Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File:                     aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier:          6wRIUN//3vAg7pLIUfloDdu/UN5Ull9iC8TYWoJr80g=
Subject key identifier:   A5:8A:D9:4D:D9:86:2B:A9:03:85:3F:89:AA:32:96:D9:EA:35:21:EA
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer:       /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial:       01962E2B48C38C8A78326A78ABC97CDCAF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number:          1198
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: ufDt7SDVWg0yZCO7BqWDq6mPMbhZ5ccazZ0fdkWDD9s=)
                          2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:48:c3:8c:8a:78:32:6a:78:ab:c9:7c:dc:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=a58ad94dd9862ba903853f89aa3296d9ea3521ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:4f:11:85:e1:f8:5f:2c:78:bd:6e:7e:d1:
                    bd:89:27:5f:c0:02:4e:4b:9e:73:9c:bd:fd:6c:1b:
                    a2:9c:67:04:19:db:23:c8:9e:7f:cb:24:42:86:89:
                    39:ab:6f:40:0c:9e:09:39:e5:04:20:f7:ad:8e:b7:
                    bc:8c:2a:eb:a7:9d:46:9f:dc:21:24:ac:26:26:6e:
                    46:e0:56:e9:fd:82:4f:15:4b:57:18:6c:08:63:60:
                    d8:5b:af:65:5a:34:1b:78:cf:fe:33:0a:39:4c:7a:
                    d1:45:80:74:8d:a4:97:7a:00:24:15:82:56:20:8e:
                    16:d8:28:db:2c:78:1e:24:66:09:1f:3a:10:e5:61:
                    30:b2:95:b6:a2:75:f6:10:1c:dc:21:2a:a1:7b:62:
                    eb:61:a4:4c:4b:4d:d6:f9:5d:9a:fc:cc:44:e8:e0:
                    bb:c6:a1:92:cb:c9:a1:9c:bb:b8:aa:92:a4:f6:a2:
                    cd:de:30:41:01:5f:77:b0:d6:0d:ec:3e:41:db:76:
                    89:dc:66:53:30:12:5c:8c:b7:bf:13:64:13:1f:fe:
                    cd:ff:55:ba:d1:97:1c:9b:6b:0f:58:b3:ed:f6:0e:
                    72:44:94:2d:5c:af:65:db:a6:4f:ea:09:6e:2c:26:
                    2e:b6:22:6e:5b:b4:27:ec:86:4c:88:81:4e:cc:c2:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8A:D9:4D:D9:86:2B:A9:03:85:3F:89:AA:32:96:D9:EA:35:21:EA
            X509v3 Authority Key Identifier:
                keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:26:0d:6d:96:4a:dd:ce:de:b3:aa:1a:50:49:0f:f8:cb:16:
         b9:52:f3:23:d3:6f:d8:11:cd:12:39:67:fe:27:c1:4a:21:21:
         c0:3b:e1:ca:6a:13:12:4a:92:bf:c2:5a:17:86:0f:5a:b6:80:
         65:47:9a:c0:83:77:ff:03:e9:55:cb:e4:dc:aa:d0:50:8c:b4:
         96:c0:a6:5a:9f:dd:80:c5:36:e3:5d:5b:e1:48:a1:a9:2a:b3:
         ee:5b:96:80:a6:cd:fb:33:2f:31:1c:e2:b6:9a:ba:87:34:50:
         d1:24:77:d6:a6:d9:c9:f6:4b:1f:0a:aa:22:79:c7:f8:ee:01:
         50:10:d9:ae:2f:9a:ea:e6:0d:4b:5b:74:a4:de:28:24:fc:c4:
         b3:ad:63:f0:6c:98:7b:0f:3f:d9:31:70:87:1e:52:01:45:3e:
         49:c6:29:7e:52:a9:b5:6b:e0:6e:7b:a8:a8:71:79:61:46:a6:
         c6:3e:f2:99:de:f9:1d:5c:ef:c1:c4:7d:4a:c8:0e:06:e2:9e:
         d4:cf:b9:22:87:7b:f7:80:00:6e:dc:fc:e2:c4:3d:20:12:8f:
         4b:55:94:ca:2d:31:56:be:aa:ee:70:23:f7:ba:b6:65:7b:ef:
         8e:bf:3a:9e:cd:f1:c2:e7:64:73:00:0a:49:01:5e:43:81:ad:
         ba:6d:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----