Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          NbgY2/kZU1PmXps4c6poDYYrMEdpVJyUxsW/VBH/dcI=
Subject key identifier:   E3:82:B6:7A:17:7D:F8:D7:70:69:7A:66:81:96:A6:58:EE:59:4B:68
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       01962F3D6ED501F243B959E20BC527F17318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          1216
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=)
                          2: UGR0Nm7XgEo_C52g4hZe_Rs5ZcQ.roa (hash: LA6rXbOmVl2jO/KpnJDcjc8gvW16w8N7yWXEbyRFi7Q=)
                          3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=)
                          4: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (hash: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=)
                          5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: JGoERO1iGypOJ1HWYbLTQSPG0hTRFqBeZL8RRSqOZSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:d5:01:f2:43:b9:59:e2:0b:c5:27:f1:73:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=e382b67a177df8d770697a668196a658ee594b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:a6:e6:9d:45:b6:5a:6c:ac:b1:53:ee:2f:
                    81:ee:33:89:91:26:f4:4d:83:46:6d:d3:95:1a:58:
                    dd:62:3f:0f:cc:a3:dc:26:a8:20:0c:e8:bb:01:a1:
                    94:6e:a3:ef:fb:97:9b:45:be:d7:a8:80:42:a8:54:
                    77:de:64:e0:86:b4:9f:db:d7:49:d4:1a:6d:31:7f:
                    62:c1:b8:4a:be:83:b8:34:51:e8:0c:79:cb:3e:be:
                    bb:2d:e7:0e:ec:de:72:f2:fc:53:19:2a:24:97:7e:
                    5a:5d:a1:20:e2:41:d7:b2:8d:61:e2:33:56:55:8e:
                    85:34:b0:a2:ff:59:f3:c7:43:42:8e:73:49:8e:6c:
                    82:b1:02:cb:3b:bf:ca:63:5d:c8:cc:50:cc:96:15:
                    a9:d8:36:bd:cc:c0:b6:f0:e4:f3:b3:b4:af:e8:f2:
                    63:24:b3:fe:cb:88:76:d8:3e:2c:45:b1:cc:44:24:
                    0a:0f:63:55:68:a7:3f:a9:21:67:e0:48:ad:15:08:
                    f7:cc:6b:67:73:5f:df:14:f9:84:98:de:c0:5f:19:
                    5d:7c:b2:bd:86:9e:a6:eb:17:b8:25:13:13:80:fe:
                    da:39:2f:0d:c1:94:e3:e6:30:df:f6:f6:57:fc:98:
                    60:d5:10:7f:70:38:f7:27:a8:1c:80:ad:ac:fa:69:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:B6:7A:17:7D:F8:D7:70:69:7A:66:81:96:A6:58:EE:59:4B:68
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:21:72:40:35:0e:02:83:d7:19:88:93:87:a5:77:92:02:9d:
         13:cc:84:d4:6e:34:6c:8b:98:d7:c0:77:67:93:49:68:59:9b:
         6b:71:cc:be:f7:63:b5:f3:97:38:43:53:ec:99:26:fe:f2:b4:
         fc:51:bf:b7:9f:c7:c4:85:39:13:10:e4:44:5f:9d:ce:d2:9c:
         bb:5c:30:81:54:e9:23:f4:ae:da:5e:5a:a9:29:c4:95:e4:ea:
         02:c9:2a:d6:df:a5:f8:4e:c3:6d:05:40:c8:7f:0e:7d:03:c1:
         23:bf:1e:b9:65:2f:f8:e6:7d:c3:80:94:37:5c:5d:e6:d8:bf:
         c8:bc:68:d0:65:23:2c:a4:18:30:53:68:7e:27:29:bd:83:9e:
         ad:7c:a9:b2:be:28:ef:32:27:2a:e2:90:3e:09:9a:81:1f:cd:
         ec:30:17:d0:f1:76:f6:33:eb:14:02:5a:79:86:d3:71:32:5a:
         7a:f2:9e:fa:7f:55:45:8f:f7:18:a4:cd:76:1e:26:94:33:f6:
         d4:81:00:93:9d:83:5e:a9:73:12:73:8d:f5:a7:7b:0e:4a:7e:
         fc:41:d4:e3:be:53:f5:b8:da:2c:04:8f:0a:a4:4c:fc:83:a6:
         14:5f:be:a7:9c:ab:95:31:40:08:95:09:c5:7f:ef:22:39:f4:
         d1:32:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----