Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File:                     Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier:          7n6UBulr2sevEzTCemmYkwVg54Qcga4SnXwihfj3OwQ=
Subject key identifier:   3E:54:16:04:67:6D:EA:00:AB:FE:34:5B:F5:94:BA:B1:6A:BF:6E:9B
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer:       /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial:       01962F3DC50585B7A91DC19AAA9FA4A5D7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number:          04CB
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: F1A9egK+aRET3Rppo5nl6Quf5vn+7GyQJI+Tz+YdpUM=)
                          2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c5:05:85:b7:a9:1d:c1:9a:aa:9f:a4:a5:d7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=3e541604676dea00abfe345bf594bab16abf6e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:05:09:7d:2c:3b:c8:05:5e:91:fc:2e:a2:
                    de:17:21:af:9f:30:4c:2b:b1:c8:e2:1f:1c:be:46:
                    96:8c:d2:31:6c:db:43:32:9e:09:78:40:18:73:44:
                    b9:33:2c:22:83:e8:26:b5:d6:e6:d3:b7:ab:cc:22:
                    76:19:9b:4e:17:de:f9:19:5a:45:76:7b:a6:23:a5:
                    1d:59:89:bb:9e:67:66:8d:bb:81:1c:a0:85:d0:30:
                    06:2f:ad:e3:1e:dc:f8:8e:38:a5:53:58:ea:f9:2e:
                    8d:5d:6a:50:08:cc:4f:49:e8:90:ac:82:2c:6a:64:
                    af:2c:e4:41:a4:8b:3a:09:a9:70:b9:a4:5a:97:8f:
                    90:22:30:17:e0:1d:6d:03:e9:d7:91:4c:a9:1f:e6:
                    7a:40:3c:01:2f:67:b9:7d:08:40:3a:b0:c9:53:5e:
                    7c:0a:e1:a7:bf:ac:f4:a4:14:75:0f:9d:5e:94:ee:
                    77:61:a1:a3:69:37:c2:2e:86:49:3e:95:9e:25:1c:
                    89:df:14:37:13:45:89:ae:e8:57:d6:6f:e0:a5:bf:
                    61:6d:4f:1a:4f:c6:02:c8:7f:e1:0f:48:24:e2:98:
                    81:28:28:8a:ca:d5:36:89:80:49:2c:a4:99:e5:97:
                    3b:a8:2c:21:4b:35:cd:3b:51:0f:e0:87:f8:47:a1:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:54:16:04:67:6D:EA:00:AB:FE:34:5B:F5:94:BA:B1:6A:BF:6E:9B
            X509v3 Authority Key Identifier:
                keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7a:45:e0:65:f5:0f:ef:76:f6:e8:44:4e:84:10:1d:e6:a4:
         07:15:3a:58:fa:bb:c3:13:0d:fc:c5:a2:5e:6b:f9:61:15:ed:
         4a:b8:13:c2:79:a6:48:72:d8:33:15:aa:de:ef:b9:0d:02:fc:
         69:7e:74:3a:9a:30:42:4d:4c:fa:bd:bc:61:d7:49:d9:e7:c6:
         45:e7:65:86:43:dd:98:26:a7:33:1a:58:5f:51:08:bb:c4:98:
         de:51:ba:14:72:4d:0e:dd:37:04:fe:77:c9:f6:28:ab:bc:4c:
         7e:4f:96:74:b0:63:e0:db:80:c3:94:2e:e5:aa:0c:d2:92:3b:
         87:4e:5c:ec:d5:31:40:25:17:d0:45:e7:d9:ac:83:ff:e6:fa:
         8a:ce:e6:93:b2:6f:3f:4e:7a:b2:bc:2c:07:14:4f:25:87:b4:
         7c:91:ca:98:43:50:78:71:3d:ab:2b:e7:1a:64:cd:02:2a:87:
         4d:33:a2:63:24:57:6d:8e:a2:43:54:7e:68:de:b9:91:fd:99:
         ac:87:cb:44:83:db:47:8a:9f:79:81:17:64:82:55:6a:cf:ec:
         c2:91:8d:65:ce:0c:34:62:a0:3b:d1:a9:e2:66:40:7e:99:33:
         0b:3f:e5:e6:79:2c:27:d3:5e:3a:be:1d:50:00:9a:cd:66:2d:
         59:6a:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----