Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File:                     AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier:          bEQuE3uWqMsYVpol7TNMJvsDQnsYIexZ+0yBNRkknBA=
Subject key identifier:   06:48:0B:E2:56:43:B1:C4:0A:DF:E6:29:61:0A:50:3E:8B:A0:D6:55
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer:       /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial:       01962E2AFEBD52640AFD77A572977AD7BD44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number:          01CD
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: KICbN9MPCUJna88F5ohDp1kBQR7T2EQKSZDC7w/Hlhs=)
                          2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fe:bd:52:64:0a:fd:77:a5:72:97:7a:d7:bd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=06480be25643b1c40adfe629610a503e8ba0d655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:d4:d6:a0:64:0d:9b:96:d6:16:36:84:b6:
                    47:b0:98:51:26:9c:63:18:77:7b:5b:05:65:78:8c:
                    45:a6:06:9d:51:fc:20:cb:bb:3c:cb:4b:fe:1f:ad:
                    5d:56:89:3b:37:bd:57:53:62:71:2b:b8:20:d8:d5:
                    80:ff:72:b3:2a:da:87:7a:69:c2:5b:a8:9e:a6:0b:
                    eb:d3:a8:3f:e8:ee:35:1d:8c:5e:66:80:85:47:a5:
                    0e:29:82:75:5a:2e:e9:34:dc:82:f4:c2:ef:17:04:
                    0a:7f:ea:4d:66:da:ca:78:6c:ca:15:dc:34:ab:75:
                    82:e0:9e:8e:89:57:55:9e:3a:34:6a:0f:48:cc:7e:
                    bc:40:5f:f5:54:79:da:bc:a6:a1:54:ce:eb:5e:0c:
                    92:92:1c:5b:de:a2:bb:7f:85:8e:89:9a:17:c5:a3:
                    e8:ba:e3:e9:78:ee:91:dc:db:14:71:25:4a:b2:39:
                    07:40:92:fa:30:76:b4:09:62:92:f5:35:b0:ee:51:
                    e9:96:86:8d:2f:3d:09:6e:5d:4c:fa:2d:6d:98:e8:
                    d6:74:4f:9c:db:0b:05:51:cc:f0:14:18:a1:59:ee:
                    b1:1c:96:74:fc:65:b2:e1:df:ac:4d:49:b8:79:52:
                    d9:68:74:35:cd:51:73:0f:d4:f9:36:dd:51:64:3b:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:48:0B:E2:56:43:B1:C4:0A:DF:E6:29:61:0A:50:3E:8B:A0:D6:55
            X509v3 Authority Key Identifier:
                keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:05:61:9a:d9:02:4f:6c:4e:74:56:9b:03:1b:cb:68:bb:36:
         75:14:64:6a:fc:96:f6:08:f5:e2:c6:83:61:13:9b:f7:26:0b:
         90:81:1a:b5:86:32:b3:0c:e7:40:a4:7e:27:47:50:76:f6:da:
         7a:8c:49:7f:17:e7:50:e8:2b:1d:b4:a9:91:d6:97:dc:6b:a5:
         c7:f0:72:b3:e4:68:d2:51:e3:32:4d:f2:75:79:73:da:4d:80:
         40:ae:6b:e8:78:7a:1f:bc:8d:c1:75:3f:9d:33:a0:cc:47:e3:
         6f:cf:a9:6f:80:d2:44:6b:8c:45:e5:8c:03:cd:c9:1c:7d:87:
         d2:11:5e:fc:75:05:a9:cd:19:5b:f9:f6:75:14:94:b8:17:9b:
         02:6e:b1:88:ea:0f:e1:11:b1:3d:2d:08:63:96:8a:26:1a:54:
         0b:53:2b:24:6d:72:c1:5e:2e:ec:14:0e:5e:27:a8:8c:ba:f0:
         67:db:d8:96:ec:f4:61:06:1b:6a:e9:9e:30:a3:df:5b:73:05:
         49:56:20:08:17:36:7a:a0:56:62:e3:c4:9f:26:93:63:2c:6f:
         7f:89:24:fa:b5:5c:19:57:c4:76:13:37:cb:a4:0d:cb:08:f2:
         dc:b9:21:bd:fe:06:22:e3:4d:25:19:b3:f8:30:db:82:db:f1:
         85:68:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----