Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File:                     aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier:          pmnrksgEvxCWIrObUY7xaC7Y7TydJFrdvLe4I3D0rQU=
Subject key identifier:   45:80:03:7B:BA:0D:9F:8F:60:40:BC:92:18:42:5C:26:51:3C:BE:D4
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer:       /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial:       01962E999439169FD579385816F17D40CE57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number:          11
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: 4ZnJHnXi49rf87dpRbtBmbdLunnrwFEM/rjyCtMcX7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:94:39:16:9f:d5:79:38:58:16:f1:7d:40:ce:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=4580037bba0d9f8f6040bc9218425c26513cbed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:f5:75:4f:11:c0:af:fd:b6:5e:f2:aa:9a:
                    b5:4b:a5:e0:4a:90:62:38:00:4c:ca:71:b0:87:7d:
                    c2:4f:e2:50:cb:05:19:b7:ac:8d:9e:2e:70:cf:15:
                    66:5b:54:7e:50:6f:6e:eb:de:68:20:07:6f:27:71:
                    cd:55:dd:4a:bb:44:61:f8:5d:29:68:17:29:da:5e:
                    81:b8:f2:2a:ce:a4:64:64:95:73:d1:f2:ac:df:2b:
                    f0:d1:4b:08:f4:38:e0:f1:5e:8a:45:ce:12:89:f9:
                    b2:a5:82:47:57:d6:7d:ad:92:01:df:23:1e:db:a1:
                    d8:b1:93:ac:ec:08:66:83:96:c9:d8:9e:ed:75:7d:
                    98:0f:09:31:64:6f:fb:c6:1c:ee:25:0b:a5:81:96:
                    0f:c7:f6:6c:54:8e:1f:60:98:54:48:1b:47:1f:8e:
                    4d:5d:94:5d:5c:25:a3:41:e9:35:48:0c:a9:21:c4:
                    24:59:4c:cf:f5:26:30:49:56:b7:ea:88:b3:72:df:
                    a8:9c:80:9a:13:6e:23:a8:6d:73:6e:6e:21:79:57:
                    94:2c:97:f0:7b:c4:7e:ec:3c:c4:c2:7d:f0:10:71:
                    07:30:10:3a:2f:31:34:39:f1:16:26:7e:0a:49:62:
                    e9:1a:55:44:d1:c8:4b:25:e6:9d:8f:5a:e8:95:64:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:80:03:7B:BA:0D:9F:8F:60:40:BC:92:18:42:5C:26:51:3C:BE:D4
            X509v3 Authority Key Identifier:
                keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:3b:b8:02:6e:c8:ff:3b:12:8b:6d:30:74:80:58:32:9e:
         03:ef:93:c4:e9:e6:64:d1:b4:49:ef:15:01:3e:84:41:5a:b5:
         b3:c3:6f:fb:0a:a0:b4:81:c8:e3:7a:44:89:00:8b:ed:d7:23:
         47:ba:53:86:90:4c:0b:f7:2b:0a:93:f4:af:7f:cb:8e:c1:2e:
         bf:b0:4d:6a:52:f0:ba:39:e0:88:b3:db:90:67:1b:e6:fc:de:
         b7:65:63:93:4b:a5:36:7b:2c:67:6b:a0:6e:c8:74:73:0c:39:
         49:33:59:c2:ca:f2:ed:d1:b8:12:5a:5d:7d:36:7c:26:16:d6:
         f5:93:c5:29:4c:a0:e1:fd:e6:a0:06:23:ff:ba:c5:da:c4:38:
         41:96:32:4a:5b:18:24:57:d9:30:a4:f3:fc:f5:37:44:f0:d1:
         31:03:36:db:3c:d0:52:ce:92:90:9c:49:44:1c:b7:44:a2:88:
         b5:81:63:ee:b5:62:92:4f:a3:cc:f8:a9:7a:02:ca:b1:dc:96:
         10:38:74:df:cf:ea:a3:ca:b0:53:ad:c3:20:ec:19:ef:46:80:
         5a:71:e4:13:10:b5:7b:58:9f:ca:1a:6f:39:df:bc:f3:9a:66:
         7d:2f:11:86:10:b0:b8:f0:da:06:83:28:4e:4f:99:33:55:f6:
         32:e5:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----