Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File:                     aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier:          wOC8MYHP2qLcKYduYSbhVpxY6WOTDehBXihutqh7590=
Subject key identifier:   A1:11:74:C2:AE:1A:68:53:52:B4:CD:34:B6:E6:FF:9C:D5:52:66:B4
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer:       /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial:       01962F065C9234A72919A0F7640CE5555CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: NUwDMl0uceCiZ1NG2N5fFGq-BY0.roa (hash: W5ChUYN7fI8J46aNSrBpqKGe97TpyG1Z0u4eXPpkx48=)
                          2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: FIId6sbmA+QNOW/0Pu0gIpytk41Edw8lxPg138k5pN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5c:92:34:a7:29:19:a0:f7:64:0c:e5:55:5c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=a11174c2ae1a685352b4cd34b6e6ff9cd55266b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:d5:bd:ec:d0:1c:51:ed:84:13:77:b4:1d:
                    cf:a5:64:3a:34:ad:56:49:94:49:6d:9a:ae:d6:c6:
                    1e:a5:7e:cf:cd:10:82:b9:07:58:ef:0d:f9:2d:26:
                    00:14:45:70:14:10:d7:64:76:84:8e:2e:9e:a4:48:
                    2d:2e:1f:7d:6f:eb:8e:5b:33:f4:f2:2d:c0:fa:e2:
                    77:2d:fc:8e:52:96:9d:c1:81:7d:9c:94:e2:c9:9a:
                    98:9e:f6:58:31:fc:84:39:57:fb:4a:4a:11:a7:46:
                    31:58:f1:2e:da:b6:89:26:c5:f3:55:9b:ed:f4:7e:
                    fb:cd:b0:fb:85:ca:0b:34:ef:8b:98:b2:6c:c7:ae:
                    f4:a7:d3:09:18:3a:54:f0:40:d1:ae:63:42:92:2b:
                    af:a9:2a:60:29:82:bd:c8:38:19:ee:6f:40:2f:72:
                    e5:e8:13:1c:9b:2a:9f:0b:0a:bb:37:fa:8e:29:74:
                    66:02:7d:78:02:52:85:45:b8:60:f5:54:fc:34:50:
                    46:7b:a9:79:15:6e:0b:28:22:bc:19:42:d4:11:23:
                    a4:9f:28:5d:d0:4d:35:c6:3c:fe:d5:41:fc:8d:3a:
                    78:69:72:44:20:58:e4:37:b5:55:41:2e:0c:41:29:
                    4f:b4:56:1d:48:a8:5b:15:84:d2:74:a1:9c:f2:54:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:74:C2:AE:1A:68:53:52:B4:CD:34:B6:E6:FF:9C:D5:52:66:B4
            X509v3 Authority Key Identifier:
                keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:87:f3:3d:91:0b:b2:dd:5f:22:86:e4:0f:98:7a:0f:d5:
         5c:51:da:93:a6:fd:0e:dc:bc:01:3a:8b:95:03:58:ad:11:4b:
         74:4e:27:ae:a6:75:24:01:3c:c0:c4:fe:da:6c:c0:a6:ef:b8:
         98:54:95:11:8f:4a:00:05:ee:c1:5e:97:76:86:88:9b:79:9f:
         5d:b7:f3:58:3b:83:7f:b9:b8:5c:0b:3d:24:2c:8a:f8:5f:9b:
         f1:21:47:80:1d:10:99:06:ae:a3:48:a2:d1:35:45:aa:5a:cc:
         a8:d7:11:64:9a:ae:ba:0d:d6:10:b5:96:00:60:d3:f3:41:ff:
         3d:b4:5d:49:7c:07:bb:fa:43:55:87:ed:be:ba:f4:90:19:00:
         14:24:3e:0c:9a:ac:d1:9e:76:66:55:9d:b5:a2:d9:6f:52:92:
         da:fc:53:ba:dd:c5:99:d4:cc:47:bb:04:8d:df:c2:f7:e3:a7:
         96:95:fd:61:27:89:7f:60:9e:b1:01:46:c1:1f:8a:fd:e0:10:
         77:5a:82:59:d7:e0:0d:b5:3b:a0:e3:2b:07:1c:c2:4e:33:f9:
         36:e1:d4:34:1d:ff:7c:9a:cb:88:6b:e9:24:6f:97:7d:ae:cd:
         06:ff:da:fd:47:97:8c:2e:c2:c3:cb:95:a9:1f:bf:d2:a1:08:
         cc:fd:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----