Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
File:                     aBFGMD9XUewN_C71R6qyR69OaB8.mft (raw, json)
Hash identifier:          X84IKBBqJIBZvXwbvpNdb1xo9MjLTJMyvxUuhu9J8/4=
Subject key identifier:   D3:69:6C:99:B4:5A:8E:32:0F:BF:0A:7B:4F:6A:F5:AB:2B:1C:10:A4
Authority key identifier: 68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
Certificate issuer:       /CN=681146303f5751ec0dfc2ef547aab247af4e681f
Certificate serial:       01962E98A91036307199C78FA19CBEB8033F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: aBFGMD9XUewN_C71R6qyR69OaB8.crl (hash: Y0raTwuKxz4XNtCVgADDIeth+dZo7H5uSaZLvTGU1Mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a9:10:36:30:71:99:c7:8f:a1:9c:be:b8:03:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=681146303f5751ec0dfc2ef547aab247af4e681f
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=d3696c99b45a8e320fbf0a7b4f6af5ab2b1c10a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:65:f0:e9:7b:1c:f6:41:e6:b1:c9:30:d9:
                    ef:73:31:3e:f5:e6:1c:0d:34:b8:a5:27:fb:06:bc:
                    b1:9a:b5:ab:f2:00:42:c0:9f:9f:49:7b:79:83:57:
                    98:08:03:9a:b4:f0:d9:97:33:1f:c3:5d:c8:55:ee:
                    cc:74:84:3e:e9:d0:36:95:70:ff:b9:69:35:14:bb:
                    90:8f:17:ba:9e:4d:92:f9:4f:2d:bb:6d:6d:f2:5a:
                    c2:d1:e4:56:78:b1:76:87:47:6a:cc:13:a6:ca:27:
                    a2:1f:25:3f:1f:54:a5:52:45:29:d7:ac:c8:03:fe:
                    01:9b:77:79:42:37:f8:40:4c:8a:19:11:62:d8:3a:
                    4d:6c:66:9a:f9:d9:ac:25:63:4e:a0:38:e6:17:40:
                    f7:f5:7f:59:6a:88:0a:19:30:30:fb:9e:c9:f3:f3:
                    df:a2:31:a4:11:d8:31:c3:f6:37:6c:0d:26:ec:e2:
                    d5:a5:85:c4:da:78:1b:e5:01:a8:fc:b6:8a:6a:2a:
                    61:41:02:63:7e:53:23:cc:bb:99:b8:d9:96:d2:50:
                    d3:f9:15:d6:97:65:aa:ec:52:72:5a:b7:79:d6:f8:
                    1e:86:99:0a:7c:21:b2:ef:cf:90:8e:da:6f:5a:bc:
                    c5:e0:83:e5:42:1b:4d:a1:ed:c3:86:51:fb:01:a8:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:69:6C:99:B4:5A:8E:32:0F:BF:0A:7B:4F:6A:F5:AB:2B:1C:10:A4
            X509v3 Authority Key Identifier:
                keyid:68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:d6:18:00:ab:3b:10:e0:96:a5:1e:05:d1:dd:27:89:d2:
         dc:8a:0a:8d:28:e2:23:33:95:dd:4e:49:5a:d7:35:ed:29:22:
         8d:ee:1c:52:b5:4d:2d:72:81:d4:d3:19:ea:46:d3:9d:d7:56:
         a5:51:9d:1a:11:50:44:82:fb:6e:ba:76:bd:72:04:44:9b:c4:
         a2:17:d7:d3:99:f7:3e:82:1f:c2:dd:f4:88:b0:1e:86:b9:a3:
         9a:d4:ab:e8:aa:96:42:72:64:b4:55:27:27:38:8b:a6:85:2e:
         cb:68:17:7c:ee:5d:56:dd:8b:9f:d8:98:1c:b5:c7:c1:14:d0:
         05:80:30:d1:d2:a7:c5:64:2d:d9:8a:62:78:8c:f0:be:95:91:
         89:4d:0e:be:54:d1:f3:48:16:06:15:5d:ae:f6:e3:fb:e7:2e:
         61:d2:5b:f6:30:10:a9:c1:6a:a2:23:c8:70:54:87:55:71:16:
         89:58:50:38:fb:fe:75:c5:18:4a:52:3e:50:e0:e4:ab:d5:bd:
         f8:db:87:c1:c3:6c:78:88:6f:a1:51:52:28:a9:88:73:64:bc:
         95:22:0c:e7:9a:9f:80:7e:92:2c:d0:dc:70:79:a3:03:94:08:
         25:dc:b3:8f:2f:0a:b4:8f:96:5c:7a:fd:6c:45:cf:5c:a3:26:
         4a:24:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----