Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File:                     10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier:          gkfnBCl9kA5gdELidCrjAtUFZQR+uj2UmUvzGOQ+4Lk=
Subject key identifier:   67:94:A2:CB:9B:22:9A:3D:CD:2B:FB:B6:DE:1E:B7:CC:38:F6:61:6E
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer:       /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial:       01962DF4121C768BE3BBC9B0BEB2F1663360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number:          0669
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: hj6MbuuAy2/lPP901pgxjzDIyugNovDqemPGjncufY4=)
                          2: Jj1HHZ3M2IWqEVr2BMPp4ypDwcI.roa (hash: cgzJBvOGYHM0ug0D/FFBZa1jcNvWqnCErJy8L2Lko1U=)
                          3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:12:1c:76:8b:e3:bb:c9:b0:be:b2:f1:66:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7401e0249418b357547268824f6244925d8db39
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=6794a2cb9b229a3dcd2bfbb6de1eb7cc38f6616e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c7:e9:81:19:e1:37:8d:db:62:b8:0e:40:06:
                    84:7a:f0:38:b4:2c:d8:e5:19:f7:02:6f:40:d5:07:
                    24:31:9f:0c:c9:d5:c9:73:2e:4b:c9:60:f8:78:cc:
                    05:80:60:af:de:09:2c:5d:36:40:fc:0e:8a:75:fa:
                    9f:47:d6:34:95:28:cd:19:fa:83:33:7d:86:b6:18:
                    3a:98:54:d0:ea:2e:7f:a6:48:c8:9a:be:c6:d8:26:
                    4d:13:17:88:40:bc:9d:0b:df:50:60:7d:07:df:30:
                    e8:2b:5b:53:6a:47:ec:85:f5:c5:59:0d:ff:0a:0c:
                    ab:28:ff:4f:24:f8:9a:1e:ce:7a:90:6e:03:8e:8b:
                    e6:d9:bf:2a:96:d9:f5:5e:ec:b4:d8:06:1e:02:52:
                    db:a1:4b:5b:95:e4:c6:b2:1c:2a:16:b2:45:c6:3a:
                    e3:c5:4d:fe:4a:aa:41:70:01:0a:0d:e3:27:2c:2f:
                    25:b2:ba:69:61:22:9e:43:34:f6:9c:95:27:19:00:
                    15:b4:fd:60:a9:41:12:78:03:be:db:c0:da:3e:39:
                    48:bb:77:e3:e0:08:bc:43:c0:da:c2:63:2a:dd:96:
                    e8:93:7e:7c:5c:86:83:f1:28:06:e8:d9:b9:de:59:
                    9b:ba:50:36:ce:b8:8a:ec:73:75:ae:3b:ea:e2:77:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:94:A2:CB:9B:22:9A:3D:CD:2B:FB:B6:DE:1E:B7:CC:38:F6:61:6E
            X509v3 Authority Key Identifier:
                keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b2:a2:45:3e:3e:3f:bf:7b:46:44:4c:da:de:28:25:f9:a6:
         6c:68:74:10:57:ad:1f:35:ed:87:3f:78:31:06:61:b0:f6:0b:
         d5:cc:62:56:30:3d:7b:ce:27:af:32:cf:88:57:58:9a:bb:8e:
         83:b8:6c:1c:0d:9f:92:50:5f:e6:c2:61:ea:43:d2:a1:d0:61:
         da:40:d9:13:6f:a4:df:2e:67:3d:1c:c9:ad:da:5e:1b:66:7c:
         9f:7b:cc:52:e0:4a:4c:53:84:2a:35:8d:9b:f9:a1:15:c3:86:
         90:4f:15:71:11:47:20:7b:06:06:98:e1:1c:1b:76:40:20:40:
         86:8e:d4:23:73:64:fa:2b:17:be:e2:f7:3a:7c:b3:23:ce:36:
         db:d6:cc:11:cf:07:51:39:86:1c:9d:60:90:f6:a2:98:b7:da:
         af:93:b3:50:01:bc:4b:19:73:4c:52:f0:4f:9a:4e:08:bc:ce:
         7c:60:02:7b:e8:4e:3b:3b:74:34:eb:fa:d9:56:63:b1:dd:3d:
         95:e3:13:7d:08:3c:8e:8e:06:7d:04:57:ef:b5:b4:3a:83:48:
         32:d6:2d:31:3b:bf:e2:7b:c8:b0:6a:1a:84:11:2c:ed:bf:3b:
         a0:90:94:ee:b5:6a:75:98:e4:a3:fe:f4:4e:df:cd:48:de:c8:
         3e:86:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----