Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File:                     aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier:          QX6FbwjHXQ/xN62PubI5cqvizW/Ziqe3OiTmo44mPCo=
Subject key identifier:   2C:46:1A:48:43:01:00:3B:B4:59:16:5D:4F:F8:CE:F3:08:08:EE:CC
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer:       /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial:       01962DF3EDE5E7719A1F9E23264ED987DD58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number:          10AF
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
                          2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 7Sw7vfvTK0nw3SrBTdl3PS2iCooHUGC4Skgfw1JdHWM=)
                          3: wfdlsKAAvesnWvTDvia3MLYX62E.roa (hash: /q1g066kiwFYosKzhe1K4+rG1+igVMTmtZs6afix28U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ed:e5:e7:71:9a:1f:9e:23:26:4e:d9:87:dd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=2c461a484301003bb459165d4ff8cef30808eecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:04:55:cd:3a:f5:ec:49:6a:c7:ce:37:74:
                    0a:94:af:43:e3:ab:0a:ec:6e:a2:61:b0:07:94:87:
                    1f:c3:73:53:be:d4:eb:7a:b2:1a:23:eb:53:da:02:
                    57:bd:74:f9:72:d9:ac:dc:41:03:cb:cb:35:a6:f2:
                    99:d9:d9:f6:e9:83:28:f1:b2:cb:8a:d1:18:66:bc:
                    57:ac:ae:44:c2:13:f3:e3:3a:22:09:e4:b7:13:d6:
                    fe:2a:0c:d5:52:37:eb:b7:4b:94:23:11:22:80:32:
                    44:c4:60:a8:a0:15:9c:28:fc:9c:77:55:c2:e1:51:
                    e8:b1:b9:c8:04:8e:47:86:d9:83:ce:3a:65:2f:f7:
                    a7:ed:c2:c4:d5:57:8a:ab:da:98:d3:69:d5:c4:83:
                    ed:6c:41:f9:d5:b6:a9:15:3a:88:72:f7:11:3d:9b:
                    a8:65:f7:23:e0:37:b5:c4:6c:d6:00:48:16:bf:44:
                    98:8c:b3:36:28:e6:19:39:91:40:bd:7a:42:09:3c:
                    04:47:ef:f7:d7:53:37:11:8e:b3:e2:f3:1e:79:84:
                    07:57:aa:c8:c3:b9:4c:53:f3:95:68:40:58:eb:f6:
                    1d:9c:91:be:d2:a7:4f:0f:c4:6c:b0:a7:6a:19:43:
                    c9:08:cc:30:fc:66:72:25:3c:6a:4c:20:e6:32:1e:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:1A:48:43:01:00:3B:B4:59:16:5D:4F:F8:CE:F3:08:08:EE:CC
            X509v3 Authority Key Identifier:
                keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:94:90:c6:89:e1:a9:43:1b:54:c2:c7:ee:68:0a:97:36:
         1f:5b:82:1f:08:d5:84:ce:89:8f:a0:20:6a:37:c6:63:84:9d:
         4e:4c:90:d0:8b:ff:49:4f:1d:77:f0:b6:a6:40:10:bd:d8:17:
         60:e5:da:7a:d9:a1:eb:9c:b3:00:80:35:d1:ed:89:b3:68:ea:
         1c:ee:d5:3c:d0:42:46:03:cf:57:bf:2c:4f:32:14:b2:45:85:
         9e:00:5c:36:fa:9a:65:d6:65:68:e0:11:16:13:0d:de:d9:21:
         30:0e:d3:9d:71:f3:ba:02:ef:76:17:7e:5c:b8:2c:78:95:d0:
         2b:fd:e9:21:0a:73:06:d3:1b:e0:d0:c6:b2:44:da:c2:46:e1:
         67:06:5d:b0:d1:a8:3c:c9:34:af:bd:0f:02:0a:6a:3d:e5:39:
         20:57:09:c5:2e:cd:64:2a:d9:5f:cd:fe:31:3e:19:c4:1e:14:
         b4:d8:33:a4:31:b2:6b:95:c6:8f:4f:c3:31:be:10:6e:2d:7c:
         47:f1:79:db:44:db:92:bc:e5:3e:d0:4a:2c:30:f6:02:2a:dc:
         49:47:b2:76:99:f3:60:30:fb:c3:40:13:0b:4d:1f:62:80:cd:
         94:60:d3:7d:33:aa:0a:6f:67:e7:81:4d:69:1f:08:82:1f:be:
         41:03:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----