Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File:                     aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier:          rihqNh5JeyrVZgwueR7IlQD1oaV3w6K4u4ZF2ADdqPI=
Subject key identifier:   E3:30:84:8F:64:A0:82:CE:58:2F:55:C5:47:B1:CB:5D:A8:19:75:3C
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer:       /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial:       01962F3D89774127C77D3CB60773CB16AE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number:          012B
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
                          2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: hr6M883JhRnBFW5hj/z9x4/PKby812Hugrr5vIoOc28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:89:77:41:27:c7:7d:3c:b6:07:73:cb:16:ae:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=e330848f64a082ce582f55c547b1cb5da819753c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:43:0e:d6:9f:e9:f1:c5:6f:91:e8:0b:58:
                    be:57:dd:ef:33:e6:e7:a3:66:1c:ac:77:cb:d8:db:
                    b6:2b:8f:a2:30:60:6f:62:da:cc:1e:65:b7:d8:c7:
                    8e:ff:ba:70:6a:59:12:64:01:5c:d0:61:2d:8c:f8:
                    bf:8b:9a:87:bf:6f:8c:43:7e:0d:dd:8f:53:b9:fc:
                    95:2c:bf:bd:6f:04:46:ba:dc:1c:d9:1b:56:a5:11:
                    37:d4:cc:ea:f0:44:29:fa:d0:ff:2c:54:b8:be:e1:
                    3b:19:07:e4:64:d5:9f:b1:68:b0:6e:a1:4e:71:a7:
                    94:89:7b:46:fb:9a:cd:af:0f:ad:3e:ef:8e:e0:4c:
                    44:98:8f:1b:79:ac:fa:38:7f:96:b9:4f:0f:ef:42:
                    af:5e:e6:e5:dc:77:03:ea:f5:d1:3f:5b:90:89:36:
                    5f:44:31:d6:87:4f:27:28:12:cc:e2:50:9a:23:cc:
                    45:dd:f3:75:61:8f:c0:bf:18:03:52:5d:97:73:d6:
                    49:b0:1f:98:db:56:69:f1:f6:15:59:3c:d8:72:77:
                    58:30:ec:17:ef:b3:60:95:af:74:a1:77:bf:c4:43:
                    4a:c1:ad:a3:ab:be:b5:86:32:7f:27:d4:ed:4b:b7:
                    ed:66:cf:d5:95:f6:ac:c0:f8:6c:9b:30:33:22:d1:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:30:84:8F:64:A0:82:CE:58:2F:55:C5:47:B1:CB:5D:A8:19:75:3C
            X509v3 Authority Key Identifier:
                keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:36:7e:0f:65:67:d4:7c:ec:ae:e5:f3:f6:a1:b5:90:03:68:
         1f:5e:17:c8:fb:9f:70:1b:9b:fe:50:ae:bd:10:c0:c3:5a:32:
         31:41:b7:3b:4e:c2:1a:8d:f7:90:56:d5:58:48:b1:23:d7:4b:
         2b:b4:d3:9c:90:42:26:64:19:bb:ee:bb:6c:f0:2c:48:f6:68:
         5b:ea:6f:c0:c7:fd:9b:94:4f:ed:7a:75:a3:89:7c:37:80:d1:
         bb:b7:f5:f3:1f:e7:0f:3f:f6:eb:ba:ae:88:85:b8:5d:7a:b6:
         3b:00:63:71:89:2b:7f:f0:49:1d:cb:57:0c:14:b0:96:24:2f:
         00:c4:1f:ec:15:8b:d0:5a:97:50:6d:24:64:b4:bb:d0:7d:9c:
         a7:95:44:9c:8f:7c:bb:bc:3c:f7:4b:53:24:b5:b5:1f:a9:f9:
         dd:6c:c6:75:a1:b6:c9:08:19:01:67:b5:64:28:27:1b:ba:9f:
         96:d9:65:fe:35:f9:c7:55:72:e2:8a:f6:90:29:6f:a0:00:32:
         86:ff:5e:82:fa:e2:08:75:52:8d:6c:fb:71:d6:ff:ab:f2:da:
         00:6b:4e:28:69:f7:4e:bf:2d:6a:90:32:e5:ce:5b:e3:d9:b3:
         75:cd:90:78:72:f0:dc:54:fe:f4:6a:fb:d5:8a:88:8e:59:81:
         1c:1a:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----