Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File:                     aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier:          E13PoYOpOSknpuKPSUEwQLQgT1hXxxJiQ0Ol3lET+oM=
Subject key identifier:   3F:77:DB:28:ED:AD:51:C3:04:08:73:E5:7D:47:BF:BB:C7:21:AF:D4
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer:       /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial:       01962F7419C2DB3FB3A3A6012CB2945FC110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: 7HOJ3G2wGg3bBmch+9g5dL6U14luQ/vbGTEhaHNTdyc=)
                          2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:19:c2:db:3f:b3:a3:a6:01:2c:b2:94:5f:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=3f77db28edad51c3040873e57d47bfbbc721afd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:b5:04:f9:6a:6b:4e:fe:c3:1a:07:4a:83:
                    da:e2:76:6e:77:3d:3f:bb:b1:76:a6:c8:23:c6:2a:
                    00:b5:90:46:e5:8c:ba:81:51:ba:69:82:fe:0c:ab:
                    86:13:e8:14:b2:2a:3a:09:8a:cd:b7:ff:fd:4e:94:
                    a5:6a:89:74:05:7c:70:60:d3:b1:fe:67:af:5a:53:
                    9d:52:d1:e5:75:52:de:40:d9:db:88:9d:39:4c:33:
                    19:50:a0:5c:4d:71:7b:4f:63:b6:97:47:33:92:7a:
                    ee:8d:04:4a:76:8c:84:8a:e0:25:3d:0a:5a:2f:b7:
                    39:6a:bd:13:98:2c:de:89:f5:5b:f7:f1:56:4b:1b:
                    0e:85:ec:74:6d:40:2a:ce:bd:3e:58:08:75:d6:b8:
                    c1:25:ec:a2:67:d1:4f:16:ba:34:9f:f8:c3:59:b2:
                    aa:32:84:38:44:8e:32:45:98:cb:8f:91:73:40:b0:
                    3c:af:d0:b3:41:50:f2:5a:0f:21:33:48:30:8b:d3:
                    d0:b3:ae:7d:b2:06:4a:13:a6:78:b3:01:6c:24:53:
                    cd:bd:cf:a3:7f:db:68:fd:07:48:4c:6c:fb:cd:dc:
                    8d:f6:19:d9:85:38:f0:6c:7f:af:43:a1:d0:3b:2a:
                    29:c6:51:46:06:1c:70:15:e8:e1:d6:84:69:2f:45:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:DB:28:ED:AD:51:C3:04:08:73:E5:7D:47:BF:BB:C7:21:AF:D4
            X509v3 Authority Key Identifier:
                keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7f:47:d9:3f:d7:de:64:00:40:97:2c:f5:f1:92:4f:a6:fa:
         8d:78:1c:bd:21:15:d6:94:6c:ce:84:b2:d6:33:3c:ce:f3:3f:
         54:b6:11:ad:e9:f1:a9:b6:b3:49:40:b9:b6:74:7b:4c:8c:0f:
         f1:2f:6a:ec:2b:b6:c2:77:f2:fe:8f:45:56:b8:1b:e1:51:a3:
         48:6b:16:d9:f5:b0:41:c2:a1:fb:e8:1f:84:a9:29:9e:4d:ae:
         bd:a9:a0:1e:3c:57:d1:7f:29:57:2d:d7:29:b8:6e:4f:a1:14:
         b5:df:d1:c5:01:69:8f:0d:f0:3c:a7:be:df:30:4c:00:66:b6:
         c3:00:3f:06:8b:a7:fe:fb:ed:6b:df:24:aa:f8:f2:01:b3:f3:
         60:71:73:ce:2c:2c:60:fb:2e:5c:5e:a3:d4:dc:75:53:9e:3f:
         70:ed:2c:84:a0:00:b5:c7:ee:00:ae:ad:9a:e1:48:4a:c3:7a:
         ec:3d:51:a8:f1:1e:95:7b:a2:c1:e4:a4:13:42:b6:e4:71:97:
         ef:94:3d:03:44:00:51:cb:a0:c1:5d:95:e9:42:2c:3c:c1:91:
         80:ce:3a:ac:ba:82:07:b1:06:7f:da:c6:6a:92:19:a3:82:89:
         9f:f2:1f:41:86:bf:cb:47:07:f4:04:96:2f:c0:fc:df:81:50:
         1f:11:ee:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----