Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File:                     aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier:          a/g+MFpp7dutRChzAEufSKVWWTICWG7rynDlUFv7qTs=
Subject key identifier:   C6:8F:07:F5:98:9B:D9:C3:19:0F:60:44:66:38:3B:E3:CC:6F:52:5C
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer:       /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial:       01962F073BCBBA52C6C84CEDBF9AD1324E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: 1ikX92cBkm7W7rHfhLCtgqKM0d8.roa (hash: oY5BxXRyJZhAnRLwWm3V4CClsVP5JaJOwIydkhqNE80=)
                          2: 2KU1lG8tmW62eqBwxBBDds81m5A.roa (hash: DXWqInrCKLzcQadKZzuaDGdIbNbzO5YygQPkSyOtdqY=)
                          3: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: e2kvE5w9yD8MpFsbhcQLpCG1p1VZ6AF/FEIfx6mS32k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3b:cb:ba:52:c6:c8:4c:ed:bf:9a:d1:32:4e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=c68f07f5989bd9c3190f604466383be3cc6f525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:05:95:8a:5c:fc:92:6e:9c:f2:1a:da:22:
                    b2:b3:48:df:d6:12:bd:c7:b8:77:0d:b1:62:a5:0e:
                    d3:3a:12:73:9c:ae:f1:ca:12:9e:c7:66:e8:0c:4e:
                    fa:b2:6f:49:10:e3:d6:17:9c:54:16:8f:8d:65:09:
                    01:18:69:83:a4:15:47:34:1f:d6:08:75:ed:67:30:
                    3a:0f:6f:27:fe:94:10:2e:84:82:48:16:84:55:6a:
                    75:fc:87:41:50:7b:76:6f:7b:f1:e5:22:dd:7c:68:
                    b0:c8:20:0d:c7:a7:c3:03:63:aa:17:e6:3b:40:9c:
                    bc:74:3c:ad:6b:43:5a:14:7c:9d:bb:cb:5d:a0:d8:
                    53:24:a7:61:f2:9f:bb:e5:07:b3:c6:9a:3c:61:c0:
                    46:08:aa:a0:69:5c:d9:60:a5:7d:87:4b:cc:39:0c:
                    ba:20:55:f0:31:a6:56:b1:a3:c0:b7:2a:58:b5:15:
                    17:ce:33:42:f6:e4:17:24:ca:37:cf:f9:eb:df:ed:
                    2e:ea:61:2a:d9:4c:82:6d:f4:c5:d0:4e:2d:bd:95:
                    54:45:95:13:09:e5:80:db:b7:af:74:94:09:de:95:
                    c5:3a:c8:48:48:18:67:8c:13:9c:49:69:19:8f:97:
                    29:4a:2d:df:03:b6:66:b6:6f:3d:42:17:6c:bc:d2:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:07:F5:98:9B:D9:C3:19:0F:60:44:66:38:3B:E3:CC:6F:52:5C
            X509v3 Authority Key Identifier:
                keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:7f:97:84:dc:2e:3e:71:9c:b8:76:5e:cf:04:cc:5e:a2:
         01:96:42:a9:b7:33:e5:a9:d6:3d:c2:60:d4:2e:96:3b:7e:57:
         03:ff:63:b0:54:df:59:1c:b3:a6:ac:14:ab:b3:24:34:ef:b5:
         81:e6:e5:29:5c:6c:e0:48:7d:1f:70:28:c1:ed:b0:2e:a8:30:
         ba:29:2c:39:f0:08:27:39:0d:11:76:8e:24:07:f9:cf:35:87:
         ff:5b:3c:85:3f:3d:33:67:7d:5d:8d:43:a5:06:8c:94:a6:69:
         4a:53:07:ff:7b:ba:aa:90:9b:a1:58:c4:14:3d:69:ec:b1:b5:
         ef:72:1b:eb:c8:44:a4:72:64:3f:88:97:65:28:f1:ef:5a:00:
         8d:98:68:a1:c5:fb:07:19:a6:82:57:13:01:f6:00:fc:3e:18:
         3b:52:c3:c7:46:a2:0c:fc:cb:62:f0:51:91:6f:69:c4:29:90:
         e3:1d:1f:e1:9f:dd:80:47:34:fa:7c:db:1f:f5:6f:fa:f2:68:
         37:e0:7d:8e:0e:61:d3:c0:3d:12:49:72:76:c4:76:89:e5:ea:
         07:6f:c9:3c:5d:e3:82:48:b2:b6:28:1f:31:c3:66:fe:78:28:
         73:f7:3c:3f:f0:07:7b:fc:91:cb:c9:f3:e0:73:26:b3:e9:82:
         e4:14:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----