1:e2:ec:d4:bc:4d:f4:67:bf:46:eb:8c:
         f0:a3:e9:41:0c:15:7d:bc:0f:14:cc:d7:a1:37:74:f1:6f:79:
         9b:72:2f:cc:35:8b:02:a5:93:d1:9d:71:18:37:29:11:3e:31:
         51:75:7d:b5:a3:4d:db:04:09:39:77:80:ee:ff:d0:ff:97:f5:
         4d:ea:f0:cc:f0:5f:e0:4b:22:11:10:0e:e7:ec:ea:55:55:9a:
         86:93:99:08:ae:df:68:a1:28:90:ca:70:c3:10:58:9c:98:56:
         d0:8e:3e:22:06:18:55:0e:4a:2a:a5:eb:c0:3e:c6:c2:8c:aa:
         69:a1:61:84:cd:6f:9e:f0:50:fb:28:0a:c8:7b:40:65:4a:7b:
         92:41:c9:d1:3e:10:48:00:77:32:e1:8c:a5:10:e6:04:de:79:
         69:2f:a5:e7:88:f0:6c:f6:04:82:c6:0b:6e:a0:77:81:fe:b1:
         d8:35:69:bf:71:a9:e8:ee:df:82:3d:29:c9:3d:39:ca:0e:00:
         e5:4a:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----