Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File:                     aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier:          A4bDHSwp3NIkKVxjTIKFCYZgPw9NTClYFoMvXhAxDTY=
Subject key identifier:   A3:9E:FB:A1:06:58:BA:0B:89:E9:EC:71:FB:73:3A:AE:F0:8F:02:E1
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer:       /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial:       01962E6176EEF4E67874D630D470A33EFF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: EckTuymqkgOhlT3jW+4u1Se3gFJO1B57DFiErh++6iU=)
                          2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:76:ee:f4:e6:78:74:d6:30:d4:70:a3:3e:ff:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=a39efba10658ba0b89e9ec71fb733aaef08f02e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:d0:02:c1:39:37:ab:fe:0b:e3:11:7c:2f:
                    a9:28:2a:29:72:a8:68:d1:2c:f2:50:2e:bf:56:5a:
                    d8:f2:45:a6:d9:3a:95:aa:49:4a:6a:cd:9e:39:97:
                    11:93:d7:86:45:bb:33:dc:88:29:a5:bf:46:7e:6c:
                    0a:cc:af:b6:9e:e1:92:f7:2e:ac:d9:f5:f0:e9:f1:
                    90:aa:42:41:79:22:d6:43:bf:8f:97:82:13:ad:63:
                    d0:f8:c9:5e:d8:63:72:09:82:15:5b:2d:df:cf:49:
                    fb:66:ea:6d:22:37:db:17:33:d2:39:19:a9:75:00:
                    ea:47:9c:78:af:1c:76:7f:b6:23:fb:25:b2:46:e0:
                    0a:16:27:20:37:70:77:8c:d1:98:a3:f4:3d:f1:51:
                    5d:60:ed:73:e5:a3:c0:e9:18:49:fb:78:c9:84:27:
                    ee:e0:c5:de:f4:74:39:87:b5:d2:5f:7c:b3:e1:9d:
                    4d:3b:d0:45:b4:59:e3:6c:c8:78:b6:d4:8a:a7:82:
                    30:25:50:00:49:e6:78:5f:26:e6:ef:bc:af:81:14:
                    30:cb:1c:49:0b:ad:d4:3b:f1:4d:26:5f:56:f4:59:
                    61:c9:15:ca:cc:40:9a:1f:e5:6b:ad:15:1f:72:d8:
                    af:7e:dc:e6:7f:f2:7b:6f:07:5d:51:1f:8f:41:ab:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9E:FB:A1:06:58:BA:0B:89:E9:EC:71:FB:73:3A:AE:F0:8F:02:E1
            X509v3 Authority Key Identifier:
                keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4c:91:ce:a7:28:07:e8:5e:83:1c:8f:bf:2e:40:9d:1b:45:
         94:d3:ea:b4:f3:27:7d:35:55:f9:cc:64:ea:d4:70:23:9d:b1:
         18:c2:7c:36:27:15:56:da:5c:34:09:c9:eb:58:1a:87:f9:3d:
         8c:e2:12:65:c9:49:2e:b1:0e:0b:32:57:fb:38:11:43:be:1f:
         eb:91:4b:fa:35:04:41:90:dc:bf:a7:9d:7a:dc:a2:42:4e:6e:
         dc:d0:15:0c:fe:4e:a6:17:a0:b8:64:87:1e:a2:53:5c:33:05:
         28:50:ca:65:b7:51:50:31:7c:ea:31:6c:9c:64:95:c0:f9:80:
         6c:66:79:3f:3e:a6:51:8d:7f:cd:73:8b:1c:64:b9:be:79:3c:
         4f:24:dd:b7:7d:64:16:01:81:05:4f:b0:7c:c6:4f:4a:bb:3f:
         d0:ed:49:cc:4d:e1:8c:32:8c:3b:bc:df:5b:83:ae:ff:05:81:
         9f:57:be:1e:01:01:b2:91:80:3f:89:d4:28:d1:4d:84:f4:89:
         41:e6:4b:52:41:93:ec:e4:db:3f:a6:35:cc:9f:44:72:5d:f4:
         72:83:22:8f:a9:fd:1d:39:eb:38:ee:20:31:1c:55:12:01:f7:
         f8:c4:a9:6d:e9:67:33:94:77:51:8c:7a:3d:c2:f9:48:51:c1:
         17:09:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----