Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File:                     _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier:          //B9U9hTdLKcOjJLSslngr90twOi55L4SFSInuPfkzc=
Subject key identifier:   AA:5C:3A:86:5D:B9:F7:5B:1C:DE:BA:49:47:49:1B:46:D4:B2:79:2C
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer:       /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial:       01962F0672CC27CD0C1EE51DA4A51CDD8016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number:          0F20
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: lR6ZG7+kNWK3RsIm6NkjLAV/O7nFr6lUnO+k/CSZboM=)
                          2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
                          3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:72:cc:27:cd:0c:1e:e5:1d:a4:a5:1c:dd:80:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=aa5c3a865db9f75b1cdeba4947491b46d4b2792c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:e0:19:98:5f:86:79:c4:02:99:77:63:c5:
                    58:33:b6:90:9e:fe:f7:71:e3:68:ac:0b:73:15:14:
                    98:cd:d9:4c:e8:e5:7c:20:6d:73:ce:65:5e:51:14:
                    87:af:4b:2e:7a:3a:47:6c:ac:cc:1d:53:22:cd:6a:
                    4f:5f:06:68:2c:56:76:17:f4:73:2f:80:fa:96:7f:
                    a6:e5:3e:b2:8e:b3:e6:8d:a2:e2:a4:f4:8a:5b:a2:
                    62:d9:b7:9e:32:9e:c0:8d:ad:9a:f9:60:0a:35:d8:
                    2e:c1:52:d3:eb:20:83:76:27:dd:2c:33:46:c4:ff:
                    99:f7:17:56:c9:4f:d3:c7:cd:4b:df:ed:37:87:c2:
                    36:1c:fd:5c:67:38:42:a2:f2:33:5d:45:01:d2:19:
                    92:24:d5:cf:c8:c6:f8:fa:d8:92:e6:75:0a:ee:dc:
                    79:57:c4:fc:e4:0b:f6:ca:6e:6e:90:bd:54:37:6a:
                    c6:fe:3b:e3:6c:c2:35:15:cb:63:7b:27:a1:50:ff:
                    ec:6c:0f:e7:77:e4:be:44:90:70:67:1a:57:16:bd:
                    05:12:4d:3b:06:cb:f4:bd:ac:28:b0:9e:22:cd:61:
                    c4:da:70:5c:00:d5:b7:e1:b4:c2:c0:71:56:99:74:
                    fa:69:1a:fe:bc:21:14:be:8a:1d:7f:a7:b1:a6:95:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5C:3A:86:5D:B9:F7:5B:1C:DE:BA:49:47:49:1B:46:D4:B2:79:2C
            X509v3 Authority Key Identifier:
                keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e9:79:87:ed:5c:cf:79:2c:54:2b:86:93:d6:dc:b2:d4:5e:
         a1:15:12:e0:83:35:8b:cd:d0:77:ab:e0:4f:30:53:68:70:3b:
         a3:31:9e:b0:b9:f0:9a:75:21:30:a0:33:79:ea:af:54:43:2b:
         ca:88:f4:b2:a4:76:68:38:a3:60:7f:bd:6a:72:20:ee:77:89:
         68:a6:60:ec:ba:71:82:52:d8:9d:b6:db:19:f6:f7:d0:ba:7f:
         4b:ad:a7:e3:41:53:92:4c:c0:2f:b4:93:ec:16:03:d3:aa:3a:
         11:f3:e3:53:cf:d9:ec:ad:6e:f4:26:34:e2:90:c9:6c:de:1a:
         75:26:5c:f7:f6:63:cd:13:95:63:cf:8c:50:2c:e6:97:f9:e6:
         85:07:8b:87:0f:47:02:c2:bd:ff:39:f2:92:fa:ba:5c:63:05:
         82:a3:ec:95:9b:89:1c:ed:49:1d:9f:73:47:db:f9:6b:25:3b:
         3c:53:dc:73:2b:f9:1f:6f:bd:46:96:7d:d5:1c:47:eb:1d:1f:
         d2:21:41:aa:e5:f3:56:cc:e9:3e:00:6d:e8:ef:1d:3b:31:90:
         84:22:dd:06:a7:11:41:27:5b:88:42:c8:a0:3b:f2:52:bd:6d:
         2c:b0:5b:fd:4f:8a:34:2f:ae:28:b6:29:ae:ee:4b:05:54:ed:
         0b:9e:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----